290 matches found
EUVD-2024-27876
Malicious code in bioql PyPI...
EUVD-2023-36479
Malicious code in bioql PyPI...
parsec security subsystem Heap Buffer Overflow DoS
The vulnerability of the parsecstattodo function in the PARSEC security subsystem relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-50892
The eudskacs.sys driver version 20250328 shipped with EaseUs Todo Backup 1.2.0.1 fails to properly validate privileges for I/O requests IRPMJREAD/IRPMJWRITE sent to its device object. This allows a local, low-privileged attacker to perform arbitrary raw disk reads and writes, leading to sensitive...
CVE-2025-10117
A weakness has been identified in SourceCodester Simple To-Do List System 1.0. Impacted is an unknown function of the file /fetchtasks.php of the component Add New Task. Executing manipulation with the input can lead to cross site scripting. The attack can be executed remotely. The exploit has be...
CVE-2025-50892
The eudskacs.sys driver version 20250328 shipped with EaseUs Todo Backup 1.2.0.1 fails to properly validate privileges for I/O requests IRPMJREAD/IRPMJWRITE sent to its device object. This allows a local, low-privileged attacker to perform arbitrary raw disk reads and writes, leading to sensitive...
CVE-2025-50892
The eudskacs.sys driver version 20250328 shipped with EaseUs Todo Backup 1.2.0.1 fails to properly validate privileges for I/O requests IRPMJREAD/IRPMJWRITE sent to its device object. This allows a local, low-privileged attacker to perform arbitrary raw disk reads and writes, leading to sensitive...
CVE-2025-50892: Improper Privilege Management
The eudskacs.sys driver version 20250328 shipped with EaseUs Todo Backup 1.2.0.1 fails to properly validate privileges for I/O requests IRPMJREAD/IRPMJWRITE sent to its device object. This allows a local, low-privileged attacker to perform arbitrary raw disk reads and writes, leading to sensitive...
CVE-2025-50892
The eudskacs.sys driver version 20250328 shipped with EaseUs Todo Backup 1.2.0.1 fails to properly validate privileges for I/O requests IRPMJREAD/IRPMJWRITE sent to its device object. This allows a local, low-privileged attacker to perform arbitrary raw disk reads and writes, leading to sensitive...
PT-2025-37082
Name of the Vulnerable Software and Affected Versions: EaseUs Todo Backup version 1.2.0.1 Description: The eudskacs.sys driver version 20250328 fails to properly validate privileges for I/O requests IRP MJ READ/IRP MJ WRITE sent to its device object. This allows a local, low-privileged attacker t...
CVE-2025-50892
The eudskacs.sys driver (version 20250328 ) shipped with EaseUs Todo Backup 1.2.0.1 contains a vulnerability where it fails to properly validate privileges for I/O requests (IRP_MJ_READ/IRP_MJ_WRITE ) sent to its device object. This flaw allows a local, low-privileged attacker to perform arbitrar...
EaseUs Todo Backup security vulnerabilities
EaseUS Todo Backup is a free data backup software from EaseUS. A security vulnerability exists in EaseUs Todo Backup version 1.2.0.1 that stems from not properly validating I/O request permissions, which could result in the disclosure of sensitive information, denial of service, or local elevatio...
CVE-2025-50892
The eudskacs.sys driver version 20250328 shipped with EaseUs Todo Backup 1.2.0.1 fails to properly validate privileges for I/O requests IRPMJREAD/IRPMJWRITE sent to its device object. This allows a local, low-privileged attacker to perform arbitrary raw disk reads and writes, leading to sensitive...
Malicious code in flux-example-todo (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41565 Malicious code in flux-example-todo (npm)
--- -= Per source details. Do not edit below this line.=-...
Linux Distros Unpatched Vulnerability : CVE-2020-13346
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, allowing guest users to access confidential...
Linux Distros Unpatched Vulnerability : CVE-2020-26412
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics starting in GitLab EE 13.2 before 13.6.2...
Malicious code in todo-bitpanda-client (npm)
The package todo-bitpanda-client was found to contain malicious code...
on-duty-js (3.0.0), todo-app-23426 (1.0.0) potentially affected by unknown CVE via chalkk (0.0.1-security)
chalkk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chalkk and may be impacted: - on-duty-js 3.0.0 - todo-app-23426 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16776...