9772 matches found
CVE-2025-26852: Improper Neutralization of Special Elements used in an SQL Command
DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 allows SQL Injection...
CVE-2024-6986: Improper Neutralization of Input During Web Page Generation
A Cross-site Scripting XSS vulnerability exists in the Settings page of parisneo/lollms-webui version 9.8. The vulnerability is due to the improper use of the 'v-html' directive, which inserts the content of the 'fulltemplate' variable directly as HTML. This allows an attacker to execute maliciou...
PT-2025-16775
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description A vulnerability in the Linux kernel has been resolved. The issue occurs during a module removal, where kvm exit invokes arch-specific disable calls, which can lead to inconsistent...
CVE-2025-30132: Improper Access Control
An issue was discovered on IROAD Dashcam V devices. It uses an unregistered public domain name as an internal domain, creating a security risk. During analysis, it was found that this domain was not owned by IROAD, allowing an attacker to register it and potentially intercept sensitive device...
CVE-2025-30132
An issue was discovered on IROAD Dashcam V devices. It uses an unregistered public domain name as an internal domain, creating a security risk. During analysis, it was found that this domain was not owned by IROAD, allowing an attacker to register it and potentially intercept sensitive device...
IROAD V Series security vulnerabilities
IROAD V Series is a series of car recorders from IROAD. A security vulnerability exists in IROAD V Series that stems from improper configuration management of the CarLogger, which allows an unauthorized user to modify settings, disable critical functions and turn off battery protection, potential...
IROAD V Series security vulnerabilities
IROAD V Series is a series of car recorders from IROAD. A security vulnerability exists in IROAD V Series that stems from the use of an unregistered public domain name as an internal domain name, which could lead to data exfiltration or man-in-the-middle attacks...
PT-2025-11608
Name of the Vulnerable Software and Affected Versions IROAD Dashcam V devices affected versions not specified Description An issue was discovered where the device uses an unregistered public domain name as an internal domain, creating a security risk. This domain is not owned by IROAD, allowing a...
IROAD V Series security vulnerabilities
IROAD V Series is a series of car recorders from IROAD. A security vulnerability exists in IROAD V Series, which arises from an exposed endpoint of the car recorder that allows unauthorized users to list and download recorded videos and access live video streams...
CVE-2025-30132
An issue was discovered on IROAD Dashcam V devices. It uses an unregistered public domain name as an internal domain, creating a security risk. During analysis, it was found that this domain was not owned by IROAD, allowing an attacker to register it and potentially intercept sensitive device...
Linux RISC-V Kernel kprobe_fault_handler Heap Buffer Overflow DoS
The vulnerability of the kprobefaulthandler function in the arch/riscv/kernel/probes/kprobes.c file of the module for the Linux operating system’s RISC-V architecture-based kernel involves incorrect input validation. Exploiting this vulnerability could allow an attacker to trigger a service failu...
UBUNTU-CVE-2023-52927
In the Linux kernel, the following vulnerability has been resolved: netfilter: allow exp not to be removed in nfctfindexpectation Currently nfconntrackin calling nfctfindexpectation will remove the exp from the hash table. However, in some scenario, we expect the exp not to be removed when the...
Malicious code in data-ui-v (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31699b2697ce8618e833f2917ee401c8d6a8a1300cc5d48905de3fd7895c9577 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-24048
Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally...
CVE-2025-24050
Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally...
riscv: Fix sleeping in invalid context in die()
...
SUSE CVE-2025-2137
Out of bounds read in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-24050
Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally...
