EUVD-2022-44916

Malicious code in bioql PyPI...

EUVD-2022-48987

Malicious code in bioql PyPI...

EUVD-2025-14667

Malicious code in bioql PyPI...

EUVD-2022-36225

Malicious code in bioql PyPI...

EUVD-2023-35051

Malicious code in bioql PyPI...

EUVD-2024-18043

Malicious code in bioql PyPI...

EUVD-2023-35084

Malicious code in bioql PyPI...

EUVD-2022-47584

Malicious code in bioql PyPI...

CVE-2025-57714

An unquoted search path or element vulnerability has been reported to affect NetBak Replicator. If a local attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: NetBak...

CVE-2025-57714

An unquoted search path or element vulnerability has been reported to affect NetBak Replicator. If a local attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: NetBak...

EUVD-2025-32345

An unquoted search path or element vulnerability has been reported to affect NetBak Replicator. If a local attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: NetBak...

CVE-2025-57714

CVE-2025-57714 affects QNAP NetBak Replicator. The root cause is an unquoted search path/element vulnerability that permits a local attacker who has a user account to execute arbitrary code or commands. The vulnerability is reported to affect NetBak Replicator and has been fixed in version 4.5.15...

PT-2025-40591

Name of the Vulnerable Software and Affected Versions NetBak Replicator versions prior to 4.5.15.0807 Description An unquoted search path or element issue exists in NetBak Replicator. A local attacker who obtains a user account can potentially execute unauthorized code or commands by exploiting...

PT-2025-40420

Name of the Vulnerable Software and Affected Versions Absolute Secure Access versions prior to 14.10 Description An excess permissions issue exists within the Warehouse component. An attacker who has access to the local file system can read the Java keystore file. The attack complexity is low, an...

CVE-2025-10578 HP Support Assistant - Potential Escalation of Privilege

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.47.41.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write...

CVE-2025-41421 Privilege Escalation via Symbolic Link Spoofing in TeamViewer Client

Improper handling of symbolic links in the TeamViewer Full Client and Host for Windows — in versions prior to 15.70 of TeamViewer Remote and Tensor — allows an attacker with local, unprivileged access to a device lacking adequate malware protection to escalate privileges by spoofing the update fi...

CVE-2025-57197

In the Payeer Android application 2.5.0, an improper access control vulnerability exists in the authentication flow for the PIN change feature. A local attacker with root access to the device can dynamically instrument the app to bypass the current PIN verification check and directly modify the...

Payeer Application 安全漏洞

Payeer Application is a cryptocurrency application from Payeer, Inc. A security vulnerability exists in Payeer Application version 2.5.0 that stems from improper access control in the authentication process, which could allow a local attacker to bypass the current PIN verification and directly...

VMware Tools和VMware Aria Operations 安全漏洞

VMware Tools and VMware Aria Operations are both products of VMware, Inc. VMware Tools is an enhancement tool that comes with VMWare virtual machines and is a driver provided by VMware to enhance the performance of virtual graphics cards and hard drives, as well as to synchronize the clocks of th...

Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R --chroot option to run arbitrary commands as root, even if they are not listed in the sudoers file...