15852 matches found
The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the NTFS file system in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
GitLab Enterprise Edition（EE）和GitLab Community Edition（CE） 安全漏洞
GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab Enterprise Edition EE and GitLab Community...
Multi-Party Private Set Operations from Predicative Zero-Sharing
Typical protocols in the multi-party private set operations MPSO setting enable m 2 parties to perform certain secure computation on the intersection or union of their private sets, realizing a very limited range of MPSO functionalities. Most works in this field focus on just one or two specific...
CVE-2025-21437
Memory corruption while processing memory map or unmap IOCTL operations simultaneously...
CVE-2025-25056
Cross-site request forgery vulnerability exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views a malicious page while logged in, unintended operations may be performed...
CVE-2025-25213
Improper restriction of rendered UI layers or frames issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views and clicks on the content on the malicious page while logged in, unintended operations may be performed...
CVE-2025-25213
Improper restriction of rendered UI layers or frames issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views and clicks on the content on the malicious page while logged in, unintended operations may be performed...
CVE-2025-25056
Cross-site request forgery vulnerability exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views a malicious page while logged in, unintended operations may be performed...
CVE-2025-25056
Cross-site request forgery vulnerability exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views a malicious page while logged in, unintended operations may be performed...
The vulnerability of embedded software developed by Qualcomm, related to the execution of operations outside the buffer in memory, allows attackers to disclose protected information.
The vulnerability of embedded Qualcomm software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information...
Inaba Denki Sangyo Wi-Fi AP UNIT 安全漏洞
The Inaba Denki Sangyo Wi-Fi AP UNIT is a Wi-Fi AP unit from Inaba Denki Sangyo, a Japanese company. A security vulnerability exists in Inaba Denki Sangyo Wi-Fi AP UNIT v2.0.03P and prior versions, which stems from improper restrictions in the UI layer or framework, and could lead to the user...
The vulnerability of the Linux operating system’s kernel, related to the operation of operations beyond the buffer in memory, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of Canon’s microprogrammed printer software of the imageCLASS MF, imageCLASS LBP, i-SENSYS MF, i-SENSYS LBP, Satera MF series lies in the ability to execute arbitrary code or trigger malfunctions during use, by reading data from memory beyond the buffer limits.
The vulnerability of Canon’s microprogrammed printer software for the imageCLASS MF, imageCLASS LBP, i-SENSYS MF, i-SENSYS LBP, and Satera MF series lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code or caus...
Agentic AI in the SOC - Dawn of Autonomous Alert Triage
Security Operations Centers SOCs today face unprecedented alert volumes and increasingly sophisticated threats. Triaging and investigating these alerts are costly, cumbersome, and increases analyst fatigue, burnout, and attrition. While artificial intelligence has emerged as a go-to solution, the...
CVE-2024-58132
In chainmaker-go aka ChainMaker before 2.3.6, multiple updates to a single node's configuration can cause other normal nodes to perform concurrent read and write operations on a map, leading to a panic...
PT-2025-15348
Name of the Vulnerable Software and Affected Versions: ClipboardService versions prior to 1 Description: The issue arises from improper handling of permissions or insufficient privileges in ClipboardService, allowing local attackers to access image files across multiple users. User interaction is...
Microsoft System Center Operations Manager 代码问题漏洞
Microsoft System Center Operations Manager is a large-scale monitoring and management software for corporate environments from Microsoft USA. Formerly known as MOM Microsoft Operations Manager, the software is primarily used to monitor IT systems and provide monitoring support for distributed...
oath-toolkit: Local root exploit in a PAM module
A vulnerability was found in a PAM module, the oath-toolkit. The module gained a feature that allowed placing the OTP state file, called the usersfile, in the home directory of the to-be-authenticated user. The PAM module performed unsafe file operations in the users' home directories. Since PAM...