20870 matches found
Rack has an unsafe default in Rack::QueryParser allows params_limit bypass via semicolon-separated parameters
Summary Rack::QueryParser in version 2.2.18 enforces its paramslimit only for parameters separated by &, while still splitting on both & and ;. As a result, attackers could use ; separators to bypass the parameter count limit and submit more parameters than intended. Details The issue arises...
Chromium: CVE-2025-10891 Integer overflow in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-10890 Side-channel information leakage in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
CVE-2025-59402
The CVE-2025-59402 entry concerns Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017. The vulnerability arises from accepting the default Thundercomm TurboX 6490 Firehose loader in EDL/QDL mode, which under physical access enables flashing arbitrary firmware, dumping partitions,...
PT-2025-39454
Name of the Vulnerable Software and Affected Versions Flock Safety Bravo Edge AI Compute Device version BRAVO 00.00 local 20241017 Description The device ships with its bootloader unlocked, which allows bypassing Android Verified Boot AVB and direct modification of partitions. This could allow an...
Flock Safety The Bravo Compute Box 安全漏洞
Flock Safety The Bravo Compute Box is an edge computing device from Flock Safety USA. A security vulnerability exists in Flock Safety The Bravo Compute Box BRAVO00.00local20241017 version, which stems from a disabled secure boot, which could lead to an attacker flashing specially crafted firmware...
PT-2025-39453
Name of the Vulnerable Software and Affected Versions Flock Safety Bravo Edge AI Compute Device version BRAVO 00.00 local 20241017 Description The Flock Safety Bravo Edge AI Compute Device allows attackers with physical access to flash arbitrary firmware, dump partitions, and bypass bootloader an...
CVE-2025-59404
CVE-2025-59404 affects Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017. The underlying issue is an unlocked bootloader, which permits bypassing Android Verified Boot (AVB) and direct modification of partitions. This can impact integrity (I: HIGH) while confidentiality and ava...
CVE-2025-59408
Flock Safety Bravo Edge AI Compute Device BRAVO00.00local20241017 ships with Secure Boot disabled. This allows an attacker to flash modified firmware with no cryptographic protections...
CVE-2025-59408
The CVE-2025-59408 entry refers to Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 with Secure Boot disabled, enabling modification of firmware without cryptographic protections. The NVD/NVD-derived descriptions confirm the device can be flashed with modified firmware due to ...
Microsoft Edge (Chromium) < 140.0.3485.94 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 140.0.3485.94. It is, therefore, affected by multiple vulnerabilities as referenced in the September 25, 2025 advisory. - Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to...
CVE-2025-59404
Flock Safety Bravo Edge AI Compute Device BRAVO00.00local20241017 ships with its bootloader unlocked. This permits bypass of Android Verified Boot AVB and allows direct modification of partitions...
KLA88448 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Edge Chromium-based can be...
PT-2025-45395
Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified Description An issue in Google Chrome may allow attackers to affect the system. The root cause is an inappropriate implementation in Views. This affects Microsoft Edge Chromium-based as it ingests...
CVE-2025-59251
Microsoft Edge Chromium-based Remote Code Execution Vulnerability...
CVE-2025-59251
Microsoft Edge Chromium-based Remote Code Execution Vulnerability...
CVE-2025-59251 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
CVE-2025-59251
CVE-2025-59251 concerns Microsoft Edge (Chromium-based). The provided documents confirm a Remote Code Execution vulnerability in Edge, with affected product/version generally described as Edge based on Chromium. The CVE entry associates a network-exploit path requiring user interaction, yielding ...