340 matches found
CVE-2025-61037
A local privilege escalation vulnerability exists in SevenCs ORCA G2 2.0.1.35 EC2007 Kernel v5.22. The flaw is a Time-of-Check Time-of-Use TOCTOU race condition in the license management logic. The regService process, which runs with SYSTEM privileges, creates a fixed directory and writes files...
SevenCs ORCA G2 安全漏洞
SevenCs ORCA G2 is an electronic charting system from SevenCs, Germany. A security vulnerability exists in SevenCs ORCA G2 version 2.0.1.35, which originates from the regService process applying a security descriptor without an explicitly configured DACL, and could result in system interruption,...
SevenCs ORCA G2 安全漏洞
SevenCs ORCA G2 is an electronic charting system from SevenCs Germany. A security vulnerability exists in SevenCs ORCA G2 version 2.0.1.35, which stems from a competing condition in the license management logic that could lead to elevated privileges...
CVE-2025-61037
SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22) is affected by a local TOCTOU race in the license management logic. The regService process (SYSTEM) creates a fixed directory and writes files without verifying NTFS reparse points; an attacker can race to replace the directory with a junction to a u...
CVE-2025-64699
An incorrect NULL DACL issue exists in SevenCs ORCA G2 2.0.1.35 EC2007 Kernel v5.22. The regService process, which runs with SYSTEM privileges, applies a Security Descriptor to a device object with no explicitly configured DACL. This condition could allow an attacker to perform unauthorized raw...
CVE-2025-64699
CVE-2025-64699 affects SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22). The regService process, running with SYSTEM privileges, applies a Security Descriptor to a device object that has no explicitly configured DACL. This can allow an attacker to perform unauthorized raw disk operations, potential...
PT-2025-54358
Name of the Vulnerable Software and Affected Versions SevenCs ORCA G2 version 2.0.1.35 EC2007 Kernel v5.22 Description A local privilege escalation issue exists due to a Time-of-Check Time-of-Use TOCTOU race condition in the license management logic. The regService process, running with SYSTEM...
EUVD-2025-117517
Malicious code in agreeable-pink-orca npm...
Malicious code in agreeable-pink-orca (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975f42095004558e2c264eef50b6062220d338eefbc544e78141142bf6a25787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in jittery_orca_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0265506e0e75ee69a9ef8d2d8a89632bc6c5e5b9c25d60faae5447db3811ae48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-91308
Malicious code in headorcaz3n npm...
EUVD-2025-90139
Malicious code in marineorcaz3n npm...
EUVD-2025-74164
Malicious code in tenderorcamagenta-62 npm...
EUVD-2025-74468
Malicious code in meaningfulorcateal-81 npm...
EUVD-2025-74395
Malicious code in originalorcasilver-60 npm...
EUVD-2025-77313
Malicious code in collectiveorca-appteadev npm...
Malicious code in spotty_orca-smiletea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01cb2ee60a2492fa0868cc9248e5c0b5e4755b6f660810423e4655bc066c9ef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-75557
Malicious code in spottyorca-smiletea npm...