EUVD-2025-15792

Malicious code in bioql PyPI...

MAL-2025-13403 Malicious code in @zalastax/nolb-px (npm)

The package @zalastax/nolb-px was found to contain malicious code...

Malicious code in @zalastax/nolb-react-px (npm)

The package @zalastax/nolb-react-px was found to contain malicious code...

Malicious code in @zalastax/nolb-px (npm)

The package @zalastax/nolb-px was found to contain malicious code...

MAL-2025-30908 Malicious code in px-colors-design (npm)

The package px-colors-design was found to contain malicious code...

Malicious code in px-colors-design (npm)

The package px-colors-design was found to contain malicious code...

CVE-2019-13927

A vulnerability has been identified in Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D with Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 All firmware versions V6.00.320, Desigo PX automation controllers PXC00-U, PXC64-U, PXC128-U with Desigo PX Web modules...

CVE-2025-1308

A vulnerability exists in PX Backup whereby sensitive information may be logged under specific conditions...

CVE-2025-1308 PX Backup Improper Sanitization Vulnerability

A vulnerability exists in PX Backup whereby sensitive information may be logged under specific conditions...

CVE-2025-1308 PX Backup Improper Sanitization Vulnerability

A vulnerability exists in PX Backup whereby sensitive information may be logged under specific conditions...

CVE-2025-1308

Technical details about CVE-2025-1308 are not publicly available in the provided connected documents. Monitor for future updates from vendors and security advisories before assessing impact, affected versions, or fixes.

PT-2025-22083 · Px Backup · Px Backup

Name of the Vulnerable Software and Affected Versions: PX Backup affected versions not specified Description: A vulnerability exists in PX Backup whereby sensitive information may be logged under specific conditions. Recommendations: At the moment, there is no information about a newer version th...

MAL-2025-3906 Malicious code in mobile-test-px (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6dd20264dd67f1ac8f83c8f321bbb06e1a3ab9b5e6d97b94d57d56dbb5c3a4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mobile-test-px (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6dd20264dd67f1ac8f83c8f321bbb06e1a3ab9b5e6d97b94d57d56dbb5c3a4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nativescript-gainsight-px (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a623f285a8491c50ebbad0ad2a62988fbf68724329f6d7b0a7d30b1bf44ded73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE-SU-2024:4053-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20241112 release bsc1233313 - CVE-2024-21853: Faulty finite state machines FSMs in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially...

PT-2023-10160 · WordPress · Maxbuttons Plugin

Name of the Vulnerable Software and Affected Versions: MaxButtons Plugin versions up to 1.26.0 Description: A vulnerability was found in the MaxButtons Plugin and classified as problematic. This issue affects the function maxbuttons strip px of the file includes/maxbuttons-button.php. The...

Siemens Desigo PX Devices External Control of Assumed-Immutable Web Parameter (CVE-2019-13927)

A vulnerability has been identified in Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D with Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 All firmware versions V6.00.320, Desigo PX automation controllers PXC00-U, PXC64-U, PXC128-U with Desigo PX Web modules...

Information leakage vulnerability of multiple Siemens products

Siemens Desigo PX is a building automation control system from Siemens, a German company. The information disclosure vulnerability in several Siemens products stems from the fact that the endpoint of the "Operation" web application that interprets and executes Axon language queries allows file re...

Multiple Siemens Products Axon Language Query Cross-Site Request Forgery Vulnerability

Siemens Desigo PX is a building automation control system from Siemens, a German company. A cross-site request forgery vulnerability exists in several Siemens products, stemming from a lack of authentication of anti-CSRF tokens or other source checks in the endpoint of the "Operation" Web...