The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App lies in the use of an unreliable search path, allowing attackers to elevate their privileges to the root level.

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level...

WhatsApp on Windows users targeted in new campaign, warns Microsoft

Microsoft researchers found a campaign that abuses WhatsApp attachments to sneak a script onto Windows machines which will lead to the attacker gaining remote control. WhatsApp offers a desktop application for Windows and macOS, which users can synchronize with their mobile devices. Desktop...

RustDesk 安全漏洞

RustDesk is a remote access and control software developed by RustDesk personal developers. It is primarily written in Rust and can be used to maintain computers and other devices remotely. Versions of RustDesk 1.4.5 and earlier contain security vulnerabilities, which stem from improper certifica...

RustDesk 安全漏洞

RustDesk is a remote access and control software developed by RustDesk personal developers. It is primarily written in Rust and can be used to maintain computers and other devices remotely. Versions of RustDesk 1.4.5 and earlier contain security vulnerabilities, which stem from permission abuse...

The vulnerability of the RuDesktop remote access and management software lies in its lack of protection for website structures. This allows attackers to execute malicious JavaScript code.

The vulnerability of the software for remote access and management of RuDesktop exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute malicious JavaScript code remotely...

The vulnerability of the RuDesktop remote access and management software lies in the storage of confidential information within a mechanism with no access control. This allows attackers to gain unauthorized access to the protected information.

The vulnerability of the RuDesktop remote access and management software lies in the storage of confidential information within a mechanism without access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the RuDesktop remote access and management software lies in its lack of protection for website structures. This allows attackers to execute malicious JavaScript code.

The vulnerability of the software for remote access and management of RuDesktop exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute malicious JavaScript code remotely...

The vulnerability of AnyDesk’s remote access and management software, related to pointer swapping errors, allows a hacker to trigger a service failure.

The vulnerability of AnyDesk remote access and management software is related to pointer assignment errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...

EUVD-2019-5955

Malware in sbrugna...

EUVD-2007-4766

Malware in sbrugna...

EUVD-2005-4446

Malware in sbrugna...

EUVD-2021-7039

Malicious code in bioql PyPI...

EUVD-2022-34605

Malicious code in bioql PyPI...

EUVD-2025-8849

Malicious code in bioql PyPI...

CVE-2025-53902

Tuleap exposes confidential artifact information to unauthorized users via email notifications. CVE-2025-53902 affects Tuleap Community Edition <16.9.99.1752585665 and Tuleap Enterprise Edition <16.8-6 and

GHSA-3R3J-4VRW-884J files-bucket-server vulnerable to Directory Traversal

All versions of the package files-bucket-server are vulnerable to Directory Traversal, where an attacker can traverse the file system and access files outside of the intended directory...

SonicWall SMA 100 Series 跨站脚本漏洞

SonicWall SMA 100 Series is a series of remote access software from SonicWall Corporation. A cross-site scripting vulnerability exists in SonicWall SMA 100 Series that originates from reflective cross-site scripting and could lead to arbitrary JavaScript code execution...

The vulnerability of the RemotePC software for providing remote access lies in its insecure management of privileges, allowing attackers to escalate their privileges.

The vulnerability of the RemotePC remote access software is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

CVE-2025-24331

The Single RAN baseband OAM service is intended to run as an unprivileged service. However, it initially starts with root privileges and assigns certain capabilities before dropping to an unprivileged level. The capabilities retained from the root period are considered extensive after the privile...

CVE-2025-6273 WebAssembly wabt binary-reader-objdump.cc LogOpcode assertion

A vulnerability was found in WebAssembly wabt up to 1.0.37 and classified as problematic. This issue affects the function LogOpcode of the file src/binary-reader-objdump.cc. The manipulation leads to reachable assertion. Local access is required to approach this attack. The exploit has been...