EUVD-2022-31484

Malicious code in bioql PyPI...

EUVD-2023-32437

Malicious code in bioql PyPI...

EUVD-2024-0095

Malicious code in bioql PyPI...

EUVD-2024-37147

Malicious code in bioql PyPI...

Hackers Use Fake Invoices to Spread XWorm RAT via Office Files

Hackers are sending fake invoice emails with malicious Office files that install the XWorm RAT on Windows systems, allowing full remote access and data theft. Learn how the shellcode and process injection are used to steal data, and how to stay safe from this persistent threat...

CVE-2025-27233 Zabbix Agent 2 smartctl plugin argument injection in Zabbix 6.0 and later.

Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, allowing an attacker to inject unexpected arguments into the smartctl command. This can be used to leak the NTLMv2 hash from a Windows system...

Microsoft MapUrlToZone 安全漏洞

Microsoft MapUrlToZone is a lightweight console application written in C++ by Microsoft Corporation USA. A security vulnerability exists in Microsoft MapUrlToZone. An attacker exploiting this vulnerability could bypass certain functionality. The following products and editions are affected:Window...

CVE-2025-59033

The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control WDAC policy. Entries that specify only the to-be-signed TBS part of the code signer certificate are properly blocked, but entries that specify the signing certificate's TBS hash along with a...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection due to improper handling of MPV functionality in flashcards. The MPV component processes user-supplied flashcard content with insufficient sanitization, enabling crafted inputs to execute arbitrary scripts on...

Linux Distros Unpatched Vulnerability : CVE-2022-21295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.32. Easily...

CVE-2025-5942

Netskope was notified about a potential gap in its agent NS Client on Windows systems. If this gap is successfully exploited, an unprivileged user can trigger a heap overflow in the epdlpdrv.sys driver, leading to a Blue-Screen-of-Death BSOD. Successful exploitation can also potentially be...

PT-2025-33119 · Netskope · Netskope Client +1

Name of the Vulnerable Software and Affected Versions: Netskope NS Client on Windows systems affected versions not specified Description: Netskope was notified about a potential gap in its agent NS Client on Windows systems. Successful exploitation of this issue by an unprivileged user can trigge...

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an authorized attacker to execute code over a network...

CVE-2025-54531

CVE-2025-54531 affects JetBrains TeamCity prior to 2025.07. The issue is a path traversal vulnerability introduced by Windows plugin unpacking, allowing unauthorized access to files via crafted paths. Documented impact is high/critical, with CVSS metrics indicating local and network factors depen...

Exploit for CVE-2025-27210

🔓 CVE-2025-27210 – High-Severity Path Traversal in Node.js o...

Node.js 24.x < 24.4.1 HashDoS Vulnerability - Windows

Node.js is prone to a HashDoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nodejs:node.js"; ifdescription...

CVE-2025-34105 DiskBoss Enterprise Stack-Based Buffer Overflow RCE

A stack-based buffer overflow vulnerability exists in the built-in web interface of DiskBoss Enterprise versions 7.4.28, 7.5.12, and 8.2.14. The vulnerability arises from improper bounds checking on the path component of HTTP GET requests. By sending a specially crafted long URI, a remote...

CVE-2025-34110

CVE-2025-34110 affects ColoradoFTP Server for Windows up to version 1.3 Build 8. The issue is a directory traversal caused by insufficient sanitation of file paths in FTP GET and PUT handlers, allowing unauthenticated attackers to read/write files outside the FTP root. The vulnerability is exploi...

[SECURITY] Fedora 42 Update: mingw-python-requests-2.32.4-1.fc42

MinGW Windows Python requests...

CVE-2025-34095

An OS command injection vulnerability exists in Mako Server versions 2.5 and 2.6, specifically within the tutorial interface provided by the examples/save.lsp endpoint. An unauthenticated attacker can send a crafted PUT request containing arbitrary Lua os.execute code, which is then persisted on...