EUVD-2023-35066

Malicious code in bioql PyPI...

EUVD-2024-47039

Malicious code in bioql PyPI...

EUVD-2025-14911

Malicious code in bioql PyPI...

EUVD-2025-7351

Malicious code in bioql PyPI...

CVE-2025-5191

An Unquoted Search Path vulnerability has been identified in the utility for Moxa’s industrial computers Windows. Due to the unquoted path configuration in the SerialInterfaceService.exe utility, a local attacker with limited privileges could place a malicious executable in a higher-priority...

CVE-2019-13054

The Logitech R500 presentation clicker allows attackers to determine the AES key, leading to keystroke injection. On Windows, any text may be injected by using ALT+NUMPAD input to bypass the restriction on the characters A through Z...

CVE-2025-0131

An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. However,...

CVE-2025-0131

The CVE-2025-0131 issue affects Palo Alto Networks GlobalProtect on Windows, stemming from an incorrect privilege management flaw in the OPSWAT MetaDefender Endpoint Security SDK. The vulnerability could allow a locally authenticated non-administrative Windows user to escalate to NT AUTHORITY\SYS...

CVE-2025-0131 GlobalProtect App: Incorrect Privilege Management Vulnerability in OPSWAT MetaDefender Endpoint Security SDK

An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. However,...

CVE-2025-0131 GlobalProtect App: Incorrect Privilege Management Vulnerability in OPSWAT MetaDefender Endpoint Security SDK

An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. However,...

PT-2025-21208 · Palo Alto Networks +1 · Palo Alto Networks Globalprotect +1

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect affected versions not specified Description: The issue is related to an incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtec...

Enhanced SSO session may experience problem accessing network shares or group policy updates

You have configured configured Enhanced SSO for Citrix workspace app and you are either on Windows 10 or Windows 11 endpoints. When you launch a desktop session and try to access the domain shares you may encounter the below prompt for credentials - You can also repoduce this issue by accessing t...

CVE-2025-0121

A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a low-privileged local Windows user to crash the agent. Additionally, malware can use this vulnerability to perform malicious activity without Cortex XDR being able to detect it...

CVE-2025-0120

A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. However, execution requires that the local user can also...

CVE-2025-0120

A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. However, execution requires that the local user can also...

CVE-2025-0121

A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a low-privileged local Windows user to crash the agent. Additionally, malware can use this vulnerability to perform malicious activity without Cortex XDR being able to detect it...

CVE-2025-0121

The CVE-2025-0121 entry concerns a null pointer dereference in the Palo Alto Networks Cortex XDR agent running on Windows. The vulnerability allows a low-privileged local user to crash the agent, and, per multiple sources, could enable malware activity that Cortex XDR may be unable to detect. The...

CVE-2025-0120 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. However, execution requires that the local user can also...

CVE-2025-0120 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. However, execution requires that the local user can also...

CVE-2025-0120

CVE-2025-0120 affects the Palo Alto Networks GlobalProtect App on Windows. The issue is a privilege management mechanism flaw that can allow a locally authenticated non-admin user to escalate to NT AUTHORITY\SYSTEM, with exploitation requiring a race condition. The vulnerability is described as d...