CVE-2025-55117 BMC Control-M/Agent buffer overflow in SSL/TLS communication

A stack-based buffer overflow can be remotely triggered when formatting an error message in the Control-M/Agent when SSL/TLS communication is configured. The issue occurs in the following cases: Control-M/Agent 9.0.20: SSL/TLS configuration is set to the non-default setting "useopenssl=n";...

CVE-2025-55117

CVE-2025-55117 describes a stack-based buffer overflow in BMC Control-M/Agent when formatting an error message while SSL/TLS is configured. Reported impact is remote triggering under specific conditions: Control-M/Agent 9.0.20 with SSL/TLS configured to the non-default use_openssl=n; and Control-...

CVE-2025-10231

An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a local low-level user to run commands with elevated permissions...

CVE-2025-10231

An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a local low-level user to run commands with elevated permissions...

CVE-2025-10231

An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a local low-level user to run commands with elevated permissions...

CVE-2025-10231 N-central Incorrect Default Permissions could lead to Privilege Escalation

An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a local low-level user to run commands with elevated permissions...

CVE-2025-10231

CVE-2025-10231 affects the N-able N-central Windows Agent and Probe. The issue is an incorrect file handling permission that, under certain conditions, could allow a local low-privilege user to execute commands with elevated permissions (privilege escalation). Public sources in the connected docu...

CVE-2025-10231 N-central Incorrect Default Permissions could lead to Privilege Escalation

An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a local low-level user to run commands with elevated permissions...

N-able N-central 安全漏洞

N-able N-central is an RMM platform from N-able Canada Inc. providing large-scale management, automation and orchestration capabilities for sophisticated MSPs and IT professionals. A security vulnerability exists in N-able N-central that stems from improper file handling permissions, which could...

Malicious code in @zalastax/nolb-babel-n (npm)

The package @zalastax/nolb-babel-n was found to contain malicious code...

Malicious code in free-coi-n-master-spins-kffgdfvgd (npm)

The package free-coi-n-master-spins-kffgdfvgd was found to contain malicious code...

Malicious code in free-coi-n-master-free-spins-kflefd (npm)

The package free-coi-n-master-free-spins-kflefd was found to contain malicious code...

Malicious code in @zalastax/nolb-_trivikr-test_n (npm)

The package @zalastax/nolb-trivikr-testn was found to contain malicious code...

MAL-2025-44302 Malicious code in free-coi-n-master-free-spins-kflefd (npm)

The package free-coi-n-master-free-spins-kflefd was found to contain malicious code...

MAL-2025-44303 Malicious code in free-coi-n-master-spins-kffgdfvgd (npm)

The package free-coi-n-master-spins-kffgdfvgd was found to contain malicious code...

PT-2025-36252

Name of the Vulnerable Software and Affected Versions: fullworks Quick Paypal Payments versions through 5.7.46 Description: The software contains a Cross-Site Request Forgery CSRF flaw. This issue allows attackers to perform actions on behalf of authenticated users. Recommendations: fullworks Qui...

Exploit for Unrestricted Upload of File with Dangerous Type in Najeebmedia Frontend_File_Manager

CVE-2016-15042 – WordPress Frontend File Manager & N‑Media Pos...

CVE-2025-48311

Cross-Site Request Forgery CSRF vulnerability in OffClicks Invisible Optin invisible-optin allows Stored XSS.This issue affects Invisible Optin: from n/a through = 1.0...

MINI-GV9G-5FQ4-F6M3

Bulletin has no description...

CVE-2025-7051

On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server. This vulnerability is present in all deployments of N-central prior to 2025.2...