24 matches found
EUVD-2025-12448
Malicious code in bioql PyPI...
EUVD-2023-48335
Malicious code in bioql PyPI...
CVE-2025-7012
An issue in Cato Networks' CatoClient for Linux, before version 5.5, allows a local attacker to escalate privileges to root by exploiting improper symbolic link handling...
CVE-2025-7012
An issue in Cato Networks' CatoClient for Linux, before version 5.5, allows a local attacker to escalate privileges to root by exploiting improper symbolic link handling...
CVE-2025-7012 Cato Networks Linux Client Local Privilege Escalation via Symlink
An issue in Cato Networks' CatoClient for Linux, before version 5.5, allows a local attacker to escalate privileges to root by exploiting improper symbolic link handling...
CVE-2025-7012
CVE-2025-7012 affects Cato Networks’ CatoClient for Linux before 5.5. The issue arises from improper symbolic link handling, enabling a local attacker to escalate privileges to root. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE lists, PT Security) with a base score o...
CVE-2025-7012: Improper Link Resolution Before File Access
An issue in Cato Networks' CatoClient for Linux, before version 5.5, allows a local attacker to escalate privileges to root by exploiting improper symbolic link handling...
PT-2025-29365 · Cato Networks · Catoclient
Name of the Vulnerable Software and Affected Versions: CatoClient versions prior to 5.5 Description: An issue in CatoClient for Linux allows a local attacker to escalate privileges to root by exploiting improper symbolic link handling. Recommendations: Update CatoClient to version 5.5 or later...
CVE-2025-3886
An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition TOCTOU via the PrivilegedHelperTool component...
CVE-2025-3886
An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition TOCTOU via the PrivilegedHelperTool component...
CVE-2025-3886
An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition TOCTOU via the PrivilegedHelperTool component...
CVE-2025-3886 CatoNetworks CatoClient up to 5.8 PrivilegedHelperTool Race Condition
An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition TOCTOU via the PrivilegedHelperTool component...
CVE-2025-3886
CVE-2025-3886 affects CatoNetworks CatoClient prior to v5.8.0, via the PrivilegedHelperTool component, enabling privilege escalation through a TOCTOU race condition. The NVD entry lists CVSS 3.1: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H (base 8.1, HIGH); ATT&CK not explicitly stated in provided docs. ...
CVE-2025-3886 CatoNetworks CatoClient up to 5.8 PrivilegedHelperTool Race Condition
An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition TOCTOU via the PrivilegedHelperTool component...
CVE-2025-3886: Concurrent Execution using Shared Resource with Improper Synchronization
An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition TOCTOU via the PrivilegedHelperTool component...
CatoNetworks CatoClient 安全漏洞
CatoNetworks CatoClient is a security client software from CatoNetworks, Inc. for secure access to enterprise network resources, supporting global SD-WAN and security services. A security vulnerability exists in CatoNetworks CatoClient versions prior to 5.8.0, which stems from a competing conditi...
CVE-2023-43976
An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and winning the race condition TOCTOU via the PrivilegedHelperTool component...
CVE-2023-43976
An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and winning the race condition TOCTOU via the PrivilegedHelperTool component...
