CVE-2025-32333

In startSpaActivityForApp of SpaActivity.kt, there is a possible cross-user permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-6785

Securing externally available CAN wires can easily allow physical access to the CAN bus, allowing possible injection of specially formed CAN messages to control remote start functions of the vehicle. Testing completed on Tesla Model 3 vehicles with software version v11.1 2023.20.9 ee6de92ddac5...

MAL-2025-46140 Malicious code in start-less-loader-got-sirius (npm)

The package start-less-loader-got-sirius was found to contain malicious code...

MAL-2025-44395 Malicious code in geodynamo-start-umbra-abiogenesis (npm)

The package geodynamo-start-umbra-abiogenesis was found to contain malicious code...

Malicious code in start-less-loader-got-sirius (npm)

The package start-less-loader-got-sirius was found to contain malicious code...

Malicious code in cygnus-uninstall-prettier-stylelint-start (npm)

The package cygnus-uninstall-prettier-stylelint-start was found to contain malicious code...

MAL-2025-46141 Malicious code in start-string-mensa-mocha (npm)

The package start-string-mensa-mocha was found to contain malicious code...

Malicious code in geodynamo-start-umbra-abiogenesis (npm)

The package geodynamo-start-umbra-abiogenesis was found to contain malicious code...

Malicious code in start-string-mensa-mocha (npm)

The package start-string-mensa-mocha was found to contain malicious code...

MAL-2025-43922 Malicious code in cygnus-uninstall-prettier-stylelint-start (npm)

The package cygnus-uninstall-prettier-stylelint-start was found to contain malicious code...

MAL-2025-44755 Malicious code in janus-planetology-neutronstar-start (npm)

The package janus-planetology-neutronstar-start was found to contain malicious code...

CVE-2025-58641

Server-Side Request Forgery SSRF vulnerability in kamleshyadav Exit Intent Popup exitintentpopup allows Server Side Request Forgery.This issue affects Exit Intent Popup: from n/a through = 1.0.1...

Linux Distros Unpatched Vulnerability : CVE-2023-23923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability was found Moodle which exists due to insufficient limitations on the start page preference. A remote attacker can set that preference for...

CVE-2025-32333

In startSpaActivityForApp of SpaActivity.kt, there is a possible cross-user permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-32333

In startSpaActivityForApp of SpaActivity.kt, there is a possible cross-user permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-22425

In onCreate of InstallStart.java, there is a possible permissions bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-26436

In clearAllowBgActivityStarts of PendingIntentRecord.java, there is a possible way for an application to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

GHSA-94G8-XV23-7656 Vaadin Flow Components possible file bypass via upload validation on the server-side

Description When the Vaadin Upload's start listener is used to validate metadata about an incoming upload, it is possible to bypass the upload validation. Users of affected versions should apply the upgrade to a more recent Vaadin version...

Vaadin Flow Components possible file bypass via upload validation on the server-side

Description When the Vaadin Upload's start listener is used to validate metadata about an incoming upload, it is possible to bypass the upload validation. Users of affected versions should apply the upgrade to a more recent Vaadin version...

Vaadin Framework possible file bypass via upload validation on the server-side

Description When the Vaadin Upload's start listener is used to validate metadata about an incoming upload, it is possible to bypass the upload validation. Users of affected versions should apply the upgrade to a more recent Vaadin version...