3884 matches found
EUVD-2026-22928
During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges...
CVE-2026-4145
During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges...
CVE-2026-4134
During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated user to execute code with elevated privileges...
PT-2026-33059
During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated user to execute code with elevated privileges...
PT-2026-33060
During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated user to perform an arbitrary file write with elevated privileges...
PT-2026-33056
Name of the Vulnerable Software and Affected Versions Lenovo Diagnostics affected versions not specified Lenovo Vantage HardwareScanAddin affected versions not specified Description An issue exists in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage. During installation or whil...
PT-2026-33061
During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges...
How exposed is your code? Find out in minutes—for free
Most security leaders share the same suspicion: there are vulnerabilities in our codebase that we don't know about. The uncomfortable truth is that most code never gets a thorough security review. Vulnerabilities accumulate quietly in active repositories, across languages and teams, often...
Bluetooth-app
Bluetooth Security Testing App A Kivy-based Android applicati...
Vulnerability Assessment vs Penetration Testing: What Security Leaders Need to Know
Your organization runs quarterly vulnerability scans. You get a report with hundreds, sometimes thousands, of findings. Your team patches what they can and moves on. Six months later, you bring in a penetration testing firm, and they walk right through your defenses using a chain of...
The vulnerability of the decoder in the Security Configuration Assessment (SCA) platform for security monitoring and threat detection by Wazuh allows a perpetrator to trigger a service failure and execute arbitrary code.
The vulnerability of the Security Configuration Assessment SCA platform for monitoring security and detecting threats via Wazuh is related to an operation that occurs outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures and execute...
The Complete Vulnerability Management Lifecycle: A 6-Stage Framework for Proactive Security
The National Vulnerability Database adds over 2,000 new CVEs every month. No security team can patch them all, and trying to do so is a fast track to burnout. The organizations that stay ahead of breaches aren't the ones that scan the most. They're the ones that follow a structured, repeatable...
Exploit for Path Traversal in Xibosignage Xibo
Xibo CMS CVE-2023-33177 Vulnerability Tester !Python 3.6+...
Cybersecurity Risk Assessment: The Complete Guide for Security Leaders
Most security teams treat risk assessments as a compliance checkbox, a periodic exercise that generates a thick report, collects dust for six months, and then gets repeated. The result? Organizations discover their biggest exposures only after an incident, not before. A cybersecurity risk...
Informational Bulletin: Impact assessment of OSS CVEs in PAN-OS
The Palo Alto Networks Product Security Assurance team has evaluated the following open source software OSS CVEs as they relate to PAN-OS software. While PAN-OS software may include the affected OSS package, PAN-OS does not offer any scenarios required for an attacker to successfully exploit thes...
Swiss-Bench 003: Evaluating LLM Reliability and Adversarial Security for Swiss Regulatory Contexts
The deployment of large language models LLMs in Swiss financial and regulatory contexts demands empirical evidence of both production reliability and adversarial security, dimensions not jointly operationalized in existing Swiss-focused evaluation frameworks. This paper introduces Swiss-Bench 003...
From Incomplete Architecture to Quantified Risk: Multimodal LLM-Driven Security Assessment for Cyber-Physical Systems
Cyber-physical systems often contend with incomplete architectural documentation or outdated information resulting from legacy technologies, knowledge management gaps, and the complexity of integrating diverse subsystems over extended operational lifecycles. This architectural incompleteness...
OrangeHRM 授权问题漏洞
OrangeHRM is a human resources management system developed by the American company OrangeHRM. This system supports functions such as personnel information management, leave management, attendance management, and recruitment management. Versions of OrangeHRM prior to 5.8 contained an authorization...
A Cryptography Engineer’s Perspective on Quantum Computing Timelines
My position on the urgency of rolling out quantum-resistant cryptography has changed compared to just a few months ago. You might have heard this privately from me in the past weeks, but it’s time to signal and justify this change of mind publicly. There had been rumors for a while of expected an...
@assemblerjs/electron (>=0.9.0, <=0.9.6), @easylayer/common (>=1.0.0, <=1.4.0) +11 more potentially affected by CVE-2026-34766 via electron (>=38.0.0, <=38.6.0)
electron NPM version =38.0.0, =0.9.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =2.19.0, =0.23.0, =0.4.1, =0.0.0-staging-2323fc3, =0.0.117, =0.0.120 - mcp-interactive 0.2.1 Source cves: CVE-2026-34766 Source advisory: SNYK:JS-ELECTRON-15876038...