7070 matches found
Vulnerability of Microsoft Office packages and 365 Apps for Enterprise, related to incorrect path name restrictions for restricted access directories, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise is related to incorrect path name restrictions in the restricted access catalog. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of Microsoft Office Word and 365 Apps for Enterprise applications relates to buffer overflows in dynamic memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office Word and 365 Apps for Enterprise lies in the overflowing of buffers in the dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created RTF file...
com.farao-community.farao:gridcapa-core-cc-app (>=1.0.4 <=1.22.0), com.farao-community.farao:gridcapa-core-cc-post-processing-app (>=1.0.3 <=1.19.0) +16 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-entsoe-util (>=6.0.0-RC1 <=6.7.1)
com.powsybl:powsybl-entsoe-util MAVEN version =6.0.0-RC1, =1.0.4, =1.0.3, =1.10.0, =1.21.1, =1.21.1, =1.21.1, =1.12.0, =5.3.0, =6.0.0, =2.6.0, =2.6.0, =1.5.0, =1.5.0, =1.5.0, =2023.3.0, =2025.0.0 and more Source cves: CVE-2025-48058 Source advisory: SNYK:JAVA-COMPOWSYBL-10442142...
GodFather Android Malware Runs Real Apps in a Sandbox to Steal Data
Zimperium zLabs reveals GodFather malware’s advanced virtualization that hijacks mobile banking and crypto apps. Learn how it steals data on your phone...
Version-Level Third-Party Library Detection in Android Applications Via Class Structural Similarity
Android applications apps integrate reusable and well-tested third-party libraries TPLs to enhance functionality and shorten development cycles. However, recent research reveals that TPLs have become the largest attack surface for Android apps, where the use of insecure TPLs can compromise both...
The vulnerability of the XWiki platform for creating collaborative web applications lies in its lack of protection for website structures. This allows attackers to execute arbitrary JavaScript code.
The vulnerability of the XWiki Platform lies in the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code remotely...
MAL-2025-5066 Malicious code in vscode-azurestaticwebapps (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6d86e1274287895eb9b8f392467eb59e1636c384bc7d0b77c9a1da853b02963 Any computer that has this package installed or running should be considered...
Malicious code in vscode-azurecontainerapps (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5ad54ec265645c2e7358384082a1b1f2385a1caa652b65c359b13681a211b30 Any computer that has this package installed or running should be considered...
How to Monetize Unity Apps: Best Practices
Unity is one of the most popular game engines for mobile and cross-platform app development. It powers millions…...
Malicious code in os-apps-ui-curvelibrary (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0119e0d30c93e83b68f00c9ab5d2f00f90d631cf3e692cab103e99c3ca6331b5 The OpenSSF Package Analysis project identified 'os-apps-ui-curvelibrary' @ 11.1.20 npm as malicious. It is considered malicious because: - The...
MAL-2025-4930 Malicious code in os-apps-ui-curvelibrary (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0119e0d30c93e83b68f00c9ab5d2f00f90d631cf3e692cab103e99c3ca6331b5 The OpenSSF Package Analysis project identified 'os-apps-ui-curvelibrary' @ 11.1.20 npm as malicious. It is considered malicious because: - The...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages lies in the incorrect limitation of file names and other resources, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to incorrect restrictions on file names and other resources. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...
[SECURITY] Fedora 42 Update: dtk6log-0.0.2-7.fc42
Simple, convenient and thread safe logger for Qt-based C++ apps...
KLA84828 OSI vulnerability in Microsoft Apps
An information disclosure vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories CVE-2025-32711 Related products Microsoft-Copilot-Studio CVE list CVE-2025-32711 critical KB list...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and the Microsoft Outlook email client arises from insufficient validation of input data, allowing an attacker to execute arbitrary code.
The vulnerabilities of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and the Microsoft Outlook email client are related to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to execute arbitrary code...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
June 10, 2025—KB5060999 (OS Builds 22621.5472 and 22631.5472)
None None...