PT-2025-34378 · Pdq · Pdq Smart Deploy

Name of the Vulnerable Software and Affected Versions: PDQ Smart Deploy version 3.0.2040 Description: An insecure permissions issue exists in PDQ Smart Deploy version 3.0.2040. A local attacker can execute arbitrary code via the HKLMSYSTEMSetupSmartDeploy component. Recommendations: At the moment...

CVE-2025-52095

An issue in PDQ Smart Deploy V.3.0.2040 allows an attacker to escalate privileges via the Credential encryption routines in SDCommon.dll...

PDQ Smart Deploy 安全漏洞

PDQ Smart Deploy is a Windows device imaging and deployment software from PDQ Corporation. A security vulnerability exists in PDQ Smart Deploy version 3.0.2040, which stems from a flaw in the credential encryption routines in SDCommon.dll that could lead to elevation of privilege...

CVE-2025-52094

Insecure Permissions vulnerability in PDQ Smart Deploy V.3.0.2040 allows a local attacker to execute arbtirary code via the \HKLM\SYSTEM\Setup\SmartDeploy component...

PDQ Smart Deploy 安全漏洞

PDQ Smart Deploy is a Windows device imaging and deployment software from PDQ Corporation. A security vulnerability exists in PDQ Smart Deploy version 3.0.2040, which stems from improper permissions on the HKLMSYSTEMSetupSmartDeploy component, and could lead to execution of arbitrary code by a...

CVE-2025-52095

Summary: PDQ Smart Deploy 3.0.2040 is affected by a privilege-escalation flaw in the credential encryption routines inside SDCommon.dll. Affected software/version: PDQ Smart Deploy, v3.0.2040. Root cause: flaw in the credential encryption routines in SDCommon.dll. Impact: attacker can escalate pr...

CVE-2025-52094

PDQ Smart Deploy 3.0.2040 is affected by an Insecure Permissions vulnerability. The root cause is improper permissions on HKLM\SYSTEM\Setup\SmartDeploy, enabling a local attacker to execute arbitrary code. Multiple sources (e.g., PT-2025-34378) confirm the affected version but do not provide a fi...

CVE-2025-52095

An issue in PDQ Smart Deploy V.3.0.2040 allows an attacker to escalate privileges via the Credential encryption routines in SDCommon.dll...

PT-2025-34379 · Pdq · Pdq Smart Deploy

Name of the Vulnerable Software and Affected Versions: PDQ Smart Deploy version 3.0.2040 Description: An issue allows an attacker to escalate privileges via the credential encryption routines in SDCommon.dll. Recommendations: At the moment, there is no information about a newer version that...

CVE-2025-52094

Insecure Permissions vulnerability in PDQ Smart Deploy V.3.0.2040 allows a local attacker to execute arbtirary code via the \HKLM\SYSTEM\Setup\SmartDeploy component...

Linux Distros Unpatched Vulnerability : CVE-2020-13296

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting versions =10.7 =13.1.0 =13.2.0 =10.7 =13.1.0 =13.2.0 13.2.6. Improper Access Control for Deploy Tokens...

Linux Distros Unpatched Vulnerability : CVE-2020-13322

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was discovered in GitLab versions after 12.9. Due to improper verification of permissions, an unauthorized user can create and delete deploy...

Linux Distros Unpatched Vulnerability : CVE-2023-5198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions prior to 16.2.7, all versions starting from 16.3 before 16.3.5, and all versions starting from 16....

Linux Distros Unpatched Vulnerability : CVE-2020-13316

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was not validating a Deploy-Token and allowed a disabled repository ...

CVE-2025-55285

A flaw has been discovered in the @backstage/plugin-scaffolder-backend npm package that can lead to an information leak. The fetch:template action in the Scaffolder improperly duplicates logging of input values, which can bypass the intended redaction of secrets. This means that an attacker with...

Malicious code in @amber-team/deploy-to-mailer (npm)

The package @amber-team/deploy-to-mailer was found to contain malicious code...

Malicious code in @amber-team/log-uptime-deploy (npm)

The package @amber-team/log-uptime-deploy was found to contain malicious code...

Malicious code in @frozen-team/deploy-log (npm)

The package @frozen-team/deploy-log was found to contain malicious code...

Malicious code in kubernetes-deploy (npm)

The package kubernetes-deploy was found to contain malicious code...

Malicious code in sed-deploy-shell-cat-grid (npm)

The package sed-deploy-shell-cat-grid was found to contain malicious code...