CVE-2025-11178

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image Windows before build 42386, Acronis True Image for Western Digital Windows before build 42636, Acronis True Image for SanDisk Windows before build 42679, Acronis True Image OEM...

CVE-2025-59684

DigiSign DigiSigner ONE 1.0.4.60 allows DLL Hijacking...

CVE-2025-59684

DigiSign DigiSigner ONE 1.0.4.60 allows DLL Hijacking...

DNS Hijacking 101: How It Happens and What You Can Do to Prevent It

...

CVE-2025-59684

DigiSign DigiSigner ONE 1.0.4.60 allows DLL Hijacking...

PT-2025-40303

Name of the Vulnerable Software and Affected Versions NVIDIA Nsight Graphics for Windows affected versions not specified Description The software contains a flaw in the ngfx component that could allow an attacker to perform a DLL highjacking attack. Exploitation of this issue may result in code...

NVIDIA Nsight Graphics for Windows 代码问题漏洞

NVIDIA Nsight Graphics for Windows is a GPU graphics debugging and performance analysis tool from NVIDIA. A code issue vulnerability exists in NVIDIA Nsight Graphics for Windows, which stems from the vulnerability of the ngfx component to a DLL hijacking attack that could lead to code execution,...

CVE-2025-59684

DigiSign DigiSigner ONE 1.0.4.60 allows DLL Hijacking...

CVE-2025-59684

DigiSign DigiSigner ONE 1.0.4.60 is affected by a DLL hijacking vulnerability. The issue, described across multiple sources, specifies that an attacker could leverage DLL hijacking to achieve code execution with high impact (CVE-2025-59684). The CVSS3.1 vector indicates Network exploitation, low ...

CVE-2025-54592

FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not properly terminate the session during logout. After a user logs out, the session cookie remains active and unchanged. The unchanged cookie could be reused by an attacker if a new session were to be started. This...

CVE-2025-11178

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image Windows before build 42386, Acronis True Image for Western Digital Windows before build 42636, Acronis True Image for SanDisk Windows before build 42679, Acronis True Image OEM...

CVE-2025-11178

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image Windows before build 42386, Acronis True Image for Western Digital Windows before build 42636, Acronis True Image for SanDisk Windows before build 42679, Acronis True Image OEM...

CVE-2025-11178

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image Windows before build 42386, Acronis True Image for Western Digital Windows before build 42636, Acronis True Image for SanDisk Windows before build 42679...

CVE-2025-11178

CVE-2025-11178 is a local privilege escalation vulnerability in Acronis True Image for Windows before builds 42386 (standard), 42636 (Western Digital), and 42679 (SanDisk). The issue is caused by DLL hijacking, enabling an attacker with local access and low privileges to escalate privileges (impa...

Acronis True Image 代码问题漏洞

Acronis True Image is a well-known data backup and restore software from the Swiss company Acronis. The software can be used to create drive and disk images and can restore the image when a clean system is needed. A code issue vulnerability exists in versions prior to Acronis True Image 42386,...

CHAI: Command Hijacking against Embodied AI

Embodied Artificial Intelligence AI promises to handle edge cases in robotic vehicle systems where data is scarce by using common-sense reasoning grounded in perception and action to generalize beyond training distributions and adapt to novel real-world situations. These capabilities, however, al...

CVE-2025-56513

CVE-2025-56513 affects NiceHash QuickMiner v6.12.0, where the update mechanism uses HTTP without signature/hash verification, enabling a Network-based MITM to replace updates and execute arbitrary code. Root cause: unencrypted update delivery and absence of digital signatures/integrity checks for...

NewStart CGSL MAIN 6.06 : c-ares Vulnerability (NS-SA-2025-0226)

The remote NewStart CGSL host, running version MAIN 6.06, has c-ares packages installed that are affected by a vulnerability: - A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS Domain Name Servers can lead to output of wrong hostnames which...

CVE-2025-54592

FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not properly terminate the session during logout. After a user logs out, the session cookie remains active and unchanged. The unchanged cookie could be reused by an attacker if a new session were to be started. This...

CVE-2025-54592 FreshRSS has Incomplete Session Termination on Logout

FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not properly terminate the session during logout. After a user logs out, the session cookie remains active and unchanged. The unchanged cookie could be reused by an attacker if a new session were to be started. This...