PT-2025-35298

Name of the Vulnerable Software and Affected Versions TP-Link Archer C7EU V2 versions prior to 241108 TP-Link TL-WR841N/NDMS V9 versions prior to 241108 Description An authenticated remote command execution RCE vulnerability exists in the Parental Control page on TP-Link Archer C7EU V2 and...

MAL-2025-41510 Malicious code in @twork-data-services/proxy-invest-v2-api-v1-customer-margin-attributes (npm)

--- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2021-28699

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - inadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant attributes from grant status. That is, when operating in this...

Malicious code in @espace-client-axafr/rib-v2 (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41893 Malicious code in @espace-client-axafr/rib-v2 (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-52130

File upload vulnerability in WebErpMesv2 1.17 in the app/Http/Controllers/FactoryController.php controller. This flaw allows an authenticated attacker to upload arbitrary files, including PHP scripts, which can be accessed via direct GET requests, potentially resulting in remote code execution RC...

Malicious code in prettier-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dd4a56ce83136ba0c08709c38d11bee44b0351d7dd9c5bca68b457fcb1b44be9 The OpenSSF Package Analysis project identified 'prettier-v2' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in key-recovery-service-v2 (npm)

The package key-recovery-service-v2 was found to contain malicious code...

MAL-2025-27829 Malicious code in npm-download-counts-v2 (npm)

The package npm-download-counts-v2 was found to contain malicious code...

MAL-2025-24423 Malicious code in key-recovery-service-v2 (npm)

The package key-recovery-service-v2 was found to contain malicious code...

MAL-2025-33394 Malicious code in skynet-api-v2 (npm)

The package skynet-api-v2 was found to contain malicious code...

Malicious code in npm-download-counts-v2 (npm)

The package npm-download-counts-v2 was found to contain malicious code...

Malicious code in webserver-internal-v2 (npm)

The package webserver-internal-v2 was found to contain malicious code...

MAL-2025-34589 Malicious code in tbb-v2 (npm)

The package tbb-v2 was found to contain malicious code...

SUSE-SU-2025:02592-1 Security update for cosign

This update for cosign fixes the following issues: Update to version 2.5.3 jscSLE-23879: - CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego bsc1246725 Changelog: Update to 2.5.3: - Add signing-config create command 4280 - Allow multiple services to be specified for trusted-ro...

CVE-2025-7745

Buffer Over-read vulnerability in ABB AC500 V2.This issue affects AC500 V2: through 2.5.2...

CVE-2025-7745 Modbus TCP buffer overread

Buffer Over-read vulnerability in ABB AC500 V2.This issue affects AC500 V2: through 2.5.2...

CVE-2025-7745 Modbus TCP buffer overread

Buffer Over-read vulnerability in ABB AC500 V2.This issue affects AC500 V2: through 2.5.2...

PT-2025-30638

Name of the Vulnerable Software and Affected Versions ABB AC500 V2 versions through 2.5.2 Description A buffer over-read issue exists in ABB AC500 V2. This can potentially lead to unexpected system behavior. Recommendations Update ABB AC500 V2 to a version later than 2.5.2...

CVE-2025-7724 Unauthenticated command injection on VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V2

An unauthenticated OS command injection vulnerability exists in VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V2.This issue affects VIGI NVR1104H-4P V1: before 1.1.5 Build 250518; VIGI NVR2016H-16MP V2: before 1.3.1 Build 250407...