PT-2025-48618

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID...

PT-2025-48619

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A flaw exists in Modem that could lead to a remote denial of service. This is due to a missing bounds check, potentially resulting in an out-of-bounds read. An attacker could exploit this if a...

PT-2025-48614

In Modem, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

PT-2025-48638

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch...

PT-2025-48639

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A flaw exists in Modem that could result in a system crash due to inadequate input validation. This could lead to a remote denial of service if a User Equipment UE connects to a malicious base...

PT-2025-48612

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A missing bounds check in Modem could lead to a system crash and remote denial of service. This can occur if a User Equipment UE connects to a rogue base station controlled by an attacker. No...

PT-2025-48615

In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-48616

In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...

Exploit for CVE-2021-43008

CVE-2021-43008 — Vulnérabilité Adminer Lecture arbi...

EUVD-2025-199668

The CMService.exe service runs with SYSTEM privileges and contains an unquoted service path. This allows a local attacker with write privileges to the filesystem to insert a malicious executable in the path, leading to privilege escalation...

Fortinet Issues Fixes as FortiWeb Takeover Flaw Sees Active Attacks

Two FortiWeb vulnerabilities, including a critical unauthenticated bypass CVE-2025-64446, are under attack. Check logs for rogue admin accounts and upgrade immediately...

CVE-2025-63215

The Sound4 IMPACT web-based management interface is vulnerable to Remote Code Execution RCE via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and repackaging the...

Vulnerabilities fixed in Google Chrome

Google has fixed vulnerabilities in Chrome Specifically for versions prior to 142.0.7444.175. The vulnerabilities are in Google Chrome's V8 engine and allow remote attackers to exploit heap corruption via specially crafted HTML pages, which can lead to unauthorized actions, such as access to...

MAL-2025-188148 Malicious code in multiverse-perseus-ignite-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e2dc25fda56b320b22f7aaa8af3bf5680fb5d97128cb6cfe22f2435a8dfc067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151256 Malicious code in abiba-avbai-abun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbbd4d70525ef9c588d299ec4cbca22b05fcb04543e8c7bfb8adf5efdfcab1bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Arbitrary Client-Side File Disclosure

aiomysql is vulnerable to Arbitrary Client-Side File Disclosure. The vulnerability is due to the client not validating server requests for local files, and attackers can exploit this by running a rogue MySQL server that sends LOADLOCAL packets to request and retrieve arbitrary files from the clie...

Malicious code in install-release-it-celeste-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d313480dbdd2fa4b3e74b79097939cc709006077b268b6f7739ebbbb5a559f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144370 Malicious code in library-betelgeuse-yonder-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d464d999af81bcaceefdd858dd914d406dc75800c99c9aaf27487492862826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-ursa-testcafe-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e74f0fa1c64ea786e96b6603912346725d9b64ad775fcaf397f28f74b1d7420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-nebula-gemini-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0997b9321571e9cd41dfbf04b6b87f0ca2550c498b2cd413ea4b5f0355f24d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...