567 matches found
EUVD-2025-24436
Malicious code in bioql PyPI...
EUVD-2021-9275
Malicious code in bioql PyPI...
SetupHijack Privilege Escalation Tool
SetupHijack is a security research tool that exploits race conditions and insecure file handling in Windows installer and update processes. It targets scenarios where privileged installers or updaters drop files in %TEMP% or other world-writable locations, allowing an attacker to replace these...
HiddenGh0st, Winos and kkRAT Exploit SEO, GitHub Pages in Chinese Malware Attacks
Chinese-speaking users are the target of a search engine optimization SEO poisoning campaign that uses fake software sites to distribute malware. "The attackers manipulated search rankings with SEO plugins and registered lookalike domains that closely mimicked legitimate software sites," Fortinet...
HiddenGh0st, Winos and kkRAT Exploit SEO, GitHub Pages in Chinese Malware Attacks
Chinese-speaking users are the target of a search engine optimization SEO poisoning campaign that uses fake software sites to distribute malware. "The attackers manipulated search rankings with SEO plugins and registered lookalike domains that closely mimicked legitimate software sites," Fortinet...
September 9, 2025—KB5065510 (Security-only update)
None None...
CVE-2025-57797
Incorrect privilege assignment vulnerability exists in ScanSnap Manager installers versions prior to V6.5L61. If this vulnerability is exploited, an authenticated local attacker may escalate privileges and execute an arbitrary command...
ZIP Payload Obfuscation Through Parsing Differentials
uv is vulnerable to ZIP payload obfuscation through parsing differentials. The vulnerability is due to improper ZIP archive validation due to failure to reconcile file entries against the central directory, allowing attackers to craft archives with inconsistent or stacked ZIPs that behave...
CVE-2025-57797
Incorrect privilege assignment vulnerability exists in ScanSnap Manager installers versions prior to V6.5L61. If this vulnerability is exploited, an authenticated local attacker may escalate privileges and execute an arbitrary command...
CVE-2025-57797
Incorrect privilege assignment vulnerability exists in ScanSnap Manager installers versions prior to V6.5L61. If this vulnerability is exploited, an authenticated local attacker may escalate privileges and execute an arbitrary command...
CVE-2025-57797
Concretely, CVE-2025-57797 affects ScanSnap Manager installers prior to V6.5L61. The root cause is an incorrect privilege assignment (CWE-266) which could allow an authenticated local attacker to escalate privileges and execute arbitrary commands. Affected component: ScanSnap Manager installers. ...
CVE-2025-57797
Incorrect privilege assignment vulnerability exists in ScanSnap Manager installers versions prior to V6.5L61. If this vulnerability is exploited, an authenticated local attacker may escalate privileges and execute an arbitrary command...
PT-2025-34836 · Fujitsu · Scansnap Manager
Name of the Vulnerable Software and Affected Versions: ScanSnap Manager versions prior to V6.5L61 Description: An incorrect privilege assignment issue exists in ScanSnap Manager installers. Successful exploitation of this issue could allow an authenticated local attacker to escalate privileges an...
The vulnerability of the Driver installers component of Microprogramming Software for Intel Network Adapters allows a hacker to execute arbitrary code and enhance their privileges.
The vulnerability of the Driver installers component of Intel Network Adapter microprogramming software is related to an uncontrollable element in the search process. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges...
CVE-2025-20017
Uncontrolled search path for some IntelR oneAPI Toolkit and component software installers may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-26470
Incorrect default permissions for some IntelR Distribution for Python software installers before version 2025.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20074
Time-of-check Time-of-use race condition for some IntelR Connectivity Performance Suite software installers before version 40.24.11210 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-26470
Incorrect default permissions for some IntelR Distribution for Python software installers before version 2025.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20074
Time-of-check Time-of-use race condition for some IntelR Connectivity Performance Suite software installers before version 40.24.11210 may allow an authenticated user to potentially enable escalation of privilege via local access...