151 matches found
CVE-2025-58722
Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally...
PT-2025-42031
Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description An out-of-bounds read issue exists in the Desktop Window Manager DWM of Windows operating systems. Exploitation of this issue can allow an attacker to elevate privileges locally. The...
PT-2025-42132
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows DWM Core Library. This issue could allow a locally authorized attacker to elevate privileges. Recommendations At the moment, there is no...
EUVD-2020-2403
Malware in sbrugna...
EUVD-2020-8810
Malware in sbrugna...
EUVD-2018-1673
Malware in sbrugna...
EUVD-2021-18098
Malware in sbrugna...
EUVD-2021-28363
Malicious code in bioql PyPI...
EUVD-2021-29910
Malicious code in bioql PyPI...
EUVD-2022-29369
Malicious code in bioql PyPI...
CVE-2025-53801
Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally...
CVE-2025-56803
Figma Desktop for Windows version 125.6.5 contains a command injection vulnerability in the local plugin loader. An attacker can execute arbitrary OS commands by setting a crafted build field in the plugin's manifest.json. This field is passed to childprocess.exec without validation, leading to...
GeoVision ASManager Windows Application 6.1.2.0 - Credentials Disclosure
Exploit Title: GeoVision ASManager Windows Application 6.1.2.0 - Credentials Disclosure Date: 19-MAR-2025 Exploit Author: Giorgi Dograshvili DRAGOWN Vendor Homepage: https://www.geovision.com.tw/ Software Link: https://www.geovision.com.tw/download/product/ Version: 6.1.2.0 or less Tested on:...
CVE-2024-46992 Electron ASAR Integrity bypass by just modifying the content
Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From versions 30.0.0-alpha.1 to before 30.0.5 and 31.0.0-alpha.1 to before 31.0.0-beta.1, Electron is vulnerable to an ASAR Integrity bypass. This only impacts apps that have the...
CVE-2023-50159
In ScaleFusion Windows Desktop App agent 10.5.2, Kiosk mode application restrictions can be bypassed allowing arbitrary code to be executed. This is fixed in 10.5.7 by preventing the launching of the file explorer in Agent-based Multi-App and Single App Kiosk mode...
CVE-2021-42955
Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability. Because of the designed password reset mechanism, any non-admin Windows user can reset the password of the Remote Access Plus Server Admin account...
CVE-2020-0935
An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links, aka 'OneDrive for Windows Elevation of Privilege Vulnerability'...
Microsoft Remote Desktop Client 安全漏洞
Microsoft Remote Desktop Client is a remote desktop client from Microsoft USA. A security vulnerability exists in Microsoft Remote Desktop Client. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are affected:Windows App Client for Windows...
Unable to save default application on UPM on Windows Desktop OS VDAs after February MS updates
After Microsoft Windows Updates on February 2024, Desktop OS VDAs using Citrix Profile Manager UPM profiles are unable to save default applications As part of the February 2024 updates KB5034763 for Windows 10 and KB5034765 for Windows 11, Microsoft introduced a new driver called the "User Choice...