857 matches found
CVE-2025-69009
Missing Authorization vulnerability in kamleshyadav Medicalequipment medicalequipment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Medicalequipment: from n/a through = 1.0.9...
PT-2025-54369
Name of the Vulnerable Software and Affected Versions Themesawesome History Timeline versions through 1.0.6 Description A missing authorization flaw exists in Themesawesome History Timeline, stemming from incorrectly configured access control security levels. This allows for potential exploitatio...
CVE-2025-34451
A flaw was found in proxychains-ng. An attacker can exploit a stack-based buffer overflow vulnerability in the proxyfromstring function by providing crafted proxy configuration entries containing overly long username or password fields. This can lead to memory corruption or application crashes,...
UBUNTU-CVE-2025-34449
Genymobile/scrcpy versions up to and including 3.3.3, prior to commit 3e40b24, contain a buffer overflow vulnerability in the scdevicemsgdeserialize function. A compromised device can send crafted messages that cause out-of-bounds reads, which may result in memory corruption or a denial-of-servic...
PT-2025-51111
Name of the Vulnerable Software and Affected Versions affected versions not specified Description The issue occurs when a client retrieves a tools’ JSON specification, referred to as a Manual, from a remote Manual Endpoint. A provider can initially deliver a harmless manual, establishing client...
CVE-2025-63023
Missing Authorization vulnerability in Easy Payment Payment Gateway for PayPal on WooCommerce woo-paypal-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Payment Gateway for PayPal on WooCommerce: from n/a through = 9.0.53...
expat: Integer overflow in doProlog in xmlparse.c
expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...
CVE-2025-66326
Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect availability...
Microsoft Outlook 资源管理错误漏洞
Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. A security vulnerability exists in Microsoft Outlook. An attacker could exploit the vulnerability to remotely execute code...
Exploit for Deserialization of Untrusted Data in Facebook React
🛡️ CVE-2025-55182 Security Tools Complete toolset for detec...
The vulnerability of the Linux operating system’s kernel, which allows a hacker to trigger a service failure
The vulnerability of the Linux operating system’s kernel is related to insufficient blocking measures. Exploiting this vulnerability allows an attacker to cause a service failure...
Docker MCP Gateway 安全漏洞
Docker MCP Gateway is a gateway service from Docker Inc. in the United States. A security vulnerability exists in Docker MCP Gateway version 0.27.0 and earlier, which stems from vulnerability to DNS rebinding attacks when running in sse or streaming transport mode, and could lead to browser-based...
The vulnerability of Google Chrome’s DevTools component, which allows a hacker to bypass the sandboxing protection mechanism
The vulnerability of Google Chrome’s DevTools component is related to deficiencies in isolating access control. Exploiting this vulnerability could allow a malicious actor to bypass the sandboxing protection mechanisms...
CVE-2025-64315
Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity...
PT-2025-48297
Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affect availability...
JLSEC-2025-247 A vulnerability has been identified in the libarchive library
A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to...
CVE-2025-66065
Missing Authorization vulnerability in Jegstudio Gutenverse gutenverse allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenverse: from n/a through = 3.2.1...
CVE-2025-12284
Lack of Input Validation in the web UI might lead to potential exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
