MAL-2026-9524 Malicious code in xgemwahfoo (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2026-9524

creationtimestamp| type| source ---|---|--- 2026-05-26 08:49:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmqmdajhbq2h...

CVE-2026-9524 xianrendzw EasyReport REST Endpoint execute sql injection

A flaw has been found in xianrendzw EasyReport up to 2.0.17.0522Beta. Affected by this issue is the function execute of the component REST Endpoint. Executing a manipulation of the argument reportParams can lead to sql injection. The attack can be launched remotely. The vendor was contacted early...

MINI-9524-4VWP-PFM2

Bulletin has no description...

MINI-HJQ5-9524-54XP

Bulletin has no description...

ECHO-9524-08F5-480F

Bulletin has no description...

MiracleLinux 7 : qemu-kvm-1.5.3-126.el7.10 (AXSA:2017-1730:05)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-1730:05 advisory. qemu-kvm is an open source virtualizer that provides hardware emulation for the KVM hypervisor. qemu-kvm acts as a virtual machine monitor together with the...

CVE-2025-9524

creationtimestamp| type| source ---|---|--- 2025-11-11 10:08:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5dvdzrsnx2u 2025-11-11 11:31:02+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5dzx4iqqyc2...

CVE-2025-9524

CVE-2025-9524 affects Axis VAPIX API port.cgi. Root cause: insufficient input validation in port.cgi, leading to process crashes and potential availability impact. Exploitation requires authentication with a viewer/operator/admin service account. CVSS~3.1: 4.3 (NETWORK, LOW attacker interaction, ...

CVE-2024-9524

Link Following Local Privilege Escalation Vulnerability in System Speedup Service in Avira Operations GmbH Avira Prime Version 1.1.96.2 on Windows 10 x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging a...

CVE-2024-9524

Link Following Local Privilege Escalation Vulnerability in System Speedup Service in Avira Operations GmbH Avira Prime Version 1.1.96.2 on Windows 10 x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging a...

CVE-2024-9524 Privilege Escalation Vulnerability in Avira Prime Version 1.1.96.2

Link Following Local Privilege Escalation Vulnerability in System Speedup Service in Avira Operations GmbH Avira Prime Version 1.1.96.2 on Windows 10 x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging a...

CVE-2024-9524 Privilege Escalation Vulnerability in Avira Prime Version 1.1.96.2

Link Following Local Privilege Escalation Vulnerability in System Speedup Service in Avira Operations GmbH Avira Prime Version 1.1.96.2 on Windows 10 x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging a...

Linux Distros Unpatched Vulnerability : CVE-2017-9524

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The qemu-nbd server in QEMU aka Quick Emulator, when built with the Network Block Device NBD Server support, allows remote attackers to cause a denial of servic...

CVE-2024-9524

creationtimestamp| type| source ---|---|--- 2025-01-09 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-024/ 2025-05-09 16:05:00+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loqsk2cnvwg2 2025-05-09 16:25:10+00:0...

LibRaw security update

0.19.4-2 - Fix CVE-2021-32142 - Resolves: RHEL-9524...

CVE-2015-9524

creationtimestamp| type| source ---|---|--- 2024-01-17 18:11:54+00:00| seen| https://t.me/ctinow/169381...

CVE-2020-9524

Cross Site scripting vulnerability on Micro Focus Enterprise Server and Enterprise developer, affecting all versions prior to version 5.0 Patch Update 8. The vulnerability could allow an attacker to trigger administrative actions when an administrator viewed malicious data left by the attacker...

CVE-2020-9524

Micro Focus Enterprise Server and Enterprise Developer (all versions prior to 5.0 Patch Update 8) are affected by a Cross-Site Scripting (XSS) vulnerability in the web application layer. The root cause is insufficient validation of client-side data, enabling both stored and reflected XSS scenario...

Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2017-1156)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...