CVE-2025-11139 Bjskzy Zhiyou ERP com.artery.form.services.FormStudioUpdater uploadStudioFile path traversal

A vulnerability was determined in Bjskzy Zhiyou ERP up to 11.0. Affected is the function uploadStudioFile of the component com.artery.form.services.FormStudioUpdater. This manipulation of the argument filepath causes path traversal. Remote exploitation of the attack is possible. The exploit has...

CVE-2025-11139

Summary (CVE-2025-11139): Bjskzy Zhiyou ERP (versions up to 11.0) is affected by a path traversal vulnerability in the function uploadStudioFile of the component com.artery.form.services.FormStudioUpdater. The vulnerability stems from manipulating the filepath argument, enabling path traversal an...

CVE-2025-11139 Bjskzy Zhiyou ERP com.artery.form.services.FormStudioUpdater uploadStudioFile path traversal

A vulnerability was determined in Bjskzy Zhiyou ERP up to 11.0. Affected is the function uploadStudioFile of the component com.artery.form.services.FormStudioUpdater. This manipulation of the argument filepath causes path traversal. Remote exploitation of the attack is possible. The exploit has...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, kubernetes-dashboard-api, nri-f5, tempo, rancher-system-agent, mockgen, cilium-cli, gobump, ini-file, cis-operator, flux, terraform-mcp-server, ko, polaris, falcoctl, timescaledb-tune, kpt, src, kubernetes-dashboard-auth, eksctl, controller-gen...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: hubble, delve, rabbitmq-default-user-credential-updater, tempo, dex, terraform, wgcf, blob-csi, k8sgpt, gcp-compute-persistent-disk-csi-driver, aws-privateca-issuer, kapp, bom, plugin-barman-cloud, kubernetes-csi-external-health-monitor, flux-operator, thanos-operato...

CVE-2025-9059

The Altiris Core Agent Updater package AeXNSC.exe is prone to an elevation of privileges vulnerability through DLL hijacking...

CVE-2025-9059

The Altiris Core Agent Updater package AeXNSC.exe is prone to an elevation of privileges vulnerability through DLL hijacking...

AsyncRAT Exploits ConnectWise ScreenConnect to Steal Credentials and Crypto

Cybersecurity researchers have disclosed details of a new campaign that leverages ConnectWise ScreenConnect, a legitimate Remote Monitoring and Management RMM software, to deliver a fleshless loader that drops a remote access trojan RAT called AsyncRAT to steal sensitive data from compromised...

CVE-2025-9059

CVE-2025-9059 affects the Altiris Core Agent Updater package (AeXNSC.exe). The vulnerability is an elevation of privileges caused by DLL hijacking, described in multiple sources as a local attack requiring low privileges and user interaction of NONE, with high impact overall (confidentiality, int...

CVE-2025-9059 Elevation of Privileges Vulnerability in IT Management Suite

The Altiris Core Agent Updater package AeXNSC.exe is prone to an elevation of privileges vulnerability through DLL hijacking...

CVE-2025-9059 Elevation of Privileges Vulnerability in IT Management Suite

The Altiris Core Agent Updater package AeXNSC.exe is prone to an elevation of privileges vulnerability through DLL hijacking...

PT-2025-37114

Name of the Vulnerable Software and Affected Versions: Altiris Core Agent Updater affected versions not specified Description: The Altiris Core Agent Updater package AeXNSC.exe is susceptible to an elevation of privileges issue due to DLL hijacking. Recommendations: At the moment, there is no...

Linux Distros Unpatched Vulnerability : CVE-2022-48319

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sensitive host secret disclosed in cmk-update-agent.log file in Tribe29's Checkmk = 2.1.0p13, Checkmk = 2.0.0p29, and all versions of Checkmk 1.6.0 EOL allows a...

GHSA-786Q-9HCG-V9FF vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

CVE-2025-55190 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

CVE-2025-55190 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, argo-cd, argocd-image-updater...

GHSA-786Q-9HCG-V9FF vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, argo-cd, argocd-image-updater...

CVE-2025-41060 Stored Cross-Site Scripting vulnerability in appRain CMF

A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'dataAddonlayouts' and 'dataAddonlayoutsexcept' parameters in /apprain/developer/addons/update/tree...

CVE-2025-8979

A vulnerability was identified in Tenda AC15 15.13.07.13. Affected by this vulnerability is the function checkfwtype/splitfireware/checkfw of the component Firmware Update Handler. The manipulation leads to insufficient verification of data authenticity. The attack can be launched remotely. The...

Linux Distros Unpatched Vulnerability : CVE-2019-17009

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an unprivileged process to locate and exploit a...