CVE-2025-27233

Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, allowing an attacker to inject unexpected arguments into the smartctl command. This can be used to leak the NTLMv2 hash from a Windows system...

CVE-2025-54918 Windows NTLM Elevation of Privilege Vulnerability

...

Windows NTLM Elevation of Privilege Vulnerability

Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network...

Microsoft NTLM 授权问题漏洞

Microsoft NTLM is a Microsoft USA authentication protocol used on networks including systems running the Windows operating system as well as standalone systems. An authorization problem vulnerability exists in Microsoft NTLM. An attacker could exploit the vulnerability to elevate privileges. The...

vlan: fix memory leak in vlan_newlink()

...

VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit.

...

CVE-2025-9603

A vulnerability was determined in Telesquare TLR-2005KSH 1.2.4. The affected element is an unknown function of the file /cgi-bin/internet.cgi?Command=lanCfg. Executing manipulation of the argument Hostname can lead to command injection. The attack may be performed from a remote location. The...

CVE-2025-9525

A flaw has been found in Linksys E1700 1.0.0.4.003. Affected by this vulnerability is the function setWan of the file /goform/setWan. This manipulation of the argument DeviceName/lanIp causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may...

Linux Distros Unpatched Vulnerability : CVE-2019-14777

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free. CVE-2019-14777 Note that Nessus relies on the presence of t...

Linux Distros Unpatched Vulnerability : CVE-2019-14498

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted CA...

Dynatrace: OneAgent Unprivileged NTLM User Coercion

Vulnerability description not provided...

Linux Distros Unpatched Vulnerability : CVE-2019-3467

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian-edu-config all versions 2.11.10, a set of configuration files used for Debian Edu, and debian- lan-config 0.26, configured too permissive ACLs for the...

SUSE-SU-2025:02853-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-36028: mm/hugetlb: fix DEBUGLOCKSWARNON1 when dissolvefreehugetlbfolio bsc1225707. - CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357:...

Linux Distros Unpatched Vulnerability : CVE-2023-47360

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length. CVE-2023-47360 Note that Nessus relies on the...

CVE-2025-9003

A vulnerability has been found in D-Link DIR-818LW 1.04. This vulnerability affects unknown code of the file /bsclan.php of the component DHCP Reserved Address Handler. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. This vulnerability on...

D-Link DIR-818LW 代码注入漏洞

D-Link DIR-818LW is a wireless router from China's AUO D-Link. A code injection vulnerability exists in the D-Link DIR-818LW version 1.04, which originates from a cross-site scripting attack due to incorrect manipulation of the parameter Name in the file /bsclan.php...

Linux Distros Unpatched Vulnerability : CVE-2025-37921

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: vxlan: vnifilter: Fix unlocked deletion of default FDB entry When a VNI is deleted from a...

CVE-2025-8817

A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected by this vulnerability is the function setLan of the file /goform/setLan. The manipulation of the argument lan2enabled leads to stack-based buffer overflow. The attack can be launch...

CVE-2025-53778 Windows NTLM Elevation of Privilege Vulnerability

...

Emsisoft Anti-Malware 安全漏洞

Emsisoft Anti-Malware is an anti-virus software from Emsisoft New Zealand. The software has features such as malware protection and virus protection. A security vulnerability exists in versions prior to Emsisoft Anti-Malware 2024.12, which stems from a scanning module that allows Net-NTLMv2 hash...