131 matches found
CVE-2025-58303
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-58307
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-58307
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-58307
Huawei HarmonyOS uses a screen recording framework module with a memory misreference (UAF) vulnerability that can be exploited locally to affect availability. Affected component: screen recording framework module in HarmonyOS. Root cause: memory misreference. Impact: availability. Exploitation de...
CVE-2025-58307
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-58303
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-58303
CVE-2025-58303 concerns Huawei HarmonyOS: memory misreference/use-after-free in the screen recording framework module. Root cause: UAF/memory misreference leading to availability impact. Affected component: screen recording framework module (HarmonyOS). Impact per sources: availability disruption...
CVE-2025-58307: Use After Free
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...
PT-2025-48294
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...
MAL-2025-144078 Malicious code in jwt-leda-framework-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb4f8cb8d4f557c3034d71e7ecaf0ff765c06e1a8805438ce959a7d22ca3637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112035
Malicious code in jwt-leda-framework-module npm...
CVE-2025-58295
Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability...
CVE-2025-58295
Huawei HarmonyOS development framework module contains a buffer overflow vulnerability that may affect availability. Connected documents corroborate a buffer overflow in the development framework module and its impact on availability, without detailing affected versions, exploitation status, or a...
CVE-2025-58295
Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability...
CVE-2025-58295: Stack-based Buffer Overflow
Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability...
PT-2025-41657
Name of the Vulnerable Software and Affected Versions Development framework module affected versions not specified Description A buffer overflow issue exists within the development framework module. Exploitation of this issue could impact system availability. Recommendations At the moment, there ...
EUVD-2024-53859
Malicious code in bioql PyPI...
CVE-2025-55211
FreePBX is an open-source web-based graphical user interface. From 17.0.19.11 to before 17.0.21, authenticated users of the Administrator Control Panel ACP can run arbitrary shell commands by maliciously changing languages of the framework module. This vulnerability is fixed in 17.0.21...
CVE-2025-55211 FreePBX Post-Authenticated Command Injection
FreePBX is an open-source web-based graphical user interface. From 17.0.19.11 to before 17.0.21, authenticated users of the Administrator Control Panel ACP can run arbitrary shell commands by maliciously changing languages of the framework module. This vulnerability is fixed in 17.0.21...
CVE-2025-55211 FreePBX Post-Authenticated Command Injection
FreePBX is an open-source web-based graphical user interface. From 17.0.19.11 to before 17.0.21, authenticated users of the Administrator Control Panel ACP can run arbitrary shell commands by maliciously changing languages of the framework module. This vulnerability is fixed in 17.0.21...