388 matches found
EUVD-2021-19434
Malware in sbrugna...
EUVD-2025-16299
Malicious code in bioql PyPI...
EUVD-2025-19004
Malicious code in bioql PyPI...
EUVD-2025-14280
Malicious code in bioql PyPI...
CVE-2025-59349: Incorrect Permission Assignment for Critical Resource
Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, DragonFly2 uses the os.MkdirAll function to create certain directory paths with specific access permissions. This function does not perform any permission checks when a given directory path...
Cri-o: /etc/passwd tampering privesc
...
Cudy WR1200EA 安全漏洞
The Cudy WR1200EA is a WiFi router from the Chinese company Cudy. A security vulnerability exists in the Cudy WR1200EA version 2.3.7-20250113-121810, which originates from the /etc/shadow file that can be locally tampered with, resulting in the restoration of the default password...
Linux Distros Unpatched Vulnerability : CVE-2018-12088
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - S3QL before 2.27 mishandles checksumming, and consequently allows replay attacks in which an attacker who controls the backend can present old versions of the...
Linux Distros Unpatched Vulnerability : CVE-2025-22247
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to...
CVE-2025-49723 Windows StateRepository API Server file Tampering Vulnerability
...
CVE-2025-49723 Windows StateRepository API Server file Tampering Vulnerability
...
CVE-2025-39201
A vulnerability exists in MicroSCADA X SYS600 product. If exploited this could allow a local unauthenticated attacker to tamper a system file, making denial of Notify service...
CVE-2025-39201
A vulnerability exists in MicroSCADA X SYS600 product. If exploited this could allow a local unauthenticated attacker to tamper a system file, making denial of Notify service...
CVE-2025-39201
A vulnerability exists in MicroSCADA X SYS600 product. If exploited this could allow a local unauthenticated attacker to tamper a system file, making denial of Notify service...
CVE-2025-39201
A vulnerability exists in MicroSCADA X SYS600 product. If exploited this could allow a local unauthenticated attacker to tamper a system file, making denial of Notify service...
PT-2025-26715 · Unknown · Microscada X Sys600
Name of the Vulnerable Software and Affected Versions: MicroSCADA X SYS600 affected versions not specified Description: A vulnerability exists in the MicroSCADA X SYS600 product. If exploited, this could allow a local unauthenticated attacker to tamper with a system file, making denial of the...
Moderate: open-vm-tools security update
The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines. Security Fixes: open-vm-tools:A malicious actor with non-administrative...
ALSA-2025:A001 Moderate: open-vm-tools security update
The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines. Security Fixes: open-vm-tools:A malicious actor with non-administrative...
CVE-2025-46783: Improper Limitation of a Pathname to a Restricted Directory
Path traversal vulnerability exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is running by tampering with specific files used on the product...