2520 matches found
CVE-2025-47176
CVE-2025-47176 PoC ブラウザブリッジ 説明 この概念実証(PoC)は、CVE-2025-47176 の脆弱性シミュレーションを示しています。悪意のある同期パスを含む巧妙に細工されたメールアイテムを Outlook に注入し、スキャン中にアクションをトリガーします。 重要: この PoC は、脆弱な Outlook のパス解析をシミュレートし、悪意のあるパスが検出されるとシステムの再起動 をトリガーします。 malicious.prf を使用した追加テスト この PoC は、巧妙に細工された Outlook プロファイル...
2026-08 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1607 (KB5120702)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
PT-2026-69762
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the ath11k hal srng access begin function. The issue occurs because ATH11K FLAG REGISTERED is set unconditionally during ATH11K QMI EVENT FW READY,...
Permissive Cross-domain Policy with Untrusted Domains
Overview Affected versions of this package are vulnerable to Permissive Cross-domain Policy with Untrusted Domains through the unauthenticated local API exposed in proxy mode, which accepts cross-origin requests due to a permissive CORS policy and lack of authentication. An attacker can achieve...
EUVD-2016-10903
Comodo Dragon Browser versions up to 52.15.25.663 contain a privilege escalation vulnerability in the DragonUpdater service due to an unquoted service path running with SYSTEM privileges. A local attacker can insert a malicious executable in the service path and execute arbitrary code with elevat...
PT-2026-41429
OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows local attackers to escalate privileges by inserting executable files into the unquoted path. Attackers can place a malicious executable in a directory within the service path that...
CVE-2016-20059
IObit Malware Fighter 4.3.1 contains an unquoted service path vulnerability in the IMFservice and LiveUpdateSvc services that allows local attackers to escalate privileges. Attackers can insert a malicious executable file in the unquoted service path and trigger privilege escalation when the...
CVE-2016-20061
Summary: CVE-2016-20061 affects sheed AntiVirus 2.3, exploiting an unquoted service path in the ShavProt service to escalate privileges. An attacker can place a malicious executable in the unquoted binary path, triggering the service to restart or the system reboot to execute code with LocalSyste...
CVE-2026-1471
A flaw was found in Neo4j. Authenticated users can inherit the authentication context of the first user who authenticated after a system restart. This occurs due to excessive caching of authentication context in certain non-default configurations of the Single Sign-On SSO UserInfo endpoint. This...
Palo Alto Networks PAN-OS 安全漏洞
Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall devices. There is a security vulnerability in Palo Alto Networks PAN-OS, which stems from a denial-of-service attack involving advanced DNS security features. This vulnerability could potentially lea...
2026-01 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5073723)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
CVE-2021-22349
There is an Input Verification Vulnerability in Huawei Smartphone. Successful exploitation of insufficient input verification may cause the system to restart...
CVE-2026-22540
CVE-2026-22540 describes a denial-of-service in EFACEC EV chargers caused by a flood of ARP requests. The attack targets a charger board that controls the EV interface, and the charger’s operation depends on that board. Impact is denial of service affecting availability of the charger and EV inte...
CVE-2023-53806 drm/amd/display: populate subvp cmd info only for the top pipe
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: populate subvp cmd info only for the top pipe Why System restart observed while changing the display resolution to 8k with extended mode. Sytem restart was caused by a page fault. How When the driver populates...
CVE-2023-53806: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: populate subvp cmd info only for the top pipe Why System restart observed while changing the display resolution to 8k with extended mode. Sytem restart was caused by a page fault. How When the driver populates...
EUVD-2021-26354
Malware in sbrugna...
EUVD-2020-24064
Malware in sbrugna...
EUVD-2020-12518
Malware in sbrugna...