EUVD-2023-25193

Malicious code in bioql PyPI...

EUVD-2023-24947

Malicious code in bioql PyPI...

EUVD-2022-35725

Malicious code in bioql PyPI...

EUVD-2022-31015

Malicious code in bioql PyPI...

EUVD-2022-25274

Malicious code in bioql PyPI...

EUVD-2022-50128

Malicious code in bioql PyPI...

EUVD-2022-45570

Malicious code in bioql PyPI...

EUVD-2022-45568

Malicious code in bioql PyPI...

EUVD-2023-24896

Malicious code in bioql PyPI...

EUVD-2022-50259

Malicious code in bioql PyPI...

Razer Synapse 3 Macro Module Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Razer Synapse...

CVE-2025-57625

CYRISMA Sensor before 444 for Windows has an Insecure Folder and File Permissions vulnerability. A low-privileged user can abuse these issues to escalate privileges and execute arbitrary code in the context of NT AUTHORITY\SYSTEM by replacing DataSpotliteAgent.exe or any other binaries called by...

Century HW RAID Manager registers a Windows service with an unquoted file path

Overview RAID Manager provided by Century Corporation contains the following vulnerability. Unquoted search path or element CWE-428 - CVE-2025-59307 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

CVE-2025-36902

In synacdevioctlstorepid of synatcm2sysfs.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48534: Protection Mechanism Failure

In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36908: Out-of-bounds Write

In lwistopregisterio of lwisdevicetop.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36902: Heap-based Buffer Overflow

In synacdevioctlstorepid of synatcm2sysfs.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2025-36671

In lwis top register io of lwis device top.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2025-36672

In lwis test register io of lwis device test.c, there is a possible OOB Write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-9043

The service executable path in Seagate Toolkit on Versions prior to 2.34.0.33 on Windows allows an attacker with Admin privileges to exploit a vulnerability as classified under CWE-428: Unquoted Search Path or Element. An attacker with write permissions to the root could place a malicious...