EUVD-2025-10278

Malicious code in bioql PyPI...

EUVD-2024-53559

Malicious code in bioql PyPI...

EUVD-2024-49965

Malicious code in bioql PyPI...

EUVD-2023-32047

Malicious code in bioql PyPI...

EUVD-2024-22391

Malicious code in bioql PyPI...

CVE-2025-34194: Improper Link Resolution Before File Access

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 25.1.102 and Application versions prior to 25.1.1413 Windows client deployments contain an insecure temporary-file handling vulnerability in the PrinterInstallerClient components. The software creates files as NT...

CVE-2025-57625: Incorrect Default Permissions

CYRISMA Sensor before 444 for Windows has an Insecure Folder and File Permissions vulnerability. A low-privileged user can abuse these issues to escalate privileges and execute arbitrary code in the context of NT AUTHORITY\SYSTEM by replacing DataSpotliteAgent.exe or any other binaries called by...

CVE-2025-58323: Incorrect Privilege Assignment

NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by executing arbitrary files due to improper privilege checks...

CVE-2025-58322

NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by invoking arbitrary DLLs due to improper privilege checks...

CVE-2025-58322: Incorrect Privilege Assignment

NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by invoking arbitrary DLLs due to improper privilege checks...

PT-2025-34971

Name of the Vulnerable Software and Affected Versions: NAVER MYBOX Explorer for Windows versions prior to 3.0.8.133 Description: NAVER MYBOX Explorer for Windows is susceptible to local privilege escalation. A local attacker can execute arbitrary commands and escalate privileges to NT...

CVE-2025-34153

CVE-2025-34153 affects Hyland OnBase versions prior to 17.0.2.87. The vulnerability arises from insecure deserialization on the .NET Remoting TCP channel, where a listener on port 6031 (TimerServer, Hyland.Core.Timers.dll) deserializes untrusted input via BinaryFormatter, allowing unauthenticated...

CVE-2025-40746: Improper Input Validation

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V3.2. Affected products do not properly validate input for a backup script. This could allow an authenticated remote attacker with high privileges in the application to execute arbitrary code with 'NT...

CVE-2025-5491: Improper Privilege Management

Acer ControlCenter contains Remote Code Execution vulnerability. The program exposes a Windows Named Pipe that uses a custom protocol to invoke internal functions. However, this Named Pipe is misconfigured, allowing remote users with low privileges to interact with it and access its features. One...

The vulnerability of the Autodesk On-Demand Install Services (AdODIS) software update service allows a hacker to elevate their privileges to the level of NT AUTHORITY/SYSTEM.

The vulnerability of the Autodesk On-Demand Install Services AdODIS software update service is related to the use of an unreliable search path. Exploiting this vulnerability can allow an attacker to elevate their privileges to the NT AUTHORITY/SYSTEM level by loading a specially crafted binary fi...

Autodesk Installer 安全漏洞

Autodesk installer is an installer program from Autodesk USA. A security vulnerability exists in Autodesk Installer that stems from the use of an untrusted search path that could result in elevation of privilege to NT AUTHORITY/SYSTEM...

CVE-2025-5335: Untrusted Search Path

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk Installer application. Exploitation of this vulnerability may lead to code execution...

CVE-2024-23774

An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An unquoted Windows search path vulnerability exists in the KSchedulerSvc.exe and AMPTools.exe components. This allows local attackers to execute code of their choice with NT Authority\SYSTEM privileges...

CVE-2024-23772

An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An Arbitrary file create vulnerability exists in the KSchedulerSvc.exe, KUserAlert.exe, and Runkbot.exe components. This allows local attackers to create any file of their choice with NT Authority\SYSTEM privileges...

CVE-2023-3267

When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field. The username is passed without sanitization into CMD running as NT/Authority System. An authenticated attacker can leverage this vulnerability to execute arbitrary code with...