CVE-2026-117607

Xerte Online Toolkits through 3.15.5 contains a remote code execution vulnerability that allows authenticated users with system permission to run PHP by importing a crafted language pack. Attackers can upload a ZIP via importlanguage.php containing a .inc file, then request it through the languag...

CVE-2026-117607

The Xerte Online Toolkits software (versions through 3.15.5 ) is vulnerable to Remote Code Execution (RCE) . This issue allows authenticated users with system permissions to execute PHP by importing a crafted language pack. The root cause involves the import_language.php functionality, where an a...

EUVD-2026-111542

Xerte Online Toolkits through 3.15.5 contains a remote code execution vulnerability that allows authenticated users with system permission to run PHP by importing a crafted language pack. Attackers can upload a ZIP via importlanguage.php containing a .inc file, then request it through the languag...

CVE-2026-0026

In removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

EUVD-2015-8192

Malware in sbrugna...

EUVD-2025-4601

Malicious code in bioql PyPI...

EUVD-2022-36740

Malicious code in bioql PyPI...

CVE-2023-21471

Improper access control vulnerability in SemClipboard prior to SMR Apr-2023 Release 1 allows attackers to read arbitrary files with system permission...

CVE-2023-21471

CVE-2023-21471 affects Samsung SemClipboard on devices prior to the SMR Apr-2023 Release 1. The vulnerability is described as an improper access control that allows an attacker to read arbitrary files with system permissions. Public references indicate the issue is addressed by Samsung’s SMR Apr-...

CVE-2023-21471

Improper access control vulnerability in SemClipboard prior to SMR Apr-2023 Release 1 allows attackers to read arbitrary files with system permission...

CVE-2023-21471: Improper Authentication

Improper access control vulnerability in SemClipboard prior to SMR Apr-2023 Release 1 allows attackers to read arbitrary files with system permission...

PT-2025-35664

Name of the Vulnerable Software and Affected Versions SemClipboard versions prior to SMR Apr-2023 Release 1 Description An improper access control issue exists in SemClipboard. This allows attackers to read arbitrary files with system permission. Recommendations Update SemClipboard to SMR Apr-202...

CVE-2024-43095

In multiple locations, there is a possible way to obtain any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2022-33701

Improper access control vulnerability in KnoxCustomManagerService prior to SMR Jul-2022 Release 1 allows attacker to call PowerManaer.goToSleep method which is protected by system permission by sending braodcast intent...

CVE-2020-11831

OvoiceManager has system permission to write vulnerability reports for arbitrary files, affected product is com.oppo.ovoicemanager V2.0.1...

CVE-2025-21106

Dell Recover Point for Virtual Machines 6.0.X contains a Weak file system permission vulnerability. A low privileged Local attacker could potentially exploit this vulnerability, leading to impacting only non-sensitive resources in the system...

CVE-2025-21106

Dell Recover Point for Virtual Machines 6.0.X contains a Weak file system permission vulnerability. A low privileged Local attacker could potentially exploit this vulnerability, leading to impacting only non-sensitive resources in the system...

CVE-2025-21106

Dell RecoverPoint for Virtual Machines (RPVM) 6.0.X is affected by a weak file system permissions vulnerability (CVE-2025-21106). The issue enables a low-privileged local attacker to access non-sensitive resources; no patch details are provided in the included documents. A temporary workaround fr...

CVE-2025-21106

Dell Recover Point for Virtual Machines 6.0.X contains a Weak file system permission vulnerability. A low privileged Local attacker could potentially exploit this vulnerability, leading to impacting only non-sensitive resources in the system...

CVE-2025-21106

Dell Recover Point for Virtual Machines 6.0.X contains a Weak file system permission vulnerability. A low privileged Local attacker could potentially exploit this vulnerability, leading to impacting only non-sensitive resources in the system...