Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS and Apple iPadOS that originates from sending information without using HTTPS...

Dell SmartFabric OS10 命令注入漏洞

Dell SmartFabric OS10 is a software-defined network operating system from Dell Networking, based on Linux and open source technologies, designed to enable flexible management and automated deployment of data center network resources. A command injection vulnerability exists in Dell SmartFabric...

Vulnerability of the CalculateBytePerPixelAndBlockSizes() function in the drivers/gpu/drm/amd/display/dc/dml2/dml21/src/dml2_core/dml2_core_dcn4_calcs.c file – A driver for supporting Direct Rendering Infrastructure (DRI) in AMD graphics cards for Linux operating systems. This vulnerability allows a attacker to cause a service failure.

Vulnerability of the CalculateBytePerPixelAndBlockSizes function in the drivers/gpu/drm/amd/display/dc/dml2/dml21/src/dml2core/dml2coredcn4calcs.c file – The driver that supports Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems has a vulnerability due to...

The vulnerability of the Windows RRAS operating system’s routing and remote access service allows a hacker to execute arbitrary code.

The vulnerability of the Windows RRAS operating system’s routing and remote access service is related to buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Dell SmartFabric OS10 命令注入漏洞

Dell SmartFabric OS10 is a Linux-based network switch operating system from Dell Dell. Dell SmartFabric OS10 suffers from a command injection vulnerability that originates from improper neutralization of special elements in a command, which can be exploited by an attacker to cause a command to be...

Mattermost Desktop App 安全漏洞

Mattermost Desktop App is a cross-platform desktop collaboration tool based on the Electron framework, supporting Windows, macOS and Linux systems, designed for team collaboration. A privilege misconfiguration vulnerability exists in Mattermost Desktop App. The vulnerability stems from declaring...

The vulnerability of the software installer for Zoom video conferencing applications on macOS systems allows a hacker to escalate their privileges.

The vulnerability of the software installer for Zoom video conferencing on macOS operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to gain unauthorized access...

CVE-2024-12019

CVE-2024-12019 describes an arbitrary file read flaw in the LogicalDOC document API. An authenticated attacker who has at least read and download privileges on an existing document can exploit the API to read files on the underlying OS, potentially accessing any file within the privileges of the ...

CVE-2024-54449 Remote Code Execution (RCE) via Arbitrary File Write In Document API

The API used to interact with documents in the application contains two endpoints with a flaw that allows an authenticated attacker to write a file with controlled contents to an arbitrary location on the underlying file system. This can be used to facilitate RCE. An account with ‘read’ and ‘writ...

CVE-2024-26006

An improper neutralization of input during web page Generation vulnerability CWE-79 in FortiOS version 7.4.3 and below, version 7.2.7 and below, version 7.0.13 and below and FortiProxy version 7.4.3 and below, version 7.2.9 and below, version 7.0.16 and below web SSL VPN UI may allow a remote...

LogicalDOC 代码注入漏洞

LogicalDOC is the United States LogicalDOC company a set of document management system developed using Java technology . The system has Lucene full-text search index and automatic import and other functions. A security vulnerability exists in LogicalDOC, which stems from an automated scripting...

The vulnerability of Juniper Networks Junos OS’ kernel, related to insufficient spatial partitioning, allows a hacker to execute arbitrary code.

The vulnerability of Juniper Networks Junos OS’s kernel is related to insufficient spatial partitioning. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted file...

The vulnerability of the compatibility subsystem’s kernel allows for the execution of Linux applications on Windows operating systems through the Windows Subsystem for Linux (WSL2). This enables attackers to execute arbitrary code.

The vulnerability in the kernel of the compatibility subsystem for running Linux applications, namely Windows Subsystem for Linux WSL2 on Windows operating systems, involves a pointer manipulation issue. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the Windows Common Log File System Driver in the Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Windows Common Log File System Driver in the operating system is related to a lack of data type conversion mechanisms. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Local Security Authority (LSA) service, which is responsible for authenticating users and managing local security policies in Windows operating systems, allows attackers to escalate their privileges.

The vulnerability of the Local Security Authority LSA in Windows operating systems, which is responsible for verifying identities and managing user policies, is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...

CVE-2024-58010 affecting package kernel for versions less than 6.6.78.1-3

CVE-2024-58010 affecting package kernel for versions less than 6.6.78.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2025-21697 affecting package kernel for versions less than 6.6.76.1-1

CVE-2025-21697 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-29768

Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim...

CVE-2025-24928 affecting package libxml2 for versions less than 2.11.5-4

CVE-2025-24928 affecting package libxml2 for versions less than 2.11.5-4. A patched version of the package is available...

CVE-2024-12010

A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel AX7501-B1 firmware version V5.17ABPC.5.3C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system OS commands on a vulnerable device...