130 matches found
CVE-2026-3091
An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files and conduct denial-of-service during installation by placing a malicious DLL in advance in the same directory as the installer...
EUVD-2026-7405
An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files during installation by placing a malicious DLL in advance in the same directory as the installer...
CVE-2026-3091
The CVE-2026-3091 entry covers an Uncontrolled Search Path Element vulnerability in Synology Presto Client prior to 2.1.3-0672. The issue allows local users to read or write arbitrary files and can cause denial of service during installation by placing a malicious DLL in the same directory as the...
CVE-2026-3091
An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files and conduct denial-of-service during installation by placing a malicious DLL in advance in the same directory as the installer...
CVE-2026-3091
An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files and conduct denial-of-service during installation by placing a malicious DLL in advance in the same directory as the installer...
Synology Presto Client 代码问题漏洞
Synology Presto Client is a high-speed transfer tool developed by the Chinese company Synology. Versions of Synology Presto Client prior to 2.1.3-0672 contained a code vulnerability. This vulnerability stemmed from uncontrolled search path elements during the installation process, which could all...
PT-2026-21657
Name of the Vulnerable Software and Affected Versions Synology Presto Client versions prior to 2.1.3-0672 Description A flaw exists in Synology Presto Client that allows local users to read or write arbitrary files during installation. This occurs because of an uncontrolled search path element. A...
WordPress The Ultimate Video Player For WordPress plugin < 2.2.3 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Presto Player versions 2.2.3...
CVE-2023-43983
Presto Changeo attributegrid up to 2.0.3 was discovered to contain a SQL injection vulnerability via the component disablejson.php...
Malicious Package
Overview presto-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
EUVD-2020-0484
Malware in sbrugna...
EUVD-2023-48340
Malicious code in bioql PyPI...
EUVD-2024-40177
Malicious code in bioql PyPI...
EUVD-2023-48342
Malicious code in bioql PyPI...
EUVD-2023-48339
Malicious code in bioql PyPI...
EUVD-2022-46726
Malicious code in bioql PyPI...
EUVD-2022-46725
Malicious code in bioql PyPI...
Malicious code in presto-ui (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 398ff3cee5d004d3c6125bf23f331dbacde6930e8bb958186d396b20a1e2c00b Any computer that has this package installed or running should be considered...
MAL-2025-47595 Malicious code in presto-ui (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 398ff3cee5d004d3c6125bf23f331dbacde6930e8bb958186d396b20a1e2c00b Any computer that has this package installed or running should be considered...
CVE-2024-43285
Missing Authorization vulnerability in Presto Made, Inc Presto Player allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Presto Player: from n/a through 3.0.2...