693 matches found
EUVD-2021-9847
Malicious code in bioql PyPI...
EUVD-2023-36491
Malicious code in bioql PyPI...
EUVD-2021-34146
Malicious code in bioql PyPI...
EUVD-2024-1644
Malicious code in bioql PyPI...
EUVD-2024-54273
Malicious code in bioql PyPI...
EUVD-2022-52173
Malicious code in bioql PyPI...
EUVD-2021-34149
Malicious code in bioql PyPI...
EUVD-2024-52766
Malicious code in bioql PyPI...
VulnCheck KEV: CVE-2023-2163
Incorrect verifier pruning in BPF in Linux Kernel =5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape...
CVE-2025-29421
PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the getThemeFileContent function...
CVE-2025-9257
CVE-2025-9257 involves WebITR by Uniong, which is vulnerable to an Arbitrary File Reading via Absolute Path Traversal . The issue affects the WebITR component and allows a remote attacker with regular privileges to perform a path traversal over the network to download arbitrary system files. The ...
GHSA-3XW7-V6CJ-5Q8H Copier's safe template has arbitrary filesystem read/write access
Impact Copier's current security model shall restrict filesystem access through Jinja: - Files can only be read using % include ... %, which is limited by Jinja to reading files from the subtree of the local template clone in our case. - Files are written in the destination directory according to...
CVE-2025-8959 HashiCorp go-getter Vulnerable to Arbitrary Read through Symlink Attack
HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory boundaries. This vulnerability, identified as CVE-2025-8959, is fixed in go-getter 1.7.9...
CVE-2025-8959 HashiCorp go-getter Vulnerable to Arbitrary Read through Symlink Attack
HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory boundaries. This vulnerability, identified as CVE-2025-8959, is fixed in go-getter 1.7.9...
CVE-2025-8081
The Elementor plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.30.2 via the ImportImages::import function due to insufficient controls on the filename specified. This makes it possible for authenticated attackers, with administrator-level access an...
CVE-2025-7771: Exposed IOCTL with Insufficient Access Control
ThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary read and write access to physical memory via the MmMapIoSpace function. This insecure implementation can be exploited by a malicious user-mode application to patch the running Windows kernel and invoke...
Linux Distros Unpatched Vulnerability : CVE-2019-9791
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects when compiled through the IonMonkey...
CVE-2025-7028: Undefined Security Weakness
A vulnerability in the Software SMI handler SwSmiInputValue 0x20 allows a local attacker to supply a crafted pointer FuncBlock through RBX and RCX register values. This pointer is passed unchecked into multiple flash management functions ReadFlash, WriteFlash, EraseFlash, and GetFlashInfo that...
GIGABYTE Chipsets 安全漏洞
GIGABYTE Chipsets is a series of open source chipsets from GIGABYTE of Taiwan, China. A security vulnerability exists in GIGABYTE Chipsets that originates from an unverified pointer and could lead to arbitrary read/write access and elevation of privilege...
