10066 matches found
CVE-2025-55247: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
PT-2025-42008
Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An issue exists in .NET where improper link resolution before file access, also known as 'link following', can allow an authorized attacker to elevate privileges locally. This occurs due to the...
GHSA-FHWM-PC6R-4H2F CommandKit has incorrect command name exposure in context object for message command aliases
Impact A logic flaw exists in the message command handler of CommandKit that affects how the commandName property is exposed to both middleware functions and command execution contexts when handling command aliases. When a message command is invoked using an alias, the ctx.commandName value...
CVE-2025-62363: Improper Link Resolution Before File Access
yt-grabber-tui is a terminal user interface application for downloading videos. In versions before 1.0-rc, the application allows users to configure the path to the yt-dlp executable via the pathtoytdlp configuration setting. An attacker with write access to the configuration file or the filesyst...
CVE-2025-58290: Improper Resolution of Path Equivalence
Denial of service DoS vulnerability in the office service. Successful exploitation of this vulnerability may affect availability...
Improper Authorization
org.springframework, spring-core is vulnerable to improper authorization. The vulnerability is due to incorrect annotation resolution on methods within type hierarchies that use unbounded generics, which allows an attacker to bypass security checks when Spring Security’s @EnableMethodSecurity...
Authorization Bypass
org.springframework.security, spring-security-core is vulnerable to Authorization Bypass. The vulnerability is due to improper resolution of annotations on methods within type hierarchies containing parameterized supertypes with unbounded generics, which allows an attacker to bypass authorization...
PT-2025-46638
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the scheduling/deadline component. A kernel warning can occur when a CPU removal operation is performed using drmgr, specifically with the command...
PT-2025-46866
Name of the Vulnerable Software and Affected Versions Cisco Linksys E1200 v2 routers versions prior to E1200 v2.0.11.001 us.tar.gz Description A stack-based buffer overflow exists in the libshared.so library. The get mac from ip and get ip from mac functions utilize sscanf with an overly permissi...
EUVD-2025-32891
Improper Link Resolution Before File Access in the AWS VPN Client for macOS versions 1.3.2- 5.2.0 allows a local user to execute code with elevated privileges. Insufficient validation checks on the log destination directory during log rotation could allow a non-administrator user to create a...
Security Bulletin: IBM Sterling Connect:Direct Web Services is affected by a vulnerability in spring-core-6.2.3.jar (CVE-2025-41249)
Summary IBM Sterling Connect:Direct Web Services is vulnerable to Annotation detection mechanism may not correctly resolve annotations on methods in spring-core-6.2.3. This has been addressed in new fixpacks available from Fix Central. Vulnerability Details CVEID:CVE-2025-41249 DESCRIPTION: The...
EUVD-2003-1569
Malware in sbrugna...
EUVD-2020-28244
Malware in sbrugna...
EUVD-2003-1572
Malware in sbrugna...
EUVD-2020-22051
Malware in sbrugna...
EUVD-2017-4066
Malware in sbrugna...
EUVD-2017-4103
Malware in sbrugna...
EUVD-2017-4068
Malware in sbrugna...