CVE-2025-65078: Untrusted Search Path

An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code...

CVE-2025-65077: Improper Limitation of a Pathname to a Restricted Directory

A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user...

PT-2026-5945

Name of the Vulnerable Software and Affected Versions Lexmark Embedded Solutions Framework affected versions not specified Description A relative path traversal issue exists in the Embedded Solutions Framework used in Lexmark devices. An attacker could potentially use this to execute arbitrary co...

[SECURITY] Fedora 43 Update: cef-144.0.11^chromium144.0.7559.96-1.fc43

CEF is an embeddable build of Chromium, powered by WebKit Blink...

SysFuSS: System-Level Firmware Fuzzing with Selective Symbolic Execution

Firmware serves as the critical interface between hardware and software in computing systems, making any bugs or vulnerabilities particularly dangerous as they can cause catastrophic system failures. While fuzzing is a promising approach for identifying design flaws and security vulnerabilities,...

Qualcomm Embedded Software DoS

The vulnerability of embedded software developed by Qualcomm exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2024-9432 Cleartext Storage of Sensitive Information vulnerability has been discovered in OpenText™ Vertica.

Cleartext Storage of Sensitive Information vulnerability in OpenText™ Vertica allows Retrieve Embedded Sensitive Data. The vulnerability could read Vertica agent plaintext apikey.This issue affects Vertica versions: 23.X, 24.X, 25.X...

ESET Inspect Connector security vulnerabilities

ESET Inspect Connector is a lightweight terminal agent component developed by ESET Singapore. There is a security vulnerability in ESET Inspect Connector, which stems from the possibility of loading malicious DLLs due to the embedding of custom configuration files...

Qualcomm Embedded Software Buffer Overflow Information Disclosure

The vulnerability of microprogramming software in embedded chips from Qualcomm arises due to overflow in the buffer on the stack. Exploiting this vulnerability can allow an attacker to disclose protected information during the processing of packets with invalid header lengths based on the EAVB BE...

Qualcomm Heap Buffer Overflow Information Disclosure

The vulnerability of embedded Qualcomm software lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information during the processing of the MBN file hash segment...

Qualcomm embedded firmware DoS

The vulnerability of WLAN microprogramming software in Qualcomm embedded chips lies in the use of the assert function or similar operators. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a specially crafted NDP packet...

DSP-service Qualcomm Data Compromise

The vulnerability of the DSP-service of microprogramming software in embedded chips from Qualcomm arises from incorrect validation of the array index. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

Qualcomm DSP Full Control

The vulnerability of the DSP Digital Signal Processor microprogramming system in Qualcomm’s embedded chips is related to unreliable pointer handling. Exploiting this vulnerability can allow an attacker to gain full control over the device...

Qualcomm embedded firmware DoS

The vulnerability of WLAN microprogramming software’s firmware in Qualcomm embedded chips stems from operations that occur outside of the buffers. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

EUVD-2026-4855

bulkextractor is a digital forensics exploitation tool. Starting in version 1.4, bulkextractor’s embedded unrar code has a heap‑buffer‑overflow in the RAR PPM LZ decoding path. A crafted RAR inside a disk image causes an out‑of‑bounds write in Unpack::CopyString, leading to a crash under ASAN and...

Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft

CVE-2026-21509-PoC Educational PoC for CVE‑2026‑21509...

PT-2026-5229

Name of the Vulnerable Software and Affected Versions bulk extractor versions 1.4 and later Description bulk extractor is a digital forensics exploitation tool. The embedded unrar code within bulk extractor, starting with version 1.4, contains a heap-buffer-overflow in the RAR PPM LZ decoding pat...

Exploit for CVE-2026-21509

🛡️ CVE-2026-21509 — Microsoft Office Zero-Day !OFFICEhttps...

Malicious code in @row-components/pricing-embedded-sui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63928e8cf0861bfa8d3def2e822d818c038315c0a9d5918b6f27aeaab7ec9e3a The package @row-components/pricing-embedded-sui was found to contain malicious code. Source: ghsa-malware...

MAL-2026-526 Malicious code in @row-components/pricing-embedded-sui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63928e8cf0861bfa8d3def2e822d818c038315c0a9d5918b6f27aeaab7ec9e3a The package @row-components/pricing-embedded-sui was found to contain malicious code. Source: ghsa-malware...