CVE-2025-22838

Uncontrolled search path for some IntelR RealSenseTM Dynamic Calibrator software before version 2.14.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

WordPress WP Dynamic Links plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien Patchstack Alliance in WordPress Plugin WP Dynamic Links versions = 1.0.1...

CVE-2025-30033

The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component...

CVE-2025-30033

CVE-2025-30033 is a DLL hijacking vulnerability in a Siemens setup component that could allow an attacker to execute arbitrary code at install time when a legitimate user runs an application using the affected installer. The vulnerability is documented across multiple sources (Siemens ProductCERT...

Intel RealSense Dynamic Calibrator code issue vulnerabilities

Intel RealSense Dynamic Calibrator is a software for optimizing and fine-tuning the depth and image quality of a camera from Intel Corporation USA. A code issue vulnerability exists in Intel RealSense Dynamic Calibrator versions prior to 2.14.2.0, which stems from an uncontrolled search path that...

PT-2025-32715 · Intel · Intel Realsense Dynamic Calibration

Name of the Vulnerable Software and Affected Versions: IntelR RealSenseTM Dynamic Calibrator versions prior to 2.14.2.0 Description: An uncontrolled search path issue exists in some IntelR RealSenseTM Dynamic Calibrator software. An authenticated user may be able to escalate privileges via local...

Linux Distros Unpatched Vulnerability : CVE-2022-49783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/fpu: Drop fpregs lock before inheriting FPU permissions Mike Galbraith reported the following against an old fork of preempt-rt but the same issue also...

PT-2025-32647

Name of the Vulnerable Software and Affected Versions Siemens Web Installer affected versions not specified Description The setup component is vulnerable to DLL hijacking, a technique where an application is tricked into loading a malicious dynamic-link library DLL instead of the intended one. Th...

New Ransomware Charon Uses Earth Baxia APT Techniques to Target Enterprises

We uncovered Charon, a new ransomware strainfamily that uses advanced APT-style techniques, including DLL sideloading, process injection, and anti-EDR capabilities, to target organizations with customized ransom demands...

New Ransomware Charon Uses Earth Baxia APT Techniques To Target Enterprises

We uncovered Charon, a new ransomware strainfamily that uses advanced APT-style techniques, including DLL sideloading, process injection, and anti-EDR capabilities, to target organizations with customized ransom demands...

CVE-2025-22838: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR RealSenseTM Dynamic Calibrator software before version 2.14.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

Linux Distros Unpatched Vulnerability : CVE-2024-7524

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Firefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced Tracking Protection. On a site protected by Content Security Policy i...

BIT-LIBPYTHON-2020-8315

In Python CPython 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure dependency load upon launch on Windows 7 may result in an attacker's copy of api-ms-win-core-path-l1-1-0.dll being loaded and used instead of the system's copy. Windows 8 and later are unaffected...

BIT-LIBPYTHON-2020-15523

In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4, and 3.9 through 3.9.0 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use an invalid search path for python3.dll loading after...

Obfuscated Quantum and Post-Quantum Cryptography

In this work, we present an experimental deployment of a new design for combined quantum key distribution QKD and post-quantum cryptography PQC. Novel to our system is the dynamic obfuscation of the QKD-PQC sequence of operations, the number of operations, and parameters related to the operations...

Linux Distros Unpatched Vulnerability : CVE-2025-52889

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incus is a system container and virtual machine manager. When using an ACL on a device connected to a bridge, Incus version 6.12 and 6.13 generates nftables rul...

Linux Distros Unpatched Vulnerability : CVE-2025-38076

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: alloctag: allocate percpu counters for module tags dynamically When a module gets unloaded i...

Linux Distros Unpatched Vulnerability : CVE-2024-26738

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: DLPAR add doesn't completely initialize pcicontroller When a PCI devi...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: prometheus-mysqld-exporter-fips, hcloud, mcp-grafana-fips, mc, trivy-operator, openbao-fips, knative-operator, opa, cloud-provider-azure-fips, nerdctl, kind, kube-conformance, prometheus-mongodb-exporter, kiam, jaeger-operator, gatekeeper-fips,...

Linux Distros Unpatched Vulnerability : CVE-2022-49892

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ftrace: Fix use-after-free for dynamic ftraceops KASAN reported a use-after-free with ftrace ops 1. It was found from vmcore that perf had registered two ops wi...