18478 matches found
📄 PivotX 3.0.0 RC3 Remote Code Execution / Cross Site Scripting
PivotX version 3.0.0 RC3 suffers from a persistent cross site scripting vulnerability that can assist an attacker in achieving remote code execution once privileges are escalated. Exploit Title: PivotX v3.0.0 RC3 - Stored XSS to Remote Code Execution RCE Date: July 2025 Exploit Author: HayToN...
Adobe Framemaker Heap Buffer Overflow Vulnerability (CNVD-2025-16223)
Adobe FrameMaker is a powerful tool for creating complex technical documentation and publishing it to a variety of delivery channels. A heap buffer overflow vulnerability exists in Adobe Framemaker 2020.8, 2022.6 and earlier versions. An attacker can exploit this vulnerability to execute arbitrar...
MINI-3PGG-HVHJ-V94J
Bulletin has no description...
(Pwn2Own) Oracle VirtualBox VMSVGA Integer Overflow Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...
The State of Cyber Risk 2025: Business Context Needed
The cyber risk conversation is changing. Momentum is growing for formal cyber risk programs. However, despite rising investments, evolving frameworks, and more vocal boardroom interest, new data reveals that most organizations remain immature in their risk management programs, and cyber risk is...
Coverage Plus Context Equals Intelligent Exposure Management
Common Vulnerabilities and Exposures CVEs is the standardized directory of publicly known software flaws that attackers can exploit to carry out cyber attacks. Vulnerability management solutions scan for CVEs to give you a list of all the gaps in your attack surface, but the volume of new...
XWiki Rendering 安全漏洞
XWiki Rendering is a general-purpose rendering system from the XWiki Foundation that converts text input from a given syntax wiki syntax, HTML, etc. to another syntax XHTML, etc.. A security vulnerability exists in XWiki Rendering versions prior to 4.2-milestone-1, prior to 13.10.11, prior to...
OESA-2025-1771 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A heap-use-after-free i...
ksmbd: add bounds check for durable handle context
...
net: tls: explicitly disallow disconnect
...
perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
...
ksmbd: add bounds check for create lease context
...
spufs: fix a leak in spufs_create_context()
...
virtiofs: add filesystem context source name check
...
drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()
...
pds_core: make wait_context part of q_info
...
Marvell QConvergeConsole path traversal vulnerability (CNVD-2025-20449)
Marvell QConvergeConsole is a unified adapter management software across data centers from Marvell USA. A path traversal vulnerability exists in Marvell QConvergeConsole due to an error in getFileUploadSize. An attacker could exploit the vulnerability to disclose information in the SYSTEM context...
Marvell QConvergeConsole Path Traversal Vulnerability (CNVD-2025-20443)
Marvell QConvergeConsole is a unified adapter management software across data centers from Marvell USA. A path traversal vulnerability exists in Marvell QConvergeConsole due to an error in the deleteAppFile method. An attacker could exploit the vulnerability to delete a file in the SYSTEM context...
Marvell QConvergeConsole Path Traversal Vulnerability (CNVD-2025-20441)
Marvell QConvergeConsole is a unified adapter management software across data centers from Marvell USA. A path traversal vulnerability exists in Marvell QConvergeConsole due to an error in the compressDriverFiles method. An attacker could exploit the vulnerability to disclose information in the...
Marvell QConvergeConsole Path Traversal Vulnerability (CNVD-2025-20448)
Marvell QConvergeConsole is a unified adapter management software across data centers from Marvell USA. A path traversal vulnerability exists in Marvell QConvergeConsole due to an error in the getFileUploadBytes method. An attacker could exploit the vulnerability to disclose information in the...