CVE-2025-49163: Improper Protection of Alternate Path

Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting an arbitrary image via a crafted /usr/bin/gunzip file...

CVE-2025-5146: Improper Neutralization of Special Elements used in a Command

A vulnerability has been found in Netcore NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2 and NBR200V2 up to 20250508 and classified as critical. This vulnerability affects the function passwdset of the file /usr/bin/routerd of the component HTTP Header Handler. The manipulation of the...

CVE-2024-24130

Mail2World v12 Business Control Center was discovered to contain a reflected cross-site scripting XSS vulnerability via the Usr parameter at resellercenter/login.asp...

CVE-2023-2645

A vulnerability, which was classified as critical, was found in USR USR-G806 1.0.41. Affected is an unknown function of the component Web Management Page. The manipulation of the argument username/password with the input root leads to use of hard-coded password. It is possible to launch the attac...

CVE-2022-29730

USR IOT 4G LTE Industrial Cellular VPN Router v1.0.36 was discovered to contain hard-coded credentials for its highest privileged account. The credentials cannot be altered through normal operation of the device...

Security update for apparmor

This update for apparmor fixes the following issue: Allow dovecot-auth to execute unix check password from /sbin, not only from /usr/bin bsc1234452. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternativel...

PT-2025-13817

Name of the Vulnerable Software and Affected Versions Novastar CX40 versions up to 2.44.0 Description A critical vulnerability has been found in the NetFilter Utility component of Novastar CX40. The issue affects the system/popen function of the /usr/nova/bin/netconfig file, leading to command...

CVE-2025-3008: Improper Neutralization of Special Elements used in a Command

A vulnerability classified as critical has been found in Novastar CX40 up to 2.44.0. Affected is the function system/popen of the file /usr/nova/bin/netconfig of the component NetFilter Utility. The manipulation leads to command injection. The exploit has been disclosed to the public and may be...

CVE-2025-3007: Stack-based Buffer Overflow

A vulnerability was found in Novastar CX40 up to 2.44.0. It has been rated as critical. This issue affects the function getopt of the file /usr/nova/bin/netconfig of the component NetFilter Utility. The manipulation of the argument cmd/netmask/pipeout/nettask leads to stack-based buffer overflow...

PT-2025-13629

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-411BRP+ version 2.07 Description A vulnerability was found in the HTTP Request Handler component, specifically affecting the function sub 401DB0 of the file /usr/sbin/httpd. This issue leads to a null pointer dereference. The atta...

CVE-2025-2959: NULL Pointer Dereference

A vulnerability was found in TRENDnet TEW-410APB 1.3.06b. It has been rated as problematic. Affected by this issue is the function sub4019A0 of the file /usr/sbin/httpd of the component HTTP Request Handler. The manipulation leads to null pointer dereference. The attack needs to be initiated with...

CVE-2025-2958: Improper Resource Shutdown or Release

A vulnerability was found in TRENDnet TEW-818DRU 1.0.14.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/httpd of the component HTTP Request Handler. The manipulation leads to denial of service. The attack needs to be done...

PT-2025-2064

Name of the Vulnerable Software and Affected Versions REVE Antivirus version 1.0.0.0 Description A critical vulnerability has been found in REVE Antivirus on Linux, affecting an unknown part of the file /usr/local/reveantivirus/tmp/reveinstall. The manipulation leads to incorrect default...

CVE-2024-13206: Incorrect Default Permissions

A vulnerability classified as critical has been found in REVE Antivirus 1.0.0.0 on Linux. This affects an unknown part of the file /usr/local/reveantivirus/tmp/reveinstall. The manipulation leads to incorrect default permissions. It is possible to launch the attack on the local host. The exploit...

[SECURITY] [DLA 4005-1] debootstrap bugfix update for testing/unstable chroots

Debian LTS Advisory DLA-4005-1 [email protected] https://www.debian.org/lts/security/ Luca Boccassi December 31, 2024 https://wiki.debian.org/LTS Package : debootstrap Version : 1.0.123+deb11u3 Debian Bug : 1091649 debootstrap has been updated to avoid pulling in usr-is-merged in testin...

CVE-2024-48073: Missing Authorization

sunniwell HT3300 before 1.0.0.B022.2 is vulnerable to Insecure Permissions. The /usr/local/bin/update program, which is responsible for updating the software in the HT3300 device, is given the execution mode of sudo NOPASSWD. This program is vulnerable to a command injection vulnerability, which...

CVE-2024-46215

A buffer overflow vulnerability exists in the KM08-708H-v1.1 wireless device from GIGA WIFI Wave. The flaw is located within the sub_445BDC() function of the /usr/sbin/goahead program, where the strcpy function is executed without performing length checks on the input string. This could lead to a...

CVE-2024-46215

A vulnerability was discovered in KM08-708H-v1.1, There is a buffer overflow in the sub445BDC function within the /usr/sbin/goahead program; The strcpy function is executed without checking the length of the string, leading to a buffer overflow...

openSUSE Security Advisory (SUSE-SU-2024:3200-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:3200-1 Security update for python311

This update for python311 fixes the following issues: - CVE-2024-6923: Fixed email header injection due to unquoted newlines bsc1228780 Other fixes: - %profileopt variable is set according to the variable %doprofiling bsc1227999 - Stop using %%defattr, it seems to be breaking proper executable...