PT-2025-31839

Name of the Vulnerable Software and Affected Versions: Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 Description: An unauthenticated OS command injection vulnerability exists in the device. When configuring the device in Extender mode via its captive portal, the extap2g SSID field is...

CVE-2025-3114

Code Execution via Malicious Files: Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise. Sandbox Bypass Vulnerability: A flaw in the TERR security mechanism allows attackers to bypass sandb...

Malicious code in empty-validator-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1a8bb775434b7294e63fe4542d85b6382e1dd38f2eef5a4db17f73eb7a8154d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-17556

Name of the Vulnerable Software and Affected Versions Commvault Command Center Innovation Release versions 11.38.0 through 11.38.19 Description A path traversal vulnerability in Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files, which, when expanded b...

CVE-2025-27079

A vulnerability in the file creation process on the command line interface of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to perform remote code execution RCE. Successful exploitation could allow an attacker to execute arbitrary operating system commands on the...

CVE-2025-27429

SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating...

CVE-2025-31330

SAP Landscape Transformation SLT allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as...

USN-7429-2: Linux kernel (FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Drivers core; - HID subsystem; - Network drivers; - SCSI subsystem; - SuperH / SH-Mobile drivers; - File systems...

USN-7429-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Drivers core; - HID subsystem; - Network drivers; - SCSI subsystem; - SuperH / SH-Mobile drivers; - File systems...

CVE-2025-3114 Spotfire Code Execution Vulnerability

Code Execution via Malicious Files: Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise. Sandbox Bypass Vulnerability: A flaw in the TERR security mechanism allows attackers to bypass sandb...

MAL-2025-3199 Malicious code in sht-calculator-opener (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51a9f888486fe75f13166070e6c817fc5cfae2087efb4bbb922233178b9381c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in neo4j-apoc-procedures (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ae32122ca71a7a075fce5993dbcdceca009308664157c1655b4b3897e205f3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3195 Malicious code in neo4j-apoc-procedures (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ae32122ca71a7a075fce5993dbcdceca009308664157c1655b4b3897e205f3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3182 Malicious code in deltaprime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f16f2e9ed1af46506269c020785db3858769c420b642162e9fa880a6d2152edb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3204 Malicious code in wormhole-liquidity-layer-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6c87b98a81372effafd468239452822bc6241e0fc0f86c4fcbd870b47ee0b19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in esy-m4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d50f3c1994b8efe53e778d8ba331e1ceec48993b57b0fc3f279eb3f4b9dea361 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3179 Malicious code in bitcore-message-zen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a0777f44eab903be6813ba2ee9c115eb559b4cad5e561e95dc8ead1f488aeee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-15690 · Undefined · Undefined

CVE-2025-04547 - A Bluffer Overflow was discovered in the US operating system which can lead to disclosure of Secrets accessible to the controller, and full system compromise under certain conditions. There are reports of this vulnerability being actively exploited in the wild.🤷...

PT-2025-15834 · Tibco · Spotfire Enterprise Runtime For R

Name of the Vulnerable Software and Affected Versions: TERR versions affected versions not specified Spotfire Enterprise Runtime for R version 6 Description: Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading ...

Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel vulnerabilities (USN-7429-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7429-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...