CVE-2020-36953

CVE-2020-36953 affects MiniTool ShadowMaker 3.2; MTAgentService exposes an unquoted service path at C:\Program Files\MiniTool ShadowMaker\AgentService.exe, enabling local attackers to potentially insert malicious executables and escalate privileges. The vulnerability is described as a local, unqu...

CVE-2020-36952

creationtimestamp| type| source ---|---|--- 2026-01-26 17:19:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mddquvbtou2m...

Exploit for Out-of-bounds Read in Ntop Ndpi

CVE PoCs This repository provides PoC files, reproduction ste...

CVE-2020-11963

creationtimestamp| type| source ---|---|--- 2026-01-25 21:03:00+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mdbmvmgulh24 2026-05-15 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2026-05-15 2026-05-18 00:00:00+00:00| exploited| The...

CVE-2020-36933

HTC IPTInstaller 4.0.9 contains an unquoted service path vulnerability in the PassThru Service configuration. Attackers can exploit the unquoted binary path to inject and execute malicious code with elevated LocalSystem privileges...

CVE-2020-36937 MEMU PLAY 3.7.0 - 'MEmusvc' Unquoted Service Path

Microvirt MEMU Play 3.7.0 contains an unquoted service path vulnerability in the MEmusvc Windows service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with elevated LocalSystem...

CVE-2020-25031

creationtimestamp| type| source ---|---|--- 2026-01-24 21:24:45+00:00| seen| https://gist.github.com/alon710/62c93b7cd20fa354ff674bdd08077f2a 2026-01-24 22:32:43+00:00| seen| https://gist.github.com/alon710/69a21c5efcf46791eeae6004d7f83945 2026-01-24 22:32:45+00:00| seen|...

CVE-2020-16248

creationtimestamp| type| source ---|---|--- 2026-01-23 07:34:13+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-16248.yaml 2026-01-25 21:03:01+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mdbmvmjmq52c...

io4it (=3.0.4.1) potentially affected by CVE-2020-14343 +1 more via docling-core (=2.26.3)

docling-core PYPI version =2.26.3 is affected by a known vulnerability. The following packages have a transitive dependency on docling-core and may be impacted: - io4it =3.0.4.1 Source cves: CVE-2020-14343, CVE-2026-24009 Source advisory: SNYK:PYTHON-DOCLINGCORE-15091522...

Deserialization of Untrusted Data

Overview docling-core is an A python library to define and validate data types in Docling. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the loadfromyaml function. An attacker can execute arbitrary code by providing malicious YAML input to the...

CVE-2025-32056

The anti-theft protection mechanism can be bypassed by attackers due to weak response generation algorithms for the head unit. It is possible to reveal all 32 corresponding responses by sniffing CAN traffic or by pre-calculating the values, which allow to bypass the protection. First identified o...

CVE-2025-32057 Misconfigured SSL/TLS communication of Redbend service for Infotainment ECU

The Infotainment ECU manufactured by Bosch which is installed in Nissan Leaf ZE1 – 2020 uses a Redbend service for over-the-air provisioning and updates. HTTPS is used for communication with the back-end server. Due to usage of the default configuration for the underlying SSL engine, the server...

CVE-2025-32057

The CVE-2025-32057 entry concerns the Bosch Infotainment ECU in Nissan Leaf ZE1 (2020). The vulnerability arises from using a Redbend OTA service with HTTPS where the SSL engine uses a default configuration, resulting in server root certificate verification being disabled. This can allow an attac...

CVE-2025-32056 Anti-Theft Bypass for Infotainment ECU

The anti-theft protection mechanism can be bypassed by attackers due to weak response generation algorithms for the head unit. It is possible to reveal all 32 corresponding responses by sniffing CAN traffic or by pre-calculating the values, which allow to bypass the protection. First identified o...

Azure Linux 3.0 Security Update: samba (CVE-2020-25722)

The version of samba installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-25722 advisory. - Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. ...

Azure Linux 3.0 Security Update: openjpeg2 (CVE-2020-27823)

The version of openjpeg2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-27823 advisory. - A flaw was found in OpenJPEG's encoder. This flaw allows an attacker to pass specially crafted x,y offset...

Azure Linux 3.0 Security Update: gsl (CVE-2020-35357)

The version of gsl installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-35357 advisory. - A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL GNU...

Azure Linux 3.0 Security Update: ceph / libdb (CVE-2020-13435)

The version of ceph / libdb installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-13435 advisory. - SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c. CVE-2020-13435 Note...

Azure Linux 3.0 Security Update: samba (CVE-2020-14383)

The version of samba installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-14383 advisory. - A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash...

Azure Linux 3.0 Security Update: samba (CVE-2020-25719)

The version of samba installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-25719 advisory. - A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name- based...