CVE-2025-52094

Insecure Permissions vulnerability in PDQ Smart Deploy V.3.0.2040 allows a local attacker to execute arbtirary code via the \HKLM\SYSTEM\Setup\SmartDeploy component...

CVE-2025-52094

Insecure Permissions vulnerability in PDQ Smart Deploy V.3.0.2040 allows a local attacker to execute arbtirary code via the \HKLM\SYSTEM\Setup\SmartDeploy component...

PT-2025-34378 · Pdq · Pdq Smart Deploy

Name of the Vulnerable Software and Affected Versions: PDQ Smart Deploy version 3.0.2040 Description: An insecure permissions issue exists in PDQ Smart Deploy version 3.0.2040. A local attacker can execute arbitrary code via the HKLMSYSTEMSetupSmartDeploy component. Recommendations: At the moment...

CVE-2025-52094

Insecure Permissions vulnerability in PDQ Smart Deploy V.3.0.2040 allows a local attacker to execute arbtirary code via the \HKLM\SYSTEM\Setup\SmartDeploy component...

CVE-2025-55629

Insecure permissions in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 allow attackers to arbitrarily change other users' passwords via manipulation of the userName value...

PT-2025-34459 · Reolink · Reolink Smart 2K+ Plug-In Wi-Fi Video Doorbell

Name of the Vulnerable Software and Affected Versions: Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime version 3.0.0.4662 2503122283 Description: The device suffers from insecure permissions that allow attackers to arbitrarily change other users' passwords. This is achieved through...

CVE-2025-52094

PDQ Smart Deploy 3.0.2040 is affected by an Insecure Permissions vulnerability. The root cause is improper permissions on HKLM\SYSTEM\Setup\SmartDeploy, enabling a local attacker to execute arbitrary code. Multiple sources (e.g., PT-2025-34378) confirm the affected version but do not provide a fi...

CVE-2025-55629

Insecure permissions in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 allow attackers to arbitrarily change other users' passwords via manipulation of the userName value...

CVE-2025-52094

Insecure Permissions vulnerability in PDQ Smart Deploy V.3.0.2040 allows a local attacker to execute arbtirary code via the \HKLM\SYSTEM\Setup\SmartDeploy component...

CVE-2025-55524

Insecure permissions in Agent-Zero v0.8. allow attackers to arbitrarily reset the system via unspecified vectors...

CVE-2025-55524

Insecure permissions in Agent-Zero v0.8. allow attackers to arbitrarily reset the system via unspecified vectors...

CVE-2025-55524

CVE-2025-55524 concerns Agent-Zero, versions 0.8.0 through 0.8.9 , where insecure permissions allow an attacker to arbitrarily reset the system via unspecified vectors. Root cause cited as improper permissions in Agent-Zero v0.8.*. Public docs do not specify a concrete vulnerable component, explo...

PT-2025-34266

Name of the Vulnerable Software and Affected Versions: Agent-Zero versions 0.8.0 through 0.8.9 Description: Insecure permissions in Agent-Zero allow attackers to arbitrarily reset the system via unspecified vectors. Recommendations: At the moment, there is no information about a newer version tha...

CVE-2025-55524

Insecure permissions in Agent-Zero v0.8. allow attackers to arbitrarily reset the system via unspecified vectors...

CVE-2025-55524

Insecure permissions in Agent-Zero v0.8. allow attackers to arbitrarily reset the system via unspecified vectors...

Linux Distros Unpatched Vulnerability : CVE-2023-0482

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In RESTEasy the insecure File.createTempFile is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure...

Linux Distros Unpatched Vulnerability : CVE-2018-1000071

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - roundcube version 1.3.4 and earlier contains an Insecure Permissions vulnerability in enigma plugin that can result in exfiltration of gpg private key. This...

CVE-2025-38747

Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contain a Creation of Temporary File With Insecure Permissions vulnerability. A local authenticated attacker could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2024-55398

4C Strategies Exonaut before v22.4 was discovered to contain insecure permissions...

CVE-2025-7195

Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, usersetup, which modifies the permissions of the /etc/passwd file to 664 during build time. Developers who used...