CVE-2025-31175

Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity...

CVE-2024-58106

Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability...

Microsoft Office Elevation of Privilege Vulnerability (CNVD-2025-10661)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. Microsoft Office has an elevation of privilege vulnerability that can be exploited by an attacker to elevat...

📄 Artica Proxy 4.50 Remote Code Execution

Artica Proxy version 4.50 suffers from a remote code execution vulnerability due to insecure deserialization. Exploit Title: CVE-2024-2054 Artica-Proxy administrative web application insecure deserialization RCE Google Dork: Date: 23-04-2024 Exploit Author: Madan Vendor Homepage:...

The vulnerability of the Live555 multimedia streaming library, related to the use of memory after it is freed, allows a hacker to cause a service failure.

The vulnerability of the Live555 multimedia streaming library lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the x86/mm kernel component of the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the x86/mm kernel component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Microsoft Visual Studio Elevation of Privilege Vulnerability

Microsoft Visual Studio is a family of development toolkits from Microsoft Corporation in the United States and is a fundamentally complete set of development tools. An elevation of privilege vulnerability exists in Microsoft Visual Studio, which can be exploited by an attacker to elevate...

CVE-2025-27188

Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access...

CVE-2025-30303 Adobe Framemaker | Out-of-bounds Read (CWE-125)

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in tha...

CVE-2024-23847

Incorrect default permissions issue exists in Unifier and Unifier Cast. If this vulnerability is exploited, arbitrary code may be executed with LocalSystem privilege. As a result, a malicious program may be installed, data may be altered or deleted...

PT-2025-15622 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: There is an issue that is being actively exploited. Recommendations: At the moment, there is no information about a newer version that contains a fix for this issue...

📄 Pandora FMS Authenticated Command Injection

This Metasploit module exploits a command injection vulnerability in the chromium-path or phantomjs-bin directory setting at the application settings page of Pandora FMS. You need to have administrative access in the Pandora FMS web application in order to achieve remote code execution. This modu...

PT-2025-15596

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to April 2025 Patch Tuesday Description A use-after-free vulnerability exists in the Windows Common Log File System CLFS driver. Successful exploitation of this vulnerability allows an authorized attacker to...

CVE-2025-31175

CVE-2025-31175 is a deserialization mismatch vulnerability in the DSoftBus module used by Huawei HarmonyOS and EMUI. Root cause: deserialization mismatch. Impact: could affect service integrity. Public assessments: CVSSv3.1 base score 7.5 ( NETWORK, NONE privileges, I HIGH) and Huawei CNA score 8...

CVE-2025-31174

Path traversal vulnerability in the DFS module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-31173

Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-31171

CVE-2025-31171 describes a file read permission bypass in the kernel file system module, affecting Huawei HarmonyOS. The vulnerability allows bypass of read permissions within the kernel file system component, with potential impact to service confidentiality (local exploitation; low attack comple...

CVE-2024-58107

Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-3253 xujiangfei admintwo insertTree cross site scripting

A vulnerability was found in xujiangfei admintwo 1.0 and classified as problematic. This issue affects some unknown processing of the file /ztree/insertTree. The manipulation of the argument Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed t...

CVE-2025-3203 Tenda W18E setModules formSetAccountList stack-based overflow

A vulnerability classified as problematic was found in Tenda W18E 16.01.0.11. Affected by this vulnerability is the function formSetAccountList of the file /goform/setModules. The manipulation of the argument Password leads to stack-based buffer overflow. The attack can be launched remotely. The...