2144 matches found
CVE-2011-10034 IRAI AUTOMGEN <= 8.0.0.7 Use-After-Free Remote DoS
AUTOMGEN versions up to and including 8.0.0.7 also referenced as 8.022 contain a vulnerability in that project file handling frees an object and subsequently dereferences the stale pointer when processing certain malformed fields. The dangling-pointer use enables an attacker to influence an...
CVE-2011-10034
CVE-2011-10034 affects IRAI AUTOMGEN up to version 8.0.0.7 (also 8.022). The issue is a use-after-free in project file handling: freeing an object then dereferencing a stale pointer when processing certain malformed fields. This dangling-pointer scenario enables an attacker to influence an indire...
PT-2025-46725
AUTOMGEN versions up to and including 8.0.0.7 also referenced as 8.022 contain a vulnerability in that project file handling frees an object and subsequently dereferences the stale pointer when processing certain malformed fields. The dangling-pointer use enables an attacker to influence an...
IRAI Automgen 安全漏洞
IRAI Automgen is a general-purpose automation software workbench from IRAI France. A security vulnerability exists in IRAI Automgen version 8.0.0.7 and prior versions, which originates from a post-release reuse issue in project file handling that could result in a denial of service or remote code...
open-vm-tools: Insecure file handling
A vulnerability was found in open-vm-tools. A malicious actor with non-administrative privileges on a guest virtual machine VM may tamper with the local files to trigger insecure file operations within that VM...
PT-2025-45275
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Kyle Phillips Favorites favorites allows PHP Local File Inclusion.This issue affects Favorites: from n/a through = 2.3.6...
About Remote Code Execution – Windows LNK File (CVE-2025-9491) vulnerability
About Remote Code Execution - Windows LNK File CVE-2025-9491 vulnerability. A vulnerability in the Microsoft Windows shortcut .LNK handling mechanism allows malicious command-line arguments to be hidden in the Target field using whitespace characters, making them invisible to standard tools...
CVE-2025-43391
A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data...
CVE-2025-43391
A privacy vulnerability in Apple operating systems allows an application to potentially access sensitive user data due to improper handling of temporary files . The issue affects iOS 26.1 , iPadOS 26.1 , macOS Sequoia 15.7.2 , macOS Sonoma 14.8.2 , and macOS Tahoe 26.1 . Remediation is available ...
CVE-2025-43391
A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2, iOS 26.1 and iPadOS 26.1. An app may be able to access sensitive user data...
Amazon Linux 2 : python3, --advisory ALAS2-2025-3041 (ALAS-2025-3041)
The version of python3 installed on the remote host is prior to 3.7.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3041 advisory. The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory EOCD Locator record offset value would not...
Medium: python3
Issue Overview: The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory EOCD Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed to be the previous record in the ZIP archive. This could be...
bagisto has Cross Site Scripting (XSS) issue in TinyMCE Image Upload (HTML)
Summary In Bagisto v2.3.7, the TinyMCE image upload functionality allows an attacker with sufficient privileges e.g. admin to upload a crafted HTML file containing embedded JavaScript. When viewed, the malicious code executes in the context of the admin/user’s browser. Details The application...
The vulnerability of the software for creating and managing images of virtual machines and containers in Azure Compute Gallery lies in improper external management of file names or paths, allowing an attacker to escalate their privileges.
The vulnerability of the software for creating and managing images of virtual machines and Azure Compute Gallery containers is related to improper external management of file names or paths. Exploiting this vulnerability can allow an attacker to increase their privileges...
EUVD-2017-0128
Malware in sbrugna...
EUVD-2017-0113
Malware in sbrugna...
EUVD-2017-0114
Malware in sbrugna...
EUVD-2010-2494
Malware in sbrugna...