PT-2025-22713 · Nasa Core · Nasa Core

Name of the Vulnerable Software and Affected Versions: Nasa Core versions through 6.3.2 Description: The issue affects Nasa Core due to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', allowing PHP Local File Inclusion...

CVE-2019-5322

A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540. The vulnerability impacts firmware 16.08. before 16.08.0009, 16.09. before 16.09.0007 and 16.10. before 16.10.0003...

Malicious code in react-youtube-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 930546883aa218e28dc95d9e402e8af0737df76f72952337c765ce73ae6fab8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-4980 Netgear DGND3700 mini_http currentsetting.htm information disclosure

A vulnerability has been found in Netgear DGND3700 1.1.00.151.00.15NA and classified as problematic. This vulnerability affects unknown code of the file /currentsetting.htm of the component minihttp. The manipulation leads to information disclosure. The attack can be initiated remotely. The explo...

Malicious code in how-sezzle-works (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8357087de81359973557c6bb5ec8ded0959d60d77dc8a8da4807ae8f57f9222a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in linemtxworkloadui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bc869f0e5403668a9895197b876def013a0a60be9f956922a83a62e77c22f0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lavanew (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 574195b256d07782673f23ff2e7163f26dc2cadd4dafaf8ace366f77130bf4ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-4552 ContiNew Admin password unverified password change

A vulnerability has been found in ContiNew Admin up to 3.6.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /dev-api/system/user/1/password. The manipulation leads to unverified password change. The attack can be launched remotely. The exploi...

Malicious code in @klarna-travel-platform/travel-booking-shared-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f013426be635a2310d1320cacca5b4ce5067f6686d76993ed1ea4ef590315037 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dayjs-plugin-duration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38d6c09f6f8900e2be647537f5342bb545a0ee4b4affee0e47006cc43da3d489 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bffhfuruhejfhdj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 298612b0f8a60cff6f0e77495a9c7fbac0f7b5ebd47ed47eccd75917a0196972 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-18356 · NetGear · Netgear Ex6200

Name of the Vulnerable Software and Affected Versions: Netgear EX6200 version 1.0.3.94 Description: A critical issue has been discovered, affecting the function sub 54014. The manipulation of the argument host leads to a buffer overflow. This issue can be exploited remotely. The vendor was...

CVE-2025-3856

CVE-2025-3856 affects xxyopen Novel-Plus 5.1.0. The vulnerability is in the /book/searchByPage function, where the sort parameter is manipulated to trigger a SQL injection. It can be exploited remotely, and public disclosure exists. Connected documents consistently identify the vulnerable endpoin...

SUNNET Wisdom Master Pro 安全漏洞

SUNNET Wisdom Master Pro is a Wisdom Master management platform from SUNNET. A security vulnerability exists in SUNNET Wisdom Master Pro version 5.2 and prior versions, which stems from a course management feature that allows uploading of dangerous types of files, which could lead to the uploadin...

Malicious code in scatterpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4308e49dfcf49f89b83f3fb963bed64aed858409e2256b461e06686bbfbc616a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-3352

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-scdetails.php. The manipulation of the argument contnum leads to sql injection. The attack may be launched remotely...

CVE-2025-3331

A vulnerability, which was classified as critical, has been found in codeprojects Online Restaurant Management System 1.0. This issue affects some unknown processing of the file /paymentsave.php. The manipulation of the argument mode leads to sql injection. The attack may be initiated remotely. T...

Malicious code in monitor-inference-results (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a81996c10459a5786a55c906eda2f407966455557441d103e3d55c4ab53e1c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in debug11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 494ce30e156e31a77830da340b86accd5cfe85da1c6bbbe4073277d4980b3009 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in at-authorize-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17db7733ab98695568b1f41dba8b8b5d956a4fefa940f73863c0d2b1e2974845 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...