PT-2025-32635 · Nssm.Exe · Nssm.Exe

Name of the Vulnerable Software and Affected Versions: nssm.exe affected versions not specified Description: A local attacker with limited privileges can exploit improper permissions on nssm.exe to escalate privileges and gain administrative access. Recommendations: At the moment, there is no...

Linux Distros Unpatched Vulnerability : CVE-2025-32697

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files...

The vulnerability of the Vagrant VMWare Utility service lies in the improper assignment of permissions to the critical resource, allowing an attacker to gain read and modify access to files.

The vulnerability of the Vagrant VMWare Utility relates to the improper assignment of permissions for the critical resource. Exploiting this vulnerability can allow an attacker to gain read and write access to files...

Linux Distros Unpatched Vulnerability : CVE-2025-32696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files...

4C Strategies Exonaut 安全漏洞

4C Strategies Exonaut is a training, exercise and readiness management platform from the Swedish company 4C Strategies. A security vulnerability exists in versions prior to 4C Strategies Exonaut v22.4, which stems from improperly set permissions...

Google Chrome 安全漏洞

Google Chrome is a product of Google Google Inc. of the United States etc. Google Chrome is a web browser. perm etc. are open source products. perm is a permanent efficient mapping of short reads with periodic interval seeds. tanStack form etc. are TanStack open source products. form is a form...

The vulnerability of the device management platform for systems involving heating, ventilation, and air conditioning, lighting, and energy consumption within the Niagara Framework, along with the Niagara Enterprise Security tools for access control and security, stems from incorrect assignment of permissions to critical resources. This allows attackers to gain unauthorized access to protected information, enhance their privileges, and execute arbitrary code.

The vulnerability of the device management platform for heating, ventilation, and air conditioning systems, lighting, and energy consumption control within the Niagara Framework, along with the access control and security measures, is related to the lack of proper protection for the...

The vulnerability of Juniper Networks’ Junos OS lies in the improper assignment of permissions to critical resources, allowing attackers to increase their privileges.

The vulnerability of Juniper Networks’ Junos OS is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to increase their privileges...

Splashin iOS 安全漏洞

Splashin iOS is an iOS application from Splashin, Inc. A security vulnerability exists in Splashin iOS version v2.0, which stems from improperly set permissions and could lead to location data leakage...

Drupal Two-factor Authentication 安全漏洞

Drupal Two-factor Authentication is a module for the Drupal community. A security vulnerability exists in Drupal Two-factor Authentication versions prior to 1.11.0, which stems from improperly defined permissions that could lead to improper access control...

Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the socket.c component of the GNU Screen terminal manager allows a attacker to cause a service failure.

The vulnerability of the socket.c component of the GNU Screen terminal manager is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-45729

D-Link DIR-823-Pro 1.02 has improper permission control, allowing unauthorized users to turn on and access Telnet services...

CVE-2025-45729

D-Link DIR-823-Pro 1.02 has improper permission control, allowing unauthorized users to turn on and access Telnet services...

The vulnerability of the storage mechanism in macOS operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of macOS storage operations is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

CVE-2025-43699

CVE-2025-43699 : Salesforce OmniStudio (FlexCards) vulnerability where client-side enforcement of permissions can bypass the required permission check on OmniUICard data. Affects OmniStudio/FlexCards versions before Spring 2025. Root cause: improper enforcement of the “Required Permissions” field...

CVE-2025-27563 security_access_token has an improper preservation of permissions vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission...

OpenHarmony 安全漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom OpenAtom Foundation. A security vulnerability exists in OpenHarmony v5.0.3 and earlier versions, which stems from improperly obtained permissions and could lead to information disclosure...

OpenHarmony 安全漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom OpenAtom Foundation. A security vulnerability exists in OpenHarmony v5.0.3 and earlier versions, which stems from improperly obtained permissions and could lead to information disclosure...

OpenHarmony 安全漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom OpenAtom Foundation. A security vulnerability exists in OpenHarmony v5.0.3 and earlier versions, which stems from improperly obtained permissions and could lead to information disclosure...