47695 matches found
Fortinet FortiClientWindows Service Data Protection Unauthorized Access
The vulnerability of Fortinet FortiClientWindows protection devices is related to insufficient protection of sensitive data during debugging code. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
ASB-A-432439762
In pkvmguestrelinquishtohost of memprotect.c, there is a possible configuration data leak due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
WhiteLie: A Robust System for Spoofing User Data in Android Platforms
Android employs a permission framework that empowers users to either accept or deny sharing their private data for example, location with an app. However, many apps tend to crash when they are denied permission, leaving users no choice but to allow access to their data in order to use the app. In...
What’s your CNAPP maturity?
More and more enterprises are opting for cloud-native application protection platforms CNAPPs instead of complex and hard-to-manage cloud security point solutions. Find out where your organization is on its CNAPP maturity journey...
binary-exploitation-playground
Binary Exploitation Playground 🚩 Repository ini berisi kumpul...
Atlas Comet Service Data Protection
The vulnerability of the web browsers Atlas and Comet is related to insufficient protection of service data. Exploiting this vulnerability allows attackers to perform spear-phishing attacks...
CVE-2025-9557
An out-of-bound write can lead to an arbitrary code execution. Even on devices with some form of memory protection, this can still lead to a crash and a resultant denial of service....
Zenitel TCIV-3+ IP video door phones Code Execution
The vulnerability of the microprogrammed software of the Zenitel TCIV-3+ IP video door phones is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
GHSA-58C5-G7WP-6W37 Angular is Vulnerable to XSRF Token Leakage via Protocol-Relative URLs in Angular HTTP Client
The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery XSRF token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol...
CVE-2025-66035
CVE-2025-66035 affects Angular's HttpClient, allowing a XSRF token leakage via protocol-relative URLs (//) that are treated as same-origin, causing the token to be sent in X-XSRF-TOKEN. Impact described as credential leakage through app logic, enabling unauthorized CSRF token disclosure to attack...
CVE-2025-66035
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential...
SUSE-SU-2026:20561-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after bsc1238472. - CVE-2025-38653: proc: use the same treatment to check proclseek as ones for procreaditer...
CVE-2025-9557
An out-of-bound write can lead to an arbitrary code execution. Even on devices with some form of memory protection, this can still lead to a crash and a resultant denial of service....
CVE-2025-9557 Bluetooth: Mesh: Out-of-Bound Write in gen_prov_cont
An out-of-bound write can lead to an arbitrary code execution. Even on devices with some form of memory protection, this can still lead to a crash and a resultant denial of service....
EUVD-2025-199711
An out-of-bound write can lead to an arbitrary code execution. Even on devices with some form of memory protection, this can still lead to a crash and a resultant denial of service....
IBM Storage Virtualize IKEv1 Unauthorized Access
The vulnerability of the Internet Key Exchange IKEv1 protocol implementation in IBM Storage Virtualize software for virtualization of data storage systems is related to improper cleaning of dynamic memory. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to...
vGate R2 Component Compromise Information Access
The vulnerability of the task queue component in the software protection system for vGate R2 virtualization platforms is related to the use of a non-reversible function in the parallel context. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the...
vGate R2 Platform DoS
The vulnerability of the web console component of the software protection system for vGate R2 platform is related to a lack of mechanisms for verifying the source of the component. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...
PT-2025-48128
Name of the Vulnerable Software and Affected Versions affected versions not specified Description An out-of-bound write can lead to arbitrary code execution. Even on devices with some form of memory protection, this can still lead to a crash and a resultant denial of service. Recommendations At t...
PT-2025-51674
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the ext4 filesystem implementation. Specifically, a race condition exists between inline data destruction and block mapping within the ext4 destroy...