CVE-2020-36916 TDM Digital Signage PC Player 4.1.0.4 Privilege Escalation via Insecure Permissions

TDM Digital Signage PC Player 4.1.0.4 contains an elevation of privileges vulnerability that allows authenticated users to modify executable files. Attackers can leverage the 'Modify' permissions for authenticated users to replace executable files with malicious binaries and gain elevated system...

CVE-2020-36916: Incorrect Permission Assignment for Critical Resource

TDM Digital Signage PC Player 4.1.0.4 contains an elevation of privileges vulnerability that allows authenticated users to modify executable files. Attackers can leverage the 'Modify' permissions for authenticated users to replace executable files with malicious binaries and gain elevated system...

UK’s ICO Fine LastPass £1.2 Million Over 2022 Security Breach

UK's ICO fines LastPass £1.2M for the 2022 data breach that exposed 1.6 million users’ data. Learn how a flaw in an employee's personal PC led to the massive security failure...

Vulnerability of the dell_uart_bl_serdev_probe() function in the module drivers/platform/x86/dell/dell-uart-backlight.c – This driver provides support for X86 devices in the Linux operating system. It allows a hacker to cause a service failure.

Vulnerability of the delluartblserdevprobe function in the module drivers/platform/x86/dell/dell-uart-backlight.c – The drivers for supporting X86 devices in the Linux operating system are related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service...

USN-7909-2: Linux kernel (Real-time) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S39...

MINI-PCMX-J7VG-VCCC

Bulletin has no description...

Exploit for CVE-2025-63945

CVE-2025-63945 Tencent iOA EoP Version : before 210.9.28693...

Exploit for CVE-2025-63946

CVE-2025-63946 Tencent PC Manager EoP version: PCManager Ver...

CVE-2025-41013: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in TCMAN GIM v11 in version 20250304. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a GET request using the 'idmant' parameter in '/PC/frmEPIS.aspx'...

The vulnerability of the OpenVM platform, related to incorrect calculations of the size of the allocated buffer, allows a hacker to force the registry to accept a different value.

The vulnerability of the OpenVM platform is related to incorrect calculations of the size of the buffer allocated in byte-based decomposition of pc on the AUIPC chip. Exploiting this vulnerability can allow a remote attacker to force the destination register to accept a different value...

MINI-PC6R-MJXH-VV3X

Bulletin has no description...

NEC RakurakuMusen Start EX 安全漏洞

NEC RakurakuMusen Start EX is a wireless network connectivity software from Japan Electric NEC. A security vulnerability exists in NEC RakurakuMusen Start EX that stems from a DLL loading issue that could allow an attacker to manipulate the PC environment to perform unexpected actions...

CVE-2025-10495

A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code...

CVE-2025-10495

A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code...

CVE-2025-10495

A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code...

CVE-2025-10495

A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code...

CVE-2025-42888

SAP GUI for Windows may allow a highly privileged user on the affected client PC to locally access sensitive information stored in process memory during runtime.This vulnerability has a high impact on confidentiality, with no impact on integrity and availability...

PT-2025-46690

Name of the Vulnerable Software and Affected Versions Lenovo PC Manager affected versions not specified Lenovo App Store affected versions not specified Lenovo Browser affected versions not specified Lenovo Legion Zone affected versions not specified Description A potential security issue has bee...

Lenovo多款产品 安全漏洞

Lenovo App Store and others are products of the Chinese company Lenovo Lenovo.Lenovo App Store is a desktop application.Lenovo Browser is a browser.ws and others are WebSockets open source products.ws is a Node.js WebSocket library.Lenovo PC Lenovo PC Manager is a PC management software. A securi...

CVE-2025-10495: Improper Certificate Validation

A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code...