16747 matches found
Microsoft Windows Remote Procedure Call Runtime Resource Management Vulnerability
Microsoft Windows Remote Procedure Call Runtime is a powerful technology for creating distributed client/server programs from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Remote Procedure Call Runtime, which can be exploited by an attacker to...
PT-2025-42157
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An issue involving uncontrolled resource consumption exists in Windows Remote Procedure Call. This can allow an unauthorized attacker to cause a denial of service over a network...
cobbler-file-read-exploit
Cobbler XML-RPC Arbitrary File Read Exploit !Python Version...
CVE-2025-27049
Transient DOS while processing IOCTL call for image encoding...
CVE-2025-27059
Memory corruption while performing SCM call...
CVE-2025-27060
Memory corruption while performing SCM call with malformed inputs...
CVE-2025-47349
Memory corruption while processing an escape call...
CVE-2025-44823
Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/getusers call. This is GL:NLS475...
New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps
A rapidly evolving Android spyware campaign called ClayRat has targeted users in Russia using a mix of Telegram channels and lookalike phishing websites by impersonating popular apps like WhatsApp, Google Photos, TikTok, and YouTube as lures to install them. "Once active, the spyware can exfiltra...
New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps
A rapidly evolving Android spyware campaign called ClayRat has targeted users in Russia using a mix of Telegram channels and lookalike phishing websites by impersonating popular apps like WhatsApp, Google Photos, TikTok, and YouTube as lures to install them. "Once active, the spyware can exfiltra...
CVE-2025-39962
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix untrusted unsigned subtract Fix the following Smatch static checker warning: net/rxrpc/rxgkapp.c:65 rxgkyfsdecodeticket warn: untrusted unsigned subtract. 'ticketlen - 10 4' by prechecking the length of what we're tryi...
CVE-2025-39955
In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcpsksk-fastopenrsk in tcpdisconnect. syzbot reported the splat below where a socket had tcpsksk-fastopenrsk in the TCPESTABLISHED state. 0 syzbot reused the server-side TCP Fast Open socket as a new client before the...
CVE-2025-47349
Memory corruption while processing an escape call...
CVE-2025-27059
Memory corruption while performing SCM call...
CVE-2025-47349 Use of Out-of-range Pointer Offset in DSP Service
Memory corruption while processing an escape call...
CVE-2025-47349 Use of Out-of-range Pointer Offset in DSP Service
Memory corruption while processing an escape call...
EUVD-2025-33253
Memory corruption while processing an escape call...
CVE-2025-47349
CVE-2025-47349 describes memory corruption in Qualcomm chipsets when processing an escape call, related to an out-of-range pointer offset in the DSP service. The Red Hat/NVD/CVE records corroborate a memory corruption impact with high severity (local, attacker requires low privileges, no user int...