4526 matches found
EUVD-2022-30994
Malicious code in bioql PyPI...
EUVD-2023-25188
Malicious code in bioql PyPI...
EUVD-2022-25278
Malicious code in bioql PyPI...
EUVD-2023-24843
Malicious code in bioql PyPI...
EUVD-2023-24826
Malicious code in bioql PyPI...
EUVD-2021-2964
Malicious code in bioql PyPI...
EUVD-2022-35676
Malicious code in bioql PyPI...
EUVD-2023-24977
Malicious code in bioql PyPI...
EUVD-2021-3297
Malicious code in bioql PyPI...
EUVD-2023-24839
Malicious code in bioql PyPI...
EUVD-2021-2920
Malicious code in bioql PyPI...
EUVD-2022-41635
Malicious code in bioql PyPI...
EUVD-2022-25328
Malicious code in bioql PyPI...
Razer Synapse 3 Macro Module Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Razer Synapse...
CVE-2025-57625
CYRISMA Sensor before 444 for Windows has an Insecure Folder and File Permissions vulnerability. A low-privileged user can abuse these issues to escalate privileges and execute arbitrary code in the context of NT AUTHORITY\SYSTEM by replacing DataSpotliteAgent.exe or any other binaries called by...
Century HW RAID Manager registers a Windows service with an unquoted file path
Overview RAID Manager provided by Century Corporation contains the following vulnerability. Unquoted search path or element CWE-428 - CVE-2025-59307 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...
CVE-2025-36902
In synacdevioctlstorepid of synatcm2sysfs.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-9043
The service executable path in Seagate Toolkit on Versions prior to 2.34.0.33 on Windows allows an attacker with Admin privileges to exploit a vulnerability as classified under CWE-428: Unquoted Search Path or Element. An attacker with write permissions to the root could place a malicious...
D-Link DI-7300G+ 安全漏洞
The D-Link DI-7300G+ is a ruggedized, enterprise-grade smart gateway from China-based D-Link. The D-Link DI-7300G+ suffers from a command injection vulnerability that is caused by a flaw in httpddebug.asp. An attacker can exploit this vulnerability to execute arbitrary operating system commands o...
CVE-2025-5474
2BrightSparks SyncBackFree Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of 2BrightSparks SyncBackFree. An attacker must first obtain the ability to execute low-privileged code on the target syst...