CVE-2025-20708

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20708

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20708

A buffer error vulnerability exists in the MediaTek Modem 5G technology due to an incorrect bounds check leading to an out-of-bounds write . This flaw could allow an attacker to achieve remote escalation of privilege if a User Equipment (UE) connects to a rogue base station controlled by the atta...

CVE-2025-20708

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

MediaTek Modem 缓冲区错误漏洞

MediaTek Modem is a 5G modem technology from MediaTek, a Chinese company. A buffer error vulnerability exists in MediaTek Modem that stems from a lack of boundary checking leading to out-of-bounds writes, which could lead to remote elevation of privilege...

ASB-A-255601934

In multiple locations, there is a possible way to impersonate and MitM a device across session by only compromising one session key due to an insecure protocol design on Bluetooth Legacy Secure Connection LSC. This could lead to remote escalation of privilege with no additional execution privileg...

MediaTek Modem 缓冲区错误漏洞

MediaTek Modem is a 5G modem technology from MediaTek, a Chinese company. A buffer error vulnerability exists in MediaTek Modem that stems from incorrect boundary checking leading to out-of-bounds writes, which could lead to remote elevation of privilege...

PT-2025-35454

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: A possible out of bounds write exists due to an incorrect bounds check. This could lead to remote escalation of privilege if a User Equipment UE connects to a rogue base station controlled by...

CVE-2025-52184

Cross Site Scripting vulnerability in Helpy.io v.2.8.0 allows a remote attacker to escalate privileges via the New Topic Ticket funtion...

CVE-2025-52184

Cross Site Scripting vulnerability in Helpy.io v.2.8.0 allows a remote attacker to escalate privileges via the New Topic Ticket funtion...

CVE-2025-52184

Cross Site Scripting vulnerability in Helpy.io v.2.8.0 allows a remote attacker to escalate privileges via the New Topic Ticket funtion...

CVE-2025-53795

Improper authorization in Microsoft PC Manager allows an unauthorized attacker to elevate privileges over a network...

The vulnerability of the Microsoft SQL Server database management system lies in the lack of measures taken to protect SQL query structures, allowing attackers to enhance their privileges.

The vulnerability of the Microsoft SQL Server database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

CVE-2025-53795

Improper authorization in Microsoft PC Manager allows an unauthorized attacker to elevate privileges over a network...

CVE-2025-31715

In vowifi service, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed...

The vulnerability of the Microsoft SQL Server database management system lies in the lack of measures taken to protect SQL query structures, allowing attackers to enhance their privileges.

The vulnerability of the Microsoft SQL Server database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

The vulnerability of web consoles for creating and managing resources in the Azure Portal is related to shortcomings in the authentication process, which allows attackers to escalate their privileges.

The vulnerability of web consoles for creating and managing resources in the Azure Portal is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers, operating remotely, to increase their privileges...

CVE-2025-31715

In vowifi service, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed...

CVE-2025-31715

In vowifi service, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed...

CVE-2025-31715

In vowifi service, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed...