6965 matches found
MAL-2025-28047 Malicious code in object-window-dtc (npm)
The package object-window-dtc was found to contain malicious code...
CVE-2025-53152
Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally...
CVE-2025-7774
A security issue exists within the 5032 16pt Digital Configurable module’s web server. Intercepted session credentials can be used within a 3-minute timeout window, allowing unauthorized users to perform privileged actions...
CVE-2025-7774 Rockwell Automation ArmorBlock 5000 I/O – Web Server Vulnerabilities
A security issue exists within the 5032 16pt Digital Configurable module’s web server. Intercepted session credentials can be used within a 3-minute timeout window, allowing unauthorized users to perform privileged actions...
CVE-2025-7774
CVE-2025-7774 affects the Rockwell Automation 5032 16pt Digital Configurable module, specifically its web server. The root issue is that intercepted session credentials can be reused within a short 3‑minute timeout window to perform privileged actions. This vulnerability arises from session handl...
Rockwell Automation 5032-CFGB16M12P5DR 安全漏洞
The Rockwell Automation 5032-CFGB16M12P5DR is a security controller module from Rockwell Automation. A security vulnerability exists in the Rockwell Automation 5032-CFGB16M12P5DR that stems from intercepted session credentials that can be used to perform privileged operations within 3 minutes...
GHSA-PRJ3-CCX8-P6X4 Netty affected by MadeYouReset HTTP/2 DDoS vulnerability
Below is a technical explanation of a newly discovered vulnerability in HTTP/2, which we refer to as “MadeYouReset.” MadeYouReset Vulnerability Summary The MadeYouReset DDoS vulnerability is a logical vulnerability in the HTTP/2 protocol, that uses malformed HTTP/2 control frames in order to brea...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the improper handling of concurrently active streams per connection. An attacker can cause resource exhaustion and disrupt service availability by rapidly sending crafted...
Netty affected by MadeYouReset HTTP/2 DDoS vulnerability
Below is a technical explanation of a newly discovered vulnerability in HTTP/2, which we refer to as “MadeYouReset.” MadeYouReset Vulnerability Summary The MadeYouReset DDoS vulnerability is a logical vulnerability in the HTTP/2 protocol, that uses malformed HTTP/2 control frames in order to brea...
CVE-2025-53152
Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally...
CVE-2025-53152
Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally...
CVE-2025-50153
Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally...
CVE-2025-50153
Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally...
CVE-2025-53152 Desktop Windows Manager Remote Code Execution Vulnerability
...
CVE-2025-50153
Technical details about CVE-2025-50153 (affected components, root cause, impact specifics, and fixes) are not provided in the connected documents. Monitor for updates from MSRC/NVD for technical disclosure.
CVE-2025-50153 Desktop Window Manager Elevation of Privilege Vulnerability
...
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Updated to version 2.48.5: - CVE-2025-31273: Fixed a vulnerability where processing maliciously crafted web content could lead to memory corruption. bsc1247564 - CVE-2025-31278: Fixed a vulnerability where processing maliciously crafted web...
SUSE-SU-2025:02765-1 Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Updated to version 2.48.5: - CVE-2025-31273: Fixed a vulnerability where processing maliciously crafted web content could lead to memory corruption. bsc1247564 - CVE-2025-31278: Fixed a vulnerability where processing maliciously crafted web...
