MAL-2025-15726 Malicious code in birch-tpexd-6b3ff-zen-project (npm)

The package birch-tpexd-6b3ff-zen-project was found to contain malicious code...

MAL-2025-40802 Malicious code in zen-slse4-avqlu-fable-project (npm)

The package zen-slse4-avqlu-fable-project was found to contain malicious code...

MAL-2025-40800 Malicious code in zen-a91l4-mqzxq-verdure-project (npm)

The package zen-a91l4-mqzxq-verdure-project was found to contain malicious code...

Malicious code in zen-iwqvw-m49im-opal-project (npm)

The package zen-iwqvw-m49im-opal-project was found to contain malicious code...

Malicious code in zen-a91l4-mqzxq-verdure-project (npm)

The package zen-a91l4-mqzxq-verdure-project was found to contain malicious code...

Malicious code in unicorn-bisda-9270v-zen-project (npm)

The package unicorn-bisda-9270v-zen-project was found to contain malicious code...

Malicious code in birch-tpexd-6b3ff-zen-project (npm)

The package birch-tpexd-6b3ff-zen-project was found to contain malicious code...

MAL-2025-40806 Malicious code in zen_finym_m0bga_velocity (npm)

The package zenfinymm0bgavelocity was found to contain malicious code...

MAL-2025-37748 Malicious code in unicorn-bisda-9270v-zen-project (npm)

The package unicorn-bisda-9270v-zen-project was found to contain malicious code...

MAL-2025-37151 Malicious code in tranquil-wzom9-ggeak-zen-project (npm)

The package tranquil-wzom9-ggeak-zen-project was found to contain malicious code...

Physical Attacks Leading to Bypass of ASP Boot ROM Secure Boot

Summary Researchers shared a report titled “Code Execution on Zen 4 PSP using Voltage Fault Injection.” In the paper, the researchers reported their findings on Voltage Fault Injection VFI attacks targeting AMD “Zen 4” CPUs, specifically the Ryzen™ 8600G model. The researchers claim these types o...

CVE-2012-10039

ZEN Load Balancer versions 2.0 and 3.0-rc1 contain a command injection vulnerability in content2-2.cgi. The filelog parameter is passed directly into a backtick-delimited exec call without sanitation. An authenticated attacker can inject arbitrary shell commands, resulting in remote code executio...

CVE-2012-10039 ZEN Load Balancer Filelog Command Execution

ZEN Load Balancer versions 2.0 and 3.0-rc1 contain a command injection vulnerability in content2-2.cgi. The filelog parameter is passed directly into a backtick-delimited exec call without sanitation. An authenticated attacker can inject arbitrary shell commands, resulting in remote code executio...

CVE-2012-10039

CVE-2012-10039 affects ZEN Load Balancer versions 2.0 and 3.0-rc1. A command injection exists in content2-2.cgi where the filelog parameter is passed directly to a backtick-delimited exec() call without sanitization, allowing an authenticated attacker to execute arbitrary shell commands and achie...

CVE-2012-10039 ZEN Load Balancer Filelog Command Execution

ZEN Load Balancer versions 2.0 and 3.0-rc1 contain a command injection vulnerability in content2-2.cgi. The filelog parameter is passed directly into a backtick-delimited exec call without sanitation. An authenticated attacker can inject arbitrary shell commands, resulting in remote code executio...

PT-2025-32552 · Unknown +1 · Zen Load Balancer +2

Name of the Vulnerable Software and Affected Versions: ZEN Load Balancer versions 2.0 ZEN Load Balancer version 3.0-rc1 Description: ZEN Load Balancer versions 2.0 and 3.0-rc1 contain a command injection issue in the content2-2.cgi file. The filelog parameter is passed directly to an exec call...

Zevenet Zen Load Balancer 安全漏洞

Zevenet Zen Load Balancer is an application delivery controller from Zevenet, Spain. A security vulnerability exists in Zevenet Zen Load Balancer version 2.0 and 3.0-rc1, which stems from an unvalidated filelog parameter being passed directly to the exec function, which could lead to remote code...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20520)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20520 advisory. - perf: Fix perfeventvalidatesize lockdep splat Mark Rutland Orabug: 36261485 CVE-2023-6931 - perf: Fix perfeventvalidatesize Peter Zijlstra Orabu...

Linux Distros Unpatched Vulnerability : CVE-2023-20593

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Zen 2 CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information. CVE-2023-20593 Note...

CVE-2025-6055

The Zen Sticky Social plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.3. This is due to missing or incorrect nonce validation on the 'zen-social-sticky/zen-sticky-social.php' page. This makes it possible for unauthenticated attackers to...