2440 matches found
CVE-2025-62611: External Control of File Name or Path
aiomysql is a library for accessing a MySQL database from the asyncio. Prior to version 0.3.0, the client-side settings are not checked before sending local files to MySQL server, which allows obtaining arbitrary files from the client using a rogue server. It is possible to create a rogue MySQL...
Vulnerabilities fixed in Microsoft Office
Microsoft has fixed vulnerabilities in several Office products. A malicious party could exploit the vulnerabilities to cause a denial-of-service, execute arbitrary code with the victim's privileges, or gain access to sensitive data in the victim's context. Successful exploitation requires the...
New Pixnapping Android Flaw Lets Rogue Apps Steal 2FA Codes Without Permissions
Android devices from Google and Samsung have been found vulnerable to a side-channel attack that could be exploited to covertly steal two-factor authentication 2FA codes, Google Maps timelines, and other sensitive data without the users' knowledge pixel-by-pixel. The attack has been codenamed...
CVE-2025-27231
The LDAP 'Bind password' value cannot be read after saving, but a Super Admin account can leak it by changing LDAP 'Host' to a rogue LDAP server. To mitigate this, the 'Bind password' value is now reset on 'Host' change...
EUVD-2015-8821
Malware in sbrugna...
EUVD-2017-4644
Malware in sbrugna...
EUVD-2019-5492
Malware in sbrugna...
EUVD-2019-2686
Malware in sbrugna...
EUVD-2019-13604
Malware in sbrugna...
EUVD-2020-17929
Malware in sbrugna...
EUVD-2021-20191
Malware in sbrugna...
EUVD-2017-10476
Malware in sbrugna...
EUVD-2002-1176
Malware in sbrugna...
EUVD-2020-7649
Malware in sbrugna...
EUVD-2020-26886
Malware in sbrugna...
EUVD-2019-14865
Malware in sbrugna...
EUVD-2020-7648
Malware in sbrugna...
EUVD-2017-11996
Malware in sbrugna...