Palo Alto Networks GlobalProtect App Privilege Escalation

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level...

WhatsApp on Windows users targeted in new campaign, warns Microsoft

Microsoft researchers found a campaign that abuses WhatsApp attachments to sneak a script onto Windows machines which will lead to the attacker gaining remote control. WhatsApp offers a desktop application for Windows and macOS, which users can synchronize with their mobile devices. Desktop...

RustDesk security vulnerabilities

RustDesk is a remote access and control software developed by RustDesk personal developers. It is primarily written in Rust and can be used to maintain computers and other devices remotely. Versions of RustDesk 1.4.5 and earlier contain security vulnerabilities, which stem from improper certifica...

RustDesk security vulnerabilities

RustDesk is a remote access and control software developed by RustDesk personal developers. It is primarily written in Rust and can be used to maintain computers and other devices remotely. Versions of RustDesk 1.4.5 and earlier contain security vulnerabilities, which stem from permission abuse...

RuDesktop Remote Access XSS

The vulnerability of the software for remote access and management of RuDesktop exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute malicious JavaScript code remotely...

RuDesktop Information Disclosure Control

The vulnerability of the RuDesktop remote access and management software lies in the storage of confidential information within a mechanism without access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

RuDesktop Remote Access XSS

The vulnerability of the software for remote access and management of RuDesktop exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute malicious JavaScript code remotely...

AnyDesk Pointer Swapping DoS

The vulnerability of AnyDesk remote access and management software is related to pointer assignment errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...

EUVD-2005-4446

Malware in sbrugna...

EUVD-2007-4766

Malware in sbrugna...

EUVD-2019-5955

Malware in sbrugna...

EUVD-2022-34605

Malicious code in bioql PyPI...

EUVD-2025-8849

Malicious code in bioql PyPI...

EUVD-2021-7039

Malicious code in bioql PyPI...

CVE-2025-53902

Tuleap exposes confidential artifact information to unauthorized users via email notifications. CVE-2025-53902 affects Tuleap Community Edition <16.9.99.1752585665 and Tuleap Enterprise Edition <16.8-6 and

GHSA-3R3J-4VRW-884J files-bucket-server vulnerable to Directory Traversal

All versions of the package files-bucket-server are vulnerable to Directory Traversal, where an attacker can traverse the file system and access files outside of the intended directory...

SonicWall SMA 100 Series Cross-Site Script Vulnerabilities

SonicWall SMA 100 Series is a series of remote access software from SonicWall Corporation. A cross-site scripting vulnerability exists in SonicWall SMA 100 Series that originates from reflective cross-site scripting and could lead to arbitrary JavaScript code execution...

RemotePC Privilege Escalation

The vulnerability of the RemotePC remote access software is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

CVE-2025-24331

The Single RAN baseband OAM service is intended to run as an unprivileged service. However, it initially starts with root privileges and assigns certain capabilities before dropping to an unprivileged level. The capabilities retained from the root period are considered extensive after the privile...

CVE-2025-6273 WebAssembly wabt binary-reader-objdump.cc LogOpcode assertion

A vulnerability was found in WebAssembly wabt up to 1.0.37 and classified as problematic. This issue affects the function LogOpcode of the file src/binary-reader-objdump.cc. The manipulation leads to reachable assertion. Local access is required to approach this attack. The exploit has been...