37 matches found
App Package Installer Privilege Escalation
The vulnerability of the App Package Installer installation program for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
App Package Installer Privilege Escalation
The vulnerability of the App Package Installer installation program for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2026-50400 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-50400 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-50400
CVE-2026-50400 is a Windows App Installer elevation-of-privilege vulnerability caused by a stack-based buffer overflow. An attacker with local, low-privilege access could exploit this to gain higher privileges on the system. Public sources confirm a local-execution path via Windows App Installer ...
CVE-2026-48571 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-48571 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-48572 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-48572 Windows App Package Installer Elevation of Privilege Vulnerability
...
report-anonymizer
🛡️ Report Anonymizer Local LLM anonymizer for penetration-t...
Malicious Package
Overview @sbseg-plugin/qbo-web-app-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the Split function. An attacker can cause excessive CPU consumption and resource exhaustion by supplying a malicious APK stream that triggers unbounded gzip inflation. Remediation...
CVE-2024-25621
containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths /var/lib/containerd,...
Malicious code in cross-app (npm)
The package cross-app was found to contain malicious code...
MAL-2025-48680 Malicious code in env-app (npm)
The package env-app was found to contain malicious code...
Malicious code in @tobiasredfield/simple-web-app-package (npm)
The package @tobiasredfield/simple-web-app-package was found to contain malicious code...
MAL-2025-42191 Malicious code in @bugtestester/simple-web-app-package (npm)
The package @bugtestester/simple-web-app-package was found to contain malicious code...
MAL-2025-42963 Malicious code in @tobiasredfield/simple-web-app-package (npm)
The package @tobiasredfield/simple-web-app-package was found to contain malicious code...
CVE-2025-50862
The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This presents a risk of user data exposure...