CVE-2025-10495

A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code...

CVE-2025-8485

CVE-2025-8485 affects Lenovo App Store. Description: an improper permissions vulnerability could allow a locally authenticated user to execute code with elevated privileges during the installation of an application. Affected component: Lenovo App Store's installation process. Root cause: improper...

CVE-2025-8485

An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of an application...

CVE-2025-8485

An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of an application...

EUVD-2025-115582

Malicious code in centauri-configstore-postcss-mutation npm...

EUVD-2025-114712

Malicious code in cypress-css-minimizer-webpack-plugin-webpack-configstore npm...

Lenovo多款产品 安全漏洞

Lenovo App Store and others are products of the Chinese company Lenovo Lenovo.Lenovo App Store is a desktop application.Lenovo Browser is a browser.ws and others are WebSockets open source products.ws is a Node.js WebSocket library.Lenovo PC Lenovo PC Manager is a PC management software. A securi...

CVE-2025-8485: Incorrect Default Permissions

An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of an application...

CVE-2025-10495: Improper Certificate Validation

A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code...

PT-2025-46717

Name of the Vulnerable Software and Affected Versions DinukaNavaratna Dee Store version 1.0 Description A flaw exists in DinukaNavaratna Dee Store version 1.0 that can lead to missing authorization due to manipulation. The issue is present in an unknown function and can be exploited remotely. The...

Dee Store 安全漏洞

Dee Store is an online shopping web application by the individual developer Dinuka Navaratna. A security vulnerability exists in Dee Store version 1.0, which stems from a lack of authorization validation and could allow a remote attacker to bypass privilege control by constructing a malicious...

CVE-2025-13063: Missing Authorization

A flaw has been found in DinukaNavaratna Dee Store 1.0. Affected is an unknown function. Executing manipulation can lead to missing authorization. The attack may be performed from remote. The exploit has been published and may be used. Multiple endpoints are affected...

PT-2025-46690

Name of the Vulnerable Software and Affected Versions Lenovo PC Manager affected versions not specified Lenovo App Store affected versions not specified Lenovo Browser affected versions not specified Lenovo Legion Zone affected versions not specified Description A potential security issue has bee...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990874)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990874 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Prevent release of buffer in I/O When a task waiting for completion of a Store Data...

PT-2025-46702

Name of the Vulnerable Software and Affected Versions Lenovo App Store affected versions not specified Description An improper permissions issue exists in Lenovo App Store that may allow a locally authenticated user to run code with higher privileges when installing an application. Recommendation...

EUVD-2025-81781

Malicious code in gordon-wallet-store npm...

EUVD-2025-80765

Malicious code in reilly-wallet-store npm...

Malicious code in reginald-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f6d9e55134e59c28ec81cdd9ed3749d3184fadae6609a548d8aa1f1e96ce257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in harrington-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34919e28cfc5ca3f0419ce67b188f11689a4f4b2de715b481dfa7380006f4f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stewart-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1227d224abb57c190b2238e99bb2fe3326314fd9259b234016ad30bf8d9543a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...