CVE-2025-26624

CVE-2025-26624 describes a DLL hijacking/local privilege escalation in Rufus. Affected: Rufus 4.6.2208 and earlier. Root cause: the launcher loads a malicious cfgmgr32.dll from the same directory via side-loading when the executable has elevated privileges. Impact: enables loading/execution of a ...

BIT-POSTGRESQL-2025-1094 PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral, PQescapeIdentifier, PQescapeString, and PQescapeStringConn allows a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the...

GNU Binutils Buffer Overflow Vulnerability

GNU Binutils is a set of programming language utility programs developed by the American GNU community. A buffer overflow vulnerability exists in GNU Binutils. No details of the vulnerability are available at this time...

GNU Binutils Memory Corruption Vulnerability (CNVD-2025-09685)

GNU Binutils is a set of programming language utility programs developed by the American GNU community. A memory corruption vulnerability exists in GNU Binutils, which originates from the function bfdelfrelocsymboldeletedp in bfd/elflink.c. No details of the vulnerability are provided at this tim...

GNU Binutils Memory Corruption Vulnerability

GNU Binutils is a set of programming language utility programs developed by the American GNU community. The programs are primarily used to work with target files in a variety of formats, and are provided with connectors, assemblers, and other tools for target files and archives. A memory corrupti...

CVE-2025-1094

Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral, PQescapeIdentifier, PQescapeString, and PQescapeStringConn allows a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the...

[SECURITY] Fedora 40 Update: rust-snphost-0.5.0-3.fc40

Administrative utility for AMD SEV-SNP...

[SECURITY] Fedora 40 Update: rust-sevctl-0.6.0-4.fc40

Administrative utility for AMD SEV...

PostgreSQL -- PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

The PostgreSQL Project reports: Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral, PQescapeIdentifier, PQescapeString, and PQescapeStringConn allows a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection...

CVE-2024-36291: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR Chipset Software Installation Utility before version 10.1.19867.8574 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2025-6477

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 17.3 PostgreSQL versions prior to 16.7 PostgreSQL versions prior to 15.11 PostgreSQL versions prior to 14.16 PostgreSQL versions prior to 13.19 Description The issue is related to improper neutralization of quoting...

PT-2025-6386

Name of the Vulnerable Software and Affected Versions AMD Ryzen Master Utility affected versions not specified Description A DLL hijacking issue in the AMD Ryzen Master Utility could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

PT-2025-6651

Name of the Vulnerable Software and Affected Versions IntelR Chipset Software Installation Utility versions prior to 10.1.19867.8574 Description The issue concerns an uncontrolled search path in some IntelR Chipset Software Installation Utility versions. This may allow an authenticated user to...

CVE-2024-21966: Improper Privilege Management

A DLL hijacking vulnerability in the AMD Ryzen™ Master Utility could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

AMD Ryzen™ Master Utility DLL Hijacking Vulnerability

AMD ID: AMD-SB-9010 Potential Impact: Arbitrary Code Execution Severity: High Summary A researcher reported a DLL hijacking vulnerability within the AMD Ryzen™ Master Utility. AMD Ryzen™ Master Utility is a tool designed to unlock and customize the performance of AMD Ryzen™ processors. It can...

Intel Chipset Software Installation Utility Advisory - Lenovo Support US

No description provided...

[SECURITY] [DLA 4046-1] ark security update

Debian LTS Advisory DLA-4046-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany February 08, 2025 https://wiki.debian.org/LTS Package : ark Version : 4:20.12.2-1+deb11u1 CVE ID : CVE-2024-57966 A flaw was discovered in ark, an archive utility for the KDE platform...

[SECURITY] Fedora 41 Update: rust-snphost-0.5.0-3.fc41

Administrative utility for AMD SEV-SNP...

CVE-2025-24320

A stored cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. This vulnerability is due to an incomplete fix for CVE-2024-31156...

CVE-2025-24320

A stored cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. This vulnerability is due to an incomplete fix for CVE-2024-31156...