CVE-2025-30199 ECOVACS Vacuum and Base Station accept unsigned firmware

ECOVACS vacuum robot base stations do not validate firmware updates, so malicious over-the-air updates can be sent to base station via insecure connection between robot and base station...

Malicious code in avatar-the-way-of-water-online-dkeldez (npm)

The package avatar-the-way-of-water-online-dkeldez was found to contain malicious code...

Malicious code in avatar-the-way-of-water-movie-streaming-edjezkd (npm)

The package avatar-the-way-of-water-movie-streaming-edjezkd was found to contain malicious code...

MAL-2025-46562 Malicious code in watch-avatar-the-way-of-water-now-dkedke (npm)

The package watch-avatar-the-way-of-water-now-dkedke was found to contain malicious code...

Malicious code in avatar-the-way-of-water-free-streaming-djzdk (npm)

The package avatar-the-way-of-water-free-streaming-djzdk was found to contain malicious code...

Malicious code in the-only-working-coin-master-generator-fkeld (npm)

The package the-only-working-coin-master-generator-fkeld was found to contain malicious code...

MAL-2025-43548 Malicious code in avatar-the-way-of-water-movie-streaming-edjezkd (npm)

The package avatar-the-way-of-water-movie-streaming-edjezkd was found to contain malicious code...

MAL-2025-43549 Malicious code in avatar-the-way-of-water-online-dkeldez (npm)

The package avatar-the-way-of-water-online-dkeldez was found to contain malicious code...

Malicious code in watch-avatar-the-way-of-water-now-dkedke (npm)

The package watch-avatar-the-way-of-water-now-dkedke was found to contain malicious code...

Malicious code in watch-for-free-avatar-the-way-of-water-edzdlzel (npm)

The package watch-for-free-avatar-the-way-of-water-edzdlzel was found to contain malicious code...

MAL-2025-46564 Malicious code in watch-for-free-avatar-the-way-of-water-edzdlzel (npm)

The package watch-for-free-avatar-the-way-of-water-edzdlzel was found to contain malicious code...

CVE-2025-58823

CVE-2025-58823 impacts the WordPress Get Cash plugin (affected: Get Cash plugin

OESA-2025-2105 sleuthkit security update

The Sleuth Kit previously known as TASK is a collection of UNIX-based command line file system forensic tools that allow an investigator to examine NTFS, FAT, FFS, EXT2FS, EXT3FS and ExFAT file systems of a suspect computer in a non-intrusive fashion. The tools have a layer-based design and can...

ECOVACS robot vacuums 安全漏洞

ECOVACS robot vacuums is a line of vacuum cleaners from the Chinese company ECOVACS. A security vulnerability exists in ECOVACS robot vacuums that stems from an unverified firmware update that could lead to a malicious over-the-air update...

An unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1. RFC 4954 requires that, during SMTP, the PLAIN auth scheme must only be used on network connections secured with TLS. The original implementation of smtp.PlainAuth in Go 1.0 enforced this requirement, and it was documented to do so. In 2013, upstream issue #5184, this was changed so that the server may decide whether PLAIN is acceptable. The result is that if you set up a man-in-the-middle SMTP server that doesn't advertise STARTTLS and does advertise that PLAIN auth is OK, the smtp.PlainAuth implementation sends the username and password.

...

Penetration-Testing-on-Metasploitable2

Penetration-Testing-on-Metasploitable2...

drm/amd/display: Fix disable_otg_wa logic

...

Denial Of Service (DoS)

github.com/mattermost/mattermost-plugin-confluence is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of unexpected request bodies, which allows an attacker to repeatedly send invalid request bodies to the server webhook endpoint to crash the plugin...

CVE-2025-9785

PaperCut Print Deploy is an optional component that integrates with PaperCut NG/MF which simplifies printer deployment and management. When the component is deployed to an environment, the customer has an option to configure the system to use a self-signed certificate. If the customer does not...

PT-2025-35658

Name of the Vulnerable Software and Affected Versions: PaperCut Print Deploy affected versions not specified Description: PaperCut Print Deploy, an optional component integrated with PaperCut NG/MF, is susceptible to man-in-the-middle attacks if not correctly configured with a trusted certificate...