42364 matches found
CVE-2025-58152
The CVE-2025-58152 entry concerns Century Systems FutureNet MA and IP-K series devices. According to connected sources, the vulnerability involves exposing firmware version and garbage collection information on an internal web page, which can be accessed via crafted HTTP requests without authenti...
EUVD-2025-37302
FutureNet MA and IP-K series provided by Century Systems Co., Ltd. put the firmware version and the garbage collection information on the internal web page. With some crafted HTTP request, they can be accessed without authentication...
MAL-2025-49261 Malicious code in icon-react-fork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad97a4843ca8933070ecec7c05bf536be6b6a80d87925026a6b7be938fd264f7 The package icon-react-fork was found to contain malicious code. Source: ghsa-malware 32d3f4313eda9d40aff4d3624d6f7f534df05b45f0f282fab8e0f8211c1a38c...
MAL-2025-49252 Malicious code in botty-fork-baby (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 163cfd59ccdc251deb14c3ba812a8125ef8b4970b3d0ce4d99f155b44b359adb The package botty-fork-baby was found to contain malicious code. Source: ghsa-malware 9de1cc3699112a7cab37aafff858654d0c3f789ff52cb908e33691b1006c247...
MAL-2025-49274 Malicious code in web3-wc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01c652a3b11d35f64a6e471fa1fadb5523c045ce3708e327d390c5cee28941a The package web3-wc was found to contain malicious code. Source: ghsa-malware f5ac56c88955ce71a2cb673c8d49d38f9e97e6af8e0f9a60969d0fd3d511586e Any...
MAL-2025-49264 Malicious code in react-icon-pkg (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8ba17d7a373063f5a6120fd27a52bb855006bd5f440ee5d2f287cccaeb6bd5 The package react-icon-pkg was found to contain malicious code. Source: ghsa-malware ce6d8c074bdec68ae646e31b821c3896f805e01c46c5464e8db624d09e133205...
MAL-2025-49256 Malicious code in custom-tg-bot-plan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10cef01d344d07be2f72b365cb97f994a5cea38eef145b5b25de21f1784cd740 The package custom-tg-bot-plan was found to contain malicious code. Source: ghsa-malware...
Malicious code in sabaoa-tg-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 555fda036bf0012711b8105d10f56495dc602cd4bae8463de43ca9cd3c404a1b The package sabaoa-tg-api was found to contain malicious code. Source: ghsa-malware 6876d341cb9d5baf0af61f7e2fba4237ef32a159e156fa127940553d73e1a571...
MAL-2025-49266 Malicious code in sabay-tg-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1f452097f93c1e4228b1e2204035d8fd6b3fa34b8315538d750c8b6df30f766 The package sabay-tg-api was found to contain malicious code. Source: ghsa-malware 0937cd6e3bb2fab7264080086c8daaa0096e2efe839d71325cffbdee6c661011 A...
Century Systems FutureNet MA-X series 安全漏洞
Century Systems FutureNet MA-X series is a series of industrial communication module devices from Century Systems, Japan. A security vulnerability exists in the Century Systems FutureNet MA-X series that originates from an internal web page that exposes firmware version and garbage collection...
F5 Networks F5OS-A FIPS HSM Information Disclosure (K000148625)
The version of F5 Networks F5OS-A installed on the remote host is affected by a vulnerability as referenced in the K000148625 advisory. - A vulnerability exists in F5OS-A software that allows a highly privileged authenticated attacker to access sensitive FIPS hardware security module HSM...
CVE-2025-57106
Kitware VTK Visualization Toolkit up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtractionWorker template function when processing GLTF accessor data...
Century Systems FutureNet MA-X series 操作系统命令注入漏洞
Century Systems FutureNet MA-X series is a series of industrial communication module devices from Century Systems, Japan. An operating system command injection vulnerability exists in the Century Systems FutureNet MA-X series, which stems from an OS command injection vulnerability in the Web UI...
CVE-2025-57106
Kitware VTK Visualization Toolkit up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtractionWorker template function when processing GLTF accessor data...
Google Chrome 安全漏洞
Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge that stems from a V8 type obfuscation...
Linux Distros Unpatched Vulnerability : CVE-2025-6176
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Scrapy versions up to 2.13.2 are vulnerable to a denial of service DoS attack due to a flaw in its brotli decompression implementation. The protection mechanism...
MAL-2025-49253 Malicious code in cordova-plugin-globalization.moment (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 431a9d9edd37d8a5dc80555f3c56e275f5c79162ed66ae419cc7b2450c6ad75c The package cordova-plugin-globalization.moment was found to contain malicious code. Source: ghsa-malware...
MAL-2025-49273 Malicious code in ve-hemi-actions (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ce1c8c14c652c22fede3ed26692b173255af2cebbbfe34e91d78ade7b5f9eb The package ve-hemi-actions was found to contain malicious code. Source: ghsa-malware 13edaf6e255d735724b90e45ce9e8ab5c1d6e0f0474ca23ed567341e4a08183...
CVE-2025-64118
node-tar is a Tar for Node.js. In 7.5.1, using .t aka .list with sync: true to read tar entry contents returns uninitialized memory contents if tar file was changed on disk to a smaller size while being read. This vulnerability is fixed in 7.5.2...
