CVE-2025-25680

LSC Smart Connect LSC Indoor PTZ Camera 7.6.32 is contains a RCE vulnerability in the tuyaipcdirectconnect function of the anykaipc process. The vulnerability allows arbitrary code execution through the Wi-Fi configuration process when a specially crafted QR code is presented to the camera...

LSC Smart Connect Indoor IP Camera has a security vulnerability

LSC Smart Connect Indoor IP Camera is an indoor IP camera driver from LSC Smart Connect. A security vulnerability exists in LSC Smart Connect Indoor IP Camera version 7.6.32, which stems from a remote code execution issue in the tuyaipcdirectconnect function...

CVE-2025-25680

The LSC Smart Connect LSC Indoor PTZ Camera version 7.6.32 is susceptible to a Remote Code Execution (RCE) vulnerability within the tuya_ipc_direct_connect function of the anyka_ipc process. An attacker can achieve arbitrary code execution during the Wi-Fi configuration process by presenting a sp...

CVE-2025-25680

LSC Smart Connect LSC Indoor PTZ Camera 7.6.32 is contains a RCE vulnerability in the tuyaipcdirectconnect function of the anykaipc process. The vulnerability allows arbitrary code execution through the Wi-Fi configuration process when a specially crafted QR code is presented to the camera...

RealVNC Connect Server Installed (Linux)

Binary data realvncconnectservernixinstalled.nbin...

CVE-2025-27912: Cross-Site Request Forgery (CSRF)

An issue was discovered in Datalust Seq before 2024.3.13545. Missing Content-Type validation can lead to CSRF when 1 Entra ID or OpenID Connect authentication is in use and a user visits a compromised/malicious site, or 2 when username/password or Active Directory authentication is in use and a...

Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure

Ivanti-CVE-2025-0282...

Phase Five Systems Jump Desktop Connect Installed (macOS)

Binary data phase5systemsjumpdesktopconnectmacinstalled.nbin...

Phase Five Systems Jump Desktop Connect Installed (Windows)

Binary data phase5systemsjumpdesktopconnectwininstalled.nbin...

SUSE-SU-2025:20232-1 Security update for glib2

This update for glib2 fixes the following issues: - CVE-2024-52533: Fixed a single byte buffer overflow in setconnectmsg bsc1233282...

Security update for glib2

This update for glib2 fixes the following issues: CVE-2024-52533: Fixed a single byte buffer overflow in setconnectmsg bsc1233282 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

CVE-2025-27370

OpenID Connect Core through 1.0 errata set 2 allows audience injection in certain situations. When the privatekeyjwt authentication mechanism is used, a malicious Authorization Server could trick a Client into writing attacker-controlled values into the audience, including token endpoints or issu...

Ivanti Connect Secure IPSec DoS

The vulnerability of the IPSec component in the Ivanti Connect Secure network access control tool is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Ivanti Connect Secure Buffer Overflow DoS

The vulnerability of Ivanti Connect Secure and Ivanti Policy Secure network access control tools is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Ivanti Connect Secure Policy Secure Privilege Bypass

The vulnerability of the Ivanti Connect Secure and Ivanti Policy Secure network access control tools is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

Ivanti Connect Secure Policy Secure DoS

The vulnerability of the Ivanti Connect Secure and Ivanti Policy Secure network access control tools is related to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Ivanti Connect Secure Heap Buffer Overflow DoS

The vulnerability of the Ivanti Connect Secure network access control tool is related to reading data beyond the allowed range in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

IBM DB2 Query Handler DoS

The vulnerability of the Query Handler component of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using ...

IBM DB2 Query Handler DoS

The vulnerability of the Query Handler component of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using ...

Ivanti Connect Secure IPSec DoS

The vulnerability of the IPSec component in the Ivanti Connect Secure network access control tool is related to reading data beyond the allowed range in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...