Navis DocumentCloud <0.1.1 - Cross-Site Scripting Detection

Navis DocumentCloud plugin before 0.1.1 for WordPress contains a reflected cross-site scripting vulnerability in js/window.php which allows remote attackers to inject arbitrary web script or HTML via the wpbase parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Navis DocumentCloud plugin...

asmd (>=0.1.0, <=0.5.1), cloudendure (>=0.2.0, <=0.3.5) +5 more potentially affected by CVE-2026-59890 via setuptools (45.3.0)

setuptools PYPI version 45.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - asmd =0.1.0, =0.2.0, =0.1.3, =0.1.0, =0.4.3 - vpip 0.4.3 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...

asmd (>=0.1.0, <=0.5.1), cloudendure (>=0.2.0, <=0.3.5) +5 more potentially affected by CVE-2026-59890 via setuptools (45.3.0)

setuptools PYPI version 45.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - asmd =0.1.0, =0.2.0, =0.1.3, =0.1.0, =0.4.3 - vpip 0.4.3 Source cves: CVE-2026-59890 Source advisory: OSV:PYSEC-2026-3447...

asmd (>=0.1.0, <=0.5.1), cloudendure (>=0.2.0, <=0.3.5) +5 more potentially affected by CVE-2024-6345 via setuptools (45.3.0)

setuptools PYPI version 45.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - asmd =0.1.0, =0.2.0, =0.1.3, =0.1.0, =0.4.3 - vpip 0.4.3 Source cves: CVE-2024-6345 Source advisory: OSV:PYSEC-2026-1918...

ULCL Navis N4 Code Execution

The vulnerability of the ULCLight Client component of the Navis N4 operating system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

EUVD-2016-6752

Malware in sbrugna...

EUVD-2015-2895

Malware in sbrugna...

EUVD-2025-19054

Malicious code in bioql PyPI...

EUVD-2025-19055

Malicious code in bioql PyPI...

CVE-2025-5087

Kaleris NAVIS N4 ULC Ultra Light Client communicates insecurely using zlib-compressed data over HTTP. An attacker capable of observing network traffic between Ultra Light Clients and N4 servers can extract sensitive information, including plaintext credentials...

CVE-2025-2566

Kaleris NAVIS N4 ULC Ultra Light Client contains an unsafe Java deserialization vulnerability. An unauthenticated attacker can make specially crafted requests to execute arbitrary code on the server...

CVE-2025-2566

Kaleris NAVIS N4 ULC Ultra Light Client contains an unsafe Java deserialization vulnerability. An unauthenticated attacker can make specially crafted requests to execute arbitrary code on the server...

CVE-2025-5087

Kaleris NAVIS N4 ULC Ultra Light Client communicates insecurely using zlib-compressed data over HTTP. An attacker capable of observing network traffic between Ultra Light Clients and N4 servers can extract sensitive information, including plaintext credentials...

CVE-2025-5087

CVE-2025-5087 affects Kaleris NAVIS N4 ULC (Ultra Light Client). The connected documents describe an unsafe Java deserialization vulnerability and insecure transmission of zlib-compressed data over HTTP, enabling an attacker who can observe traffic between Ultra Light Clients and N4 servers to ex...

CVE-2025-5087 Cleartext Transmission of Sensitive Information in Kaleris Navis N4

Kaleris NAVIS N4 ULC Ultra Light Client communicates insecurely using zlib-compressed data over HTTP. An attacker capable of observing network traffic between Ultra Light Clients and N4 servers can extract sensitive information, including plaintext credentials...

CVE-2025-5087 Cleartext Transmission of Sensitive Information in Kaleris Navis N4

Kaleris NAVIS N4 ULC Ultra Light Client communicates insecurely using zlib-compressed data over HTTP. An attacker capable of observing network traffic between Ultra Light Clients and N4 servers can extract sensitive information, including plaintext credentials...

CVE-2025-2566 Deserialization of Untrusted Data in Kaleris Navis N4

Kaleris NAVIS N4 ULC Ultra Light Client contains an unsafe Java deserialization vulnerability. An unauthenticated attacker can make specially crafted requests to execute arbitrary code on the server...

CVE-2025-2566 Deserialization of Untrusted Data in Kaleris Navis N4

Kaleris NAVIS N4 ULC Ultra Light Client contains an unsafe Java deserialization vulnerability. An unauthenticated attacker can make specially crafted requests to execute arbitrary code on the server...

CVE-2025-2566

CVE-2025-2566 affects Kaleris NAVIS N4 ULC (Ultra Light Client). The vulnerability is an unsafe Java deserialization flaw that allows an unauthenticated attacker to send specially crafted requests to execute arbitrary code on the server (remote code execution). Per available documents, the issue ...

CISA Releases Eight Industrial Control Systems Advisories

CISA released eight Industrial Control Systems ICS advisories on June 24, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-175-01 Kaleris Navis N4 Terminal Operating System ICSA-25-175-02 Delta Electronics...