Unity Linux 20.1070a Security Update: kernel (UTSA-2025-422157)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-422157 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs It is observed sometimes when...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986530)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986530 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: fix potential NULL ptr deref in ncmbitrate In Google internal bug 265639009...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986632)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986632 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: fix potential NULL ptr deref in ncmbitrate In Google internal bug 265639009...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986965)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986965 advisory. In the Linux kernel, the following vulnerability has been resolved: CDC-NCM: avoid overflow in sanity checking A broken device may give an extreme offset like 0xFFF0...

EUVD-2025-21440

Malicious code in bioql PyPI...

EUVD-2025-13977

Malicious code in bioql PyPI...

EUVD-2025-21451

Malicious code in bioql PyPI...

EUVD-2025-21450

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2024-35825

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ncm: Fix handling of zero block length packets While connecting to a Linux host...

CVE-2025-52378

Cross-Site Scripting XSS vulnerability in Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below allowing attackers to inject JavaScript code that is executed in the context of administrator sessions when viewing the device management page via the DEVICEALIAS parameter to the...

CVE-2025-52378

Cross-Site Scripting XSS vulnerability in Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below allowing attackers to inject JavaScript code that is executed in the context of administrator sessions when viewing the device management page via the DEVICEALIAS parameter to the...

CVE-2025-52377

Command injection vulnerability in Nexxt Solutions NCM-X1800 Mesh Router versions UV1.2.7 and below, allowing authenticated attackers to execute arbitrary commands on the device. The vulnerability is present in the web management interface's ping and traceroute functionality, specifically in the...

CVE-2025-52377

Command injection vulnerability in Nexxt Solutions NCM-X1800 Mesh Router versions UV1.2.7 and below, allowing authenticated attackers to execute arbitrary commands on the device. The vulnerability is present in the web management interface's ping and traceroute functionality, specifically in the...

PT-2025-29563 · Nexxt Solutions · Ncm-X1800 Mesh Router

Name of the Vulnerable Software and Affected Versions: Nexxt Solutions NCM-X1800 Mesh Router versions UV1.2.7 and below Description: A command injection issue exists in the web management interface's ping and traceroute functionality of the Nexxt Solutions NCM-X1800 Mesh Router. The application...

Nexxt Solutions NCM-X1800: Operating System Command Injection Vulnerability

The Nexxt Solutions NCM-X1800 is a router from Nexxt Solutions. A security vulnerability exists in the Nexxt Solutions NCM-X1800 UV1.2.7 and earlier versions, which stems from a command injection vulnerability in the firmware update feature that could lead to remote code execution...

CVE-2025-52378

The Nexxt Solutions NCM-X1800 Mesh Router is vulnerable to a Stored Cross-Site Scripting (XSS) flaw in firmware versions UV1.2.7 and below . The vulnerability exists because the /web/um_device_set_aliasname endpoint fails to sanitize the DEVICE_ALIAS parameter. This allows an attacker to inject m...

CVE-2025-52377

The Nexxt Solutions NCM-X1800 Mesh Router (versions UV1.2.7 and below ) is vulnerable to a command injection flaw in its web management interface. The vulnerability exists in the ping and traceroute functionality, specifically within the /web/um_ping_set.cgi endpoint. Because the application fail...

PT-2025-29565 · Nexxt Solutions · Nexxt Solutions Ncm-X1800 Mesh Router

Name of the Vulnerable Software and Affected Versions: Nexxt Solutions NCM-X1800 Mesh Router firmware versions prior to UV1.2.7 Description: Nexxt Solutions NCM-X1800 Mesh Router firmware contains an authenticated command injection issue in the firmware update feature. The /web/um fileName set.cg...

CVE-2025-52378

Cross-Site Scripting XSS vulnerability in Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below allowing attackers to inject JavaScript code that is executed in the context of administrator sessions when viewing the device management page via the DEVICEALIAS parameter to the...

PT-2025-29559 · Nexxt Solutions · Ncm-X1800 Mesh Router

Name of the Vulnerable Software and Affected Versions: Nexxt Solutions NCM-X1800 Mesh Router firmware versions UV1.2.7 and below Description: An authentication bypass exists in the /web/um open telnet.cgi endpoint. This bypass allows an attacker to remotely enable the Telnet service without...