2720 matches found
CVE-2025-49890
Deserialization of Untrusted Data vulnerability in ThemeREX Organic Beauty organic-beauty allows Object Injection.This issue affects Organic Beauty: from n/a through = 1.4.6...
CVE-2025-7051
On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server. This vulnerability is present in all deployments of N-central prior to 2025.2...
CVE-2025-7051 N-central Syslog Configuration Insecure Direct Object Reference
On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server. This vulnerability is present in all deployments of N-central prior to 2025.2...
CVE-2025-7051
CVE-2025-7051 concerns N-able N-Central. Affected: N-Central deployments prior to 2025.2. Describe vulnerability: an authenticated user can read, write, and modify syslog configurations across customers on an N-Central server. This is an insecure direct object access-like issue enabling cross-ten...
CVE-2025-7051 N-central Syslog Configuration Insecure Direct Object Reference
On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server. This vulnerability is present in all deployments of N-central prior to 2025.2...
PT-2025-34268 · Solarwinds · N-Central
Name of the Vulnerable Software and Affected Versions: N-central versions prior to 2025.2 Description: An authenticated user can read, write, and modify syslog configurations across customers on an N-central server. Recommendations: Update to version 2025.2 or later...
N‑able N-Central 安全漏洞
N-able N-Central is a powerful, customizable remote monitoring and management platform from N-able. A security vulnerability exists in N-able N-Central versions prior to 2025.2 that originates from an authenticated user being able to read and write modify syslog configuration...
Exploit for Deserialization of Untrusted Data in N-Able N-Central
CVE-2025-8875 & CVE-2025-8876 How does this detection met...
CVE-2025-8876
Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: before 2025.3.1...
PT-2025-33490 · Fwdesign · Fwdesign Ultimate Video Player
Name of the Vulnerable Software and Affected Versions: FWDesign Ultimate Video Player versions n/a through 10.1 Description: Missing authorization allows exploiting incorrectly configured access control security levels in FWDesign Ultimate Video Player. Recommendations: At the moment, there is no...
N-able N-central < 2024.6 HF2 / 2025.x < 2025.3.1 Multiple Vulnerabilities
The version of N-able N-central installed on the remote host is prior to 2024.6 HF2 or 2025.x prior to 2025.3.1. It is, therefore, affected by multiple vulnerabilities: - Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code. CVE-2025-8875 - Improper...
Malicious code in n-landing (npm)
The package n-landing was found to contain malicious code...
Malicious code in n-safe-logger (npm)
The package n-safe-logger was found to contain malicious code...
Malicious code in @zalastax/nolb-passport-n (npm)
The package @zalastax/nolb-passport-n was found to contain malicious code...
Malicious code in @zalastax/nolb-google-n (npm)
The package @zalastax/nolb-google-n was found to contain malicious code...
Malicious code in @zalastax/nolb-node-n (npm)
The package @zalastax/nolb-node-n was found to contain malicious code...
Malicious code in @zalastax/nolb-qmuzik-n (npm)
The package @zalastax/nolb-qmuzik-n was found to contain malicious code...
Malicious code in @zalastax/nolb-json-n (npm)
The package @zalastax/nolb-json-n was found to contain malicious code...