MAL-2025-23539 Malicious code in jacket-wave-qep731-project (npm)

The package jacket-wave-qep731-project was found to contain malicious code...

MAL-2025-38911 Malicious code in wave-prairie-hjh040-project (npm)

The package wave-prairie-hjh040-project was found to contain malicious code...

MAL-2025-38900 Malicious code in wave-dolphin-uul508-project (npm)

The package wave-dolphin-uul508-project was found to contain malicious code...

Malicious code in orangutan-wave-yxm325-project (npm)

The package orangutan-wave-yxm325-project was found to contain malicious code...

Malicious code in moondust-jfwzi-21pbz-wave-project (npm)

The package moondust-jfwzi-21pbz-wave-project was found to contain malicious code...

MAL-2025-38915 Malicious code in wave-uranium-byk689-project (npm)

The package wave-uranium-byk689-project was found to contain malicious code...

Malicious code in wave-harbor-zsm497-project (npm)

The package wave-harbor-zsm497-project was found to contain malicious code...

Malicious code in wave-caravan-sis173-project (npm)

The package wave-caravan-sis173-project was found to contain malicious code...

Malicious code in wave-moose-drr853-project (npm)

The package wave-moose-drr853-project was found to contain malicious code...

CLSA-2025-1754552791 taglib: Fix of CVE-2023-47466

CVE-2023-47466: Fix segmentation violation and application crash during tag writing via crafted WAV file...

CVE-2025-29534

An authenticated remote code execution vulnerability in PowerStick Wave Dual-Band Wifi Extender V1.0 allows an attacker with valid credentials to execute arbitrary commands with root privileges. The issue stems from insufficient sanitization of user-supplied input in the /cgi-bin/cgivista.cgi...

PT-2025-31146 · Unknown · Powerstick Wave Dual-Band Wifi Extender

Name of the Vulnerable Software and Affected Versions: PowerStick Wave Dual-Band Wifi Extender version 1.0 Description: An authenticated remote code execution issue in PowerStick Wave Dual-Band Wifi Extender version 1.0 allows an attacker with valid credentials to execute arbitrary commands with...

CVE-2025-29534

An authenticated remote code execution vulnerability in PowerStick Wave Dual-Band Wifi Extender V1.0 allows an attacker with valid credentials to execute arbitrary commands with root privileges. The issue stems from insufficient sanitization of user-supplied input in the /cgi-bin/cgivista.cgi...

CVE-2025-29534

The PowerStick Wave Dual-Band Wifi Extender V1.0 is vulnerable to an authenticated remote code execution (RCE) flaw. The root cause is the insufficient sanitization of user-supplied input within the /cgi-bin/cgi_vista.cgi executable, which is subsequently passed to a system-level function call. A...

CVE-2025-29534

An authenticated remote code execution vulnerability in PowerStick Wave Dual-Band Wifi Extender V1.0 allows an attacker with valid credentials to execute arbitrary commands with root privileges. The issue stems from insufficient sanitization of user-supplied input in the /cgi-bin/cgivista.cgi...

PowerStick Wave Dual-Band Wifi Extender 安全漏洞

PowerStick Wave Dual-Band Wifi Extender is a portable WiFi extender from PowerStick USA. A security vulnerability exists in version V1.0 of the PowerStick Wave Dual-Band Wifi Extender that originates from insufficient user input cleanup in the file /cgi-bin/cgivista.cgi, which could lead to remot...

CVE-2025-29534: Improper Neutralization of Special Elements used in an OS Command

An authenticated remote code execution vulnerability in PowerStick Wave Dual-Band Wifi Extender V1.0 allows an attacker with valid credentials to execute arbitrary commands with root privileges. The issue stems from insufficient sanitization of user-supplied input in the /cgi-bin/cgivista.cgi...

Why Customer Experience Is the New Battleground in Zero Trust

Learn why being named a Customer Favorite in Forrester's Zero Trust Wave reveals what we believe really matters in cybersecurity...

CovertAuth: Joint Covert Communication and Authentication in MmWave Systems

Beam alignment BA is a crucial process in millimeter-wave mmWave communications, enabling precise directional transmission and efficient link establishment. However, due to characteristics like omnidirectional exposure and the broadcast nature of the BA phase, it is particularly vulnerable to...

Microsoft is named a Leader in The Forrester Wave™: Security Analytics Platforms, 2025​​

What is a security operations center? Learn more ↗ Microsoft is proud to be named a Leader in The Forrester Wave™: Security Analytics Platforms, Q2 2025—which we believe reflects our deep investment in innovation and commitment to support security operations centers SOCs’s critical mission. This...