MAL-2025-27846 Malicious code in npm-suite-extras (npm)

The package npm-suite-extras was found to contain malicious code...

MAL-2025-31794 Malicious code in react-grid-suite (npm)

The package react-grid-suite was found to contain malicious code...

MAL-2025-34169 Malicious code in suite-level-tags (npm)

The package suite-level-tags was found to contain malicious code...

MAL-2025-13908 Malicious code in a-lbum-do-wnload-avai-lable-file-2016-55282-the-exodus-suite-74hog-yqunjy (npm)

The package a-lbum-do-wnload-avai-lable-file-2016-55282-the-exodus-suite-74hog-yqunjy was found to contain malicious code...

MAL-2025-27321 Malicious code in netsuite-suitetalk-wsdl-v2020-2.0 (npm)

The package netsuite-suitetalk-wsdl-v2020-2.0 was found to contain malicious code...

Malicious code in npm-suite-extras (npm)

The package npm-suite-extras was found to contain malicious code...

Malicious code in a-lbum-do-wnload-avai-lable-file-2016-55282-the-exodus-suite-74hog-yqunjy (npm)

The package a-lbum-do-wnload-avai-lable-file-2016-55282-the-exodus-suite-74hog-yqunjy was found to contain malicious code...

CVE-2025-20074

Time-of-check Time-of-use race condition for some IntelR Connectivity Performance Suite software installers before version 40.24.11210 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20074

Time-of-check Time-of-use race condition for some IntelR Connectivity Performance Suite software installers before version 40.24.11210 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20074

Intel Connectivity Performance Suite installers before version 40.24.11210 are affected by a TOCTOU race condition that may allow an authenticated local user to escalate privileges. Affected product: Intel Connectivity Performance Suite (installer component). Root cause: time-of-check/time-of-use...

CVE-2025-20074

Time-of-check Time-of-use race condition for some IntelR Connectivity Performance Suite software installers before version 40.24.11210 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2025-32699 · Intel · Intel Connectivity Performance Suite

Name of the Vulnerable Software and Affected Versions: IntelR Connectivity Performance Suite versions prior to 40.24.11210 Description: A time-of-check time-of-use TOCTOU race condition exists in some IntelR Connectivity Performance Suite software installers. This may allow an authenticated user ...

Intel® Connectivity Performance Suite Software Installer Advisory

Summary: A potential security vulnerability in some Intel® Connectivity Performance Suite software installers may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20074 Description: Time-of-check...

Siemens多款产品 代码问题漏洞

Siemens SIMATIC STEP and others are products of Siemens, a German company. siemens SIMATIC STEP is a comprehensive engineering tool for configuring and programming SIMATIC controllers. siemens SIMATIC PCS neo is a distributed control system. siemens SIMATIC STEP 7 is a PLC program simulation...

Intel Connectivity Performance Suite 安全漏洞

Intel Connectivity Performance Suite is a network optimization software solution from Intel, with key features that include automatically optimizing a computer's network connectivity performance and prioritizing critical applications based on user needs. A competitive condition vulnerability exis...

CVE-2025-52914

A vulnerability in the Suite Applications Services component of Mitel MiCollab 10.0 through SP1 FP1 10.0.1.101 could allow an authenticated attacker to conduct a SQL Injection attack due to insufficient validation of user input. A successful exploit could allow an attacker to execute arbitrary SQ...

CVE-2025-52914

A vulnerability in the Suite Applications Services component of Mitel MiCollab 10.0 through SP1 FP1 10.0.1.101 could allow an authenticated attacker to conduct a SQL Injection attack due to insufficient validation of user input. A successful exploit could allow an attacker to execute arbitrary SQ...

CVE-2025-51053

A Cross-site scripting XSS vulnerability in /apivedo/ in Vedo Suite version 2024.17 allows remote attackers to inject arbitrary Javascript or HTML code and potentially trigger code execution in victim's browser...

CVE-2025-51057

A local file inclusion LFI vulnerability in Vedo Suite version 2024.17 allows remote authenticated attackers to read arbitrary filesystem files by exploiting an unsanitized 'readfile' function call in '/apivedo/video/preview'...

CVE-2025-51058

Bottinelli Informatical Vedo Suite 2024.17 is vulnerable to Server-side Request Forgery SSRF in the /apivedo/video/preview endpoint, which allows remote authenticated attackers to trigger HTTP requests towards arbitrary remote paths via the "file" URL parameter...