PT-2026-57982

Name of the Vulnerable Software and Affected Versions SUSE Virtual Machine Driver Pack versions prior to e7a602ec232756ead019bdf19d6d3b9d010cc94b Description A Buffer Copy without Checking Size of Input Classic Buffer Overflow exists, which allows an attacker who can modify the registry to...

Insufficient Verification of Data Authenticity

Overview pnpm is a Fast, disk space efficient package manager Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity in the default behavior of pnpm install, which accepts tarball content that does not match the integrity value recorded in the lockfile...

CVE-2026-50021

pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm's tarball extraction worker skips integrity verification when the integrity field is absent from the lockfile resolution. If an attacker can both modify pnpm-lock.yaml to remove the integrity: field and cause the referenced registry URL...

EEF-CVE-2026-32148 Lockfile checksums not verified in Hex allows dependency integrity bypass

Summary Insufficient Verification of Data Authenticity vulnerability in hexpm hex Hex.RemoteConverger module allows dependency integrity bypass via unverified lockfile checksums. Hex stores checksums for dependencies in the mix.lock file to ensure reproducible and integrity-checked builds. Howeve...

Malicious code in loopback-firebase-postgres-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2789696425e4ec276c93faea29470a11265e41a4117bcdbc14f88a208240a63e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-wajit82-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d632b52eebd12f4e178bb43da80901bb70e683a33cc2b8c4fb857c22131645ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-37347

Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the product's configuration...

CVE-2025-4952

Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the product's configuration...

CVE-2025-4952 Denial-of-service vulnerability in ESET security products for Windows

Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the product's configuration...

CVE-2025-4952 Denial-of-service vulnerability in ESET security products for Windows

Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the product's configuration...

CVE-2025-4952

CVE-2025-4952 involves tampering with registry entries that could prevent ESET security products for Windows from starting on the next system startup or allow unauthorized changes to the product configuration. Connected documents corroborate the registry-tampering theme affecting ESET products, b...

ESET NOD32 Antivirus 安全漏洞

ESET NOD32 Antivirus is an antivirus program from ESET. A security vulnerability exists in ESET NOD32 Antivirus that originates from a possible tampering with registry entries, which could cause the security product to fail to start correctly or the configuration to be changed without authorizati...

PT-2025-44622

Name of the Vulnerable Software and Affected Versions ESET security products for Windows affected versions not specified Description Tampering with registry entries could prevent ESET security products from starting correctly upon the next system startup or result in unauthorized changes to the...

CVE-2024-47560

RevoWorks Cloud Client 3.0.91 and earlier contains an incorrect authorization vulnerability. If this vulnerability is exploited, unintended processes may be executed in the sandbox environment. Even if malware is executed in the sandbox environment, it does not compromise the client's local...

CVE-2024-47560

CVE-2024-47560 affects RevoWorks Cloud Client 3.0.91 and earlier. The issue is an incorrect authorization vulnerability that can allow execution of unintended processes inside the sandbox environment. The sandbox may leak information externally or have its behavior tampered via registry manipulat...

CVE-2024-47560: Incorrect Authorization

RevoWorks Cloud Client 3.0.91 and earlier contains an incorrect authorization vulnerability. If this vulnerability is exploited, unintended processes may be executed in the sandbox environment. Even if malware is executed in the sandbox environment, it does not compromise the client's local...

RevoWorks Cloud vulnerable to unintended process execution

Overview RevoWorks Cloud provided by J's Communication Co., Ltd. is software to build a sandbox environment isolated from a client's local environment. In the sandbox environment, the product provides the function enabling execution of web browsers and detection and blocking of unauthorized...

J’s Communication RevoWorks Cloud Client 安全漏洞

J's Communication RevoWorks Cloud Client is a software from J's Communication Japan for building sandboxed environments that are isolated from the customer's local environment. A security vulnerability exists in J's Communication RevoWorks Cloud Client version 3.0.91 and prior versions. An attack...

PT-2024-32660 · Revoworks · Revoworks Cloud Client

Name of the Vulnerable Software and Affected Versions: RevoWorks Cloud Client versions 3.0.91 and earlier Description: The issue is related to an incorrect authorization vulnerability. If exploited, it may allow unintended processes to be executed in the sandbox environment. Although the local...

Informational: Cortex XDR Agent: Product Disruption by Local Windows Administrator

The Palo Alto Networks Product Security Assurance team is aware of a method that can enable a local administrator to tamper with the Windows registry to disable the Cortex XDR agent on devices running a Windows operating system. As a result of this method, critical Windows system services would n...