835 matches found
CVE-2025-20730
A local privilege escalation vulnerability exists in the preloader of MediaTek Chipsets due to an insecure default value . A malicious actor who has already obtained System privileges can exploit this flaw to achieve elevated privileges without user interaction. Technical details indicate a logic...
MediaTek Chipsets 安全漏洞
MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from an insecure default value that could lead to local elevation of privilege...
PT-2025-44969
Name of the Vulnerable Software and Affected Versions Apache Logback affected versions not specified Description A potential escalation of privilege exists due to an insecure default value within the preloader component. Successful exploitation could allow a malicious actor with System privileges...
CVE-2025-20730: Improper Authentication
In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10068463; Issue ID: MSV-4141...
Insecure Default Initialization of Resource
Overview io.jenkins.plugins:eggplant-runner is a The Eggplant DAI Plugin for Jenkins launches DAI tests from within a Jenkins pipeline. You can use it to continuously test your application using Eggplant's model-based approach to testing. For more information about Eggplant, visit...
CVE-2025-64135: Initialization of a Resource with an Insecure Default
Jenkins Eggplant Runner Plugin 0.0.1.301.v963cffe8ddb8 and earlier sets the Java system property jdk.http.auth.tunneling.disabledSchemes to an empty value, disabling a protection mechanism of the Java runtime...
PT-2025-43502
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the VoiceInteractionManagerService.java component, specifically within the findAvailRecognizer function. This issue stems from an insecure default value, potentially allowing...
Apache Spark 安全漏洞
Apache Spark is a large-scale data processing engine that supports acyclic data streaming and in-memory computing from the Apache Foundation. Apache Spark suffers from a cryptographic issue vulnerability that stems from the use of insecure default network encryption ciphers for inter-node RPC...
CVE-2025-61926: Insecure Default Variable Initialization
Allstar is a GitHub App to set and enforce security policies. In versions prior to 4.5, a vulnerability in Allstar’s Reviewbot component caused inbound webhook requests to be validated against a hard-coded, shared secret. The value used for the secret token was compiled into the Allstar binary an...
EUVD-2020-1774
Malware in sbrugna...
EUVD-2020-1524
Malware in sbrugna...
EUVD-2019-10551
Malware in sbrugna...
EUVD-2021-26124
Malware in sbrugna...
EUVD-2017-15740
Malware in sbrugna...
EUVD-2017-15743
Malware in sbrugna...
EUVD-2017-15746
Malware in sbrugna...
EUVD-2020-1605
Malware in sbrugna...
EUVD-2005-1110
Malware in sbrugna...