7610 matches found
Malicious Package
Overview monzo-com is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
CVE-2025-12305 quequnlong shiyi-blog Job SysJobController.java deserialization
A vulnerability was found in quequnlong shiyi-blog up to 1.2.1. This impacts an unknown function of the file src/main/java/com/mojian/controller/SysJobController.java of the component Job Handler. The manipulation results in deserialization. The attack can be executed remotely. The exploit has be...
Malwarebytes for Teams 安全漏洞
Malwarebytes for Teams is a multi-terminal protection suite from US-based Malwarebytes, Inc. A security vulnerability exists in Malwarebytes for Teams version 1.0.990 and earlier, which stems from a flaw in the COM interface that could lead to elevated privileges...
CVE-2021-43768
In Malwarebytes For Teams v.1.0.990 and before and fixed in v.1.0.1003 and later a privilege escalation can occur via the COM interface running in mbamservice.exe...
CVE-2021-43768: Improper Privilege Management
In Malwarebytes For Teams v.1.0.990 and before and fixed in v.1.0.1003 and later a privilege escalation can occur via the COM interface running in mbamservice.exe...
CVE-2021-43768
In Malwarebytes For Teams v.1.0.990 and before and fixed in v.1.0.1003 and later a privilege escalation can occur via the COM interface running in mbamservice.exe...
PT-2025-43621
Name of the Vulnerable Software and Affected Versions Malwarebytes For Teams versions prior to 1.0.1003 Description A privilege escalation can occur through the COM interface within the mbamservice.exe process. Recommendations Update Malwarebytes For Teams to version 1.0.1003 or later...
CVE-2021-43768
In Malwarebytes For Teams v.1.0.990 and before and fixed in v.1.0.1003 and later a privilege escalation can occur via the COM interface running in mbamservice.exe...
The vulnerability of Inbox COM objects in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of Inbox COM objects in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the Windows operating system’s COM+ Event System Service allows a perpetrator to escalate their privileges.
The vulnerability of the Windows operating system’s COM+ Event System Service is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
EUVD-2025-34862
Malicious code in monzo-com npm...
Malicious code in monzo-com (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39349f1d7e9c11249daccdfa4fd66aece003c79426359c49af2c3d56c341d195 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48449 Malicious code in monzo-com (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39349f1d7e9c11249daccdfa4fd66aece003c79426359c49af2c3d56c341d195 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Microsoft Inbox COM Objects Code Execution Vulnerability
Microsoft Inbox COM Objects is a built-in COM component of the Windows operating system from the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Inbox COM Objects, which can be exploited by an attacker to execute arbitrary code on a system...
CVE-2025-58725
Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally...
CVE-2025-58734
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-9437
A security issue exists within the Studio 5000 Logix Designer add-on profile AOP for the ArmorStart Classic distributed motor controller, resulting in denial-of-service. This vulnerability is possible due to the input of invalid values into Component Object Model COM methods...
CVE-2025-59282
Concurrent execution using shared resource with improper synchronization 'race condition' in Inbox COM Objects allows an unauthorized attacker to execute code locally...