12809 matches found
AVEVA PI Data Archive security vulnerabilities
AVEVA PI Data Archive is a system for storing, managing and accessing historical industrial process data from AVEVA UK. A security vulnerability exists in the AVEVA PI Data Archive that stems from an uncaught exception that could lead to a denial of service and data loss...
EulerOS 2.0 SP12 : libarchive (EulerOS-SA-2025-1591)
According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or...
EulerOS 2.0 SP12 : libarchive (EulerOS-SA-2025-1592)
According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or...
SUSE CVE-2025-5916
A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive WARC file that claims to have more than INT64MAX - 4 content bytes. An attacker could craft a malicious WARC archive to induce this overflow,...
PT-2025-25354
Name of the Vulnerable Software and Affected Versions AVEVA PI Data Archive versions 2018 SP3 Patch 4 and earlier AVEVA PI Data Archive version 2023 AVEVA PI Data Archive version 2023 Patch 1 AVEVA PI Server versions 2018 SP3 Patch 6 and earlier AVEVA PI Server version 2023 AVEVA PI Server versio...
CVE-2025-5916
A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive WARC file that claims to have more than INT64MAX - 4 content bytes. An attacker could craft a malicious WARC archive to induce this overflow,...
AZL-63863 CVE-2025-5916 affecting package libarchive for versions less than 3.6.1-7
A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive WARC file that claims to have more than INT64MAX - 4 content bytes. An attacker could craft a malicious WARC archive to induce this overflow,...
DEBIAN-CVE-2025-5914
A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enablin...
UBUNTU-CVE-2025-5914
A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enablin...
CVE-2025-5916
CVE-2025-5916 – libarchive integer overflow (WARC payloads) A vulnerability in libarchive triggers an integer overflow when processing a Web Archive (WARC) file that claims more than INT64_MAX − 4 content bytes. An attacker could craft such a WARC to cause memory corruption or a denial-of-service...
CVE-2025-5916
A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive WARC file that claims to have more than INT64MAX - 4 content bytes. An attacker could craft a malicious WARC archive to induce this overflow,...
CVE-2025-4517
Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall or TarFile.extract using the filter= parameter with a value of...
CVE-2024-36486
A privilege escalation vulnerability exists in the virtual machine archive restoration functionality of Parallels Desktop for Mac version 20.1.1 55740. When an archived virtual machine is restored, the prlvmarchiver tool decompresses the file and writes the content back to its original location...
Parallels Desktop security vulnerabilities
Parallels Desktop is a suite of virtual machine software for the macOS platform from US-based Parallels, Inc. A security vulnerability exists in Parallels Desktop for Mac version 20.1.1, which stems from a hard-link issue in the Virtual Machine Archive Recovery feature that could lead to elevated...
PT-2025-23596
Name of the Vulnerable Software and Affected Versions Parallels Desktop for Mac version 20.1.1 55740 Description A privilege escalation issue exists in the virtual machine archive restoration functionality. When an archived virtual machine is restored, the prl vmarchiver tool decompresses the fil...
Hotfix update for Exchange Server 2019 CU14 HU5: May 29, 2025 (KB5057652)
None None...
Hotfix update for Exchange Server 2019 CU15 HU2: May 29, 2025 (KB5057651)
None None...
📄 Windows File Explorer NTLM Hash Disclosure
Windows File Explorer on Microsoft Windows 11 23H2 proof of concept NTLM hash disclosure exploit. !/usr/bin/env python3 Exploit Title: Windows File Explorer Windows 11 23H2 - NTLM Hash Disclosure Exploit Author: Mohammed Idrees Banyamer Twitter/GitHub:https://github.com/mbanyamer Date: 2025-05-27...
