860 matches found
CVE-2025-64485 CVAT: Mounted share file overwrite via crafted request
CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.4.0 through 2.48.1, a malicious CVAT user with at least the User global role may create files in the root of the mounted file share, or overwrite existing files. If no file share is mounted, the...
CVE-2025-64485 CVAT: Mounted share file overwrite via crafted request
CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.4.0 through 2.48.1, a malicious CVAT user with at least the User global role may create files in the root of the mounted file share, or overwrite existing files. If no file share is mounted, the...
EUVD-2025-38341
CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.4.0 through 2.48.1, a malicious CVAT user with at least the User global role may create files in the root of the mounted file share, or overwrite existing files. If no file share is mounted, the...
CVE-2025-64485 CVAT: Mounted share file overwrite via crafted request
CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.4.0 through 2.48.1, a malicious CVAT user with at least the User global role may create files in the root of the mounted file share, or overwrite existing files. If no file share is mounted, the...
PT-2025-45521
Name of the Vulnerable Software and Affected Versions CVAT versions 2.4.0 through 2.48.1 Description CVAT is an interactive video and image annotation tool for computer vision. A user with the User global role can potentially create or overwrite files in the root of a mounted file share. If a fil...
CVE-2025-12103: Incorrect Privilege Assignment
A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to get, list, watch any pod in any namespace on the cluster. TrustyAI is creating a role trustyai-service-operator-lmeval-user-role and a CRB...
WordPress Binary MLM Plan plugin elevation of privilege vulnerability
WordPress Binary MLM Plan plugin is a WordPress plugin designed for network marketing, mainly used to simplify the operational process of multi-level marketing MLM business. WordPress Binary MLM Plan plugin suffers from an elevation of privilege vulnerability that stems from the bmpuser role...
EUVD-2014-0153
Malware in sbrugna...
EUVD-2013-3533
Malware in sbrugna...
EUVD-2015-0050
Malware in sbrugna...
EUVD-2017-3743
Malware in sbrugna...
EUVD-2019-6682
Malware in sbrugna...
EUVD-2021-11731
Malware in sbrugna...
EUVD-2021-11736
Malware in sbrugna...
EUVD-2021-11418
Malware in sbrugna...
EUVD-2020-0261
Malware in sbrugna...
EUVD-2016-3372
Malware in sbrugna...
EUVD-2014-3069
Malware in sbrugna...