3359 matches found
CVE-2025-2080
The CVE-2025-2080 entry covers Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool (version 3.1.2rc11). The connected sources document two concrete issues: (1) an exposed web management service that could allow an attacker to bypass authentication and gain control o...
PT-2025-11069 · Google · Android
Name of the Vulnerable Software and Affected Versions: bnepu affected versions not specified Description: A use-after-free issue exists in the bnepu check send packet function within bnep utils.cc. This could lead to local escalation of privilege without requiring additional execution privileges ...
PYSEC-2025-158
A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::GetNextLine in the library ParsingUtils.h of the component File Handler. The manipulation leads to stack-based buffer overflow. The attack can be initiated...
UBUNTU-CVE-2025-2151
A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::GetNextLine in the library ParsingUtils.h of the component File Handler. The manipulation leads to stack-based buffer overflow. The attack can be initiated...
Malicious code in @adminproxy/module-utils-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8a2cafa2022fe884b6ebbf6b805ed194ed4b93c8b77b15f7d03940e069c9137 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in idme-component-utilities (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1194c5ee341dd44fccad1c3e2a9d698dd452b384ab16498ae5b59a40f00787a7 The OpenSSF Package Analysis project identified 'idme-component-utilities' @ 1.0.1 npm as malicious. It is considered malicious because: - The...
MAL-2025-2451 Malicious code in idme-component-utilities (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1194c5ee341dd44fccad1c3e2a9d698dd452b384ab16498ae5b59a40f00787a7 The OpenSSF Package Analysis project identified 'idme-component-utilities' @ 1.0.1 npm as malicious. It is considered malicious because: - The...
MAL-2025-2216 Malicious code in @idme-components/component-utilities (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f94dc67ea91d37d381ca7625ed1162cd5013c5643066c51b18b123ab66fada91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @idme-components/component-utilities (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f94dc67ea91d37d381ca7625ed1162cd5013c5643066c51b18b123ab66fada91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in iberia-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in coinbase-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
A dive into the Rockchip Bootloader
TL;DR Rockchip has a structured sequence of bootloaders. Using various plugs can allow access to the MCU’s RAM and storage. There are many utilities to allow reading of information from the MCU. Use this guide to access and reverse engineer bootloaders. Introduction Rockchip are a Chinese company...
MAL-2025-191909 Malicious code in transaction-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 c1efc9cf33a18e7f3c4294c39aabadf136974e4e2ee56c874ba337ac609c6b77 The only thing the package does is send out all the given data about a cryptocurrency transaction, including the private key, to a hardcoded webhook. Feedback...
OESA-2025-1153 postgresql security update
PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine a...
postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation
A flaw was found in PostgreSQL. Due to improper neutralization of quoting syntax, affected versions potentially allow a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the affected function's result to constru...
postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation
A flaw was found in PostgreSQL. Due to improper neutralization of quoting syntax, affected versions potentially allow a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the affected function's result to constru...
postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation
A flaw was found in PostgreSQL. Due to improper neutralization of quoting syntax, affected versions potentially allow a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the affected function's result to constru...
Malicious code in upm-ci-utils-tes-t (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3db67af7201afa722ce928a46979afb3ac375ebe370e32d0578fd2cca9119bc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GNU Binutils Memory Corruption Vulnerability (CNVD-2025-09688)
GNU Binutils GNU Binary Utilities is a set of programming language utilities developed by the American GNU community. A memory corruption vulnerability exists in GNU Binutils. The vulnerability originates from the function bfdelfgcmarkrsec in bfd/elflink.c. No details of the vulnerability are...
