1808 matches found
Linux Distros Unpatched Vulnerability : CVE-2017-5064
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect handling of DOM changes in Blink in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially exploit heap corruption v...
Linux Distros Unpatched Vulnerability : CVE-2017-5077
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Skia in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a...
MAL-2025-28599 Malicious code in ostat-win32-x64-msvc (npm)
The package ostat-win32-x64-msvc was found to contain malicious code...
CVE-2025-5942 Heap Overflow in Netskope Endpoint DLP Driver
Netskope was notified about a potential gap in its agent NS Client on Windows systems. If this gap is successfully exploited, an unprivileged user can trigger a heap overflow in the epdlpdrv.sys driver, leading to a Blue-Screen-of-Death BSOD. Successful exploitation can also potentially be...
Google Chrome Security Update (stable-channel-update-for-desktop_12-2025-08) - Windows
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
HTTPS Fetch
Fetch and execute an x64 payload from an HTTPS server. Module Options msf use payload/cmd/windows/https/x64/downloadexec msf payloaddownloadexec show actions ...actions... msf payloaddownloadexec set ACTION msf payloaddownloadexec show options ...show and set options... msf payloaddownloadexec ru...
Adobe Animate 23.x < 23.0.13 / 24.x < 24.0.10 Multiple Vulnerabilities (APSB25-73)
The version of Adobe Animate installed on the remote Windows host is prior to 23.0.13 or 24.0.10. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-73 advisory. - Use After Free CWE-416 potentially leading to Arbitrary code execution CVE-2025-49561 - Use After Fre...
BIT-LIBPHP-2020-7061 heap-buffer-overflow in phar_extract_file
In PHP versions 7.3.x below 7.3.15 and 7.4.x below 7.4.3, while extracting PHAR files on Windows using phar extension, certain content inside PHAR file could lead to one-byte read past the allocated buffer. This could potentially lead to information disclosure or crash...
Linux Distros Unpatched Vulnerability : CVE-2020-12389
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. Note: this issue only affects Firefox on...
CVE-2025-4056
A flaw was found in GLib. A denial of service on Windows platforms may occur if an application attempts to spawn a program using long command lines...
The vulnerability of the Docker Desktop platform for developing and delivering container applications lies in a flawed definition of the link before access to files. This allows attackers to modify or delete any files, or elevate their privileges to that of the SYSTEM user.
The vulnerability of the Docker Desktop for Windows platform, which is used for developing and delivering container applications, is related to an incorrect definition of the link before accessing a file. Exploiting this vulnerability could allow an attacker to modify or delete any files, or to...
Island Lake WebBatch 安全漏洞
Island Lake WebBatch is a CGI scripting language and automation tool for the Windows platform from Island Lake, USA. A security vulnerability exists in versions of Island Lake WebBatch prior to 2025C that stems from a specially crafted URL could lead to remote code execution...
UBUNTU-CVE-2024-43394
Server-Side Request Forgery SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via modrewrite or apache expressions that pass unvalidated request input. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.63. Note: The Apache HTTP Server...
CVE-2025-34101
An unauthenticated command injection vulnerability exists in Serviio Media Server versions 1.4 through 1.8 on Windows, in the /rest/action API endpoint exposed by the console component default port 23423. The checkStreamUrl method accepts a VIDEO parameter that is passed unsanitized to a call to...
CVE-2025-48000
Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...
DEBIAN-CVE-2024-43394
Server-Side Request Forgery SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via modrewrite or apache expressions that pass unvalidated request input. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.63. Note: The Apache HTTP Server...
CVE-2025-49724
Use after free in Windows Connected Devices Platform Service allows an unauthorized attacker to execute code over a network...
webkitgtk: Multiple memory corruption issue leading to arbitrary code execution
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, watchOS 8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, iTunes 12.12 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution...
