UBUNTU-CVE-2025-55248

Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network...

EUVD-2025-17782

Malicious code in bioql PyPI...

EUVD-2025-14050

Malicious code in bioql PyPI...

EUVD-2025-14465

Malicious code in bioql PyPI...

EUVD-2025-10833

Malicious code in bioql PyPI...

Windows Push Notifications Apps Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

Microsoft SharePoint Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

PT-2025-32812 · Microsoft · Windows Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Windows Message Queuing affected versions not specified Description: An issue exists in Windows Message Queuing related to access of a resource using an incompatible type 'type confusion'. This allows an authorized attacker to execute code ov...

CVE-2025-48808

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally...

NTFS Elevation of Privilege Vulnerability

Null pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally...

Windows SMB Server Spoofing Vulnerability

Improper certificate validation in Windows SMB allows an authorized attacker to perform spoofing over a network...

CVE-2024-45505

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache HertzBeat incubating. This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat incubating: before 1.6.1. Users are recommended to upgrade to versi...

CVE-2023-33235

MXsecurity version 1.0 is vulnearble to command injection vulnerability. This vulnerability has been reported in the SSH CLI program, which can be exploited by attackers who have gained authorization privileges. The attackers can break out of the restricted shell and subsequently execute arbitrar...

CVE-2025-29969

Time-of-check time-of-use toctou race condition in Windows Fundamentals allows an authorized attacker to execute code over a network...

Visual Studio Code Elevation of Privilege Vulnerability

Improper access control in Visual Studio Code allows an authorized attacker to elevate privileges locally...

PT-2025-15543 · Microsoft · Windows Universal Plug/Play (Upnp) Device Host +1

Name of the Vulnerable Software and Affected Versions: Windows Universal Plug and Play UPnP Device Host affected versions not specified Description: The issue concerns sensitive data storage in improperly locked memory, allowing an authorized attacker to elevate privileges over a network. This ca...

CVE-2024-41151

Deserialization of Untrusted Data vulnerability in Apache HertzBeat. This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat: before 1.6.1. Users are recommended to upgrade to version 1.6.1, which fixes the issue...

CVE-2024-41151

CVE-2024-41151 : Apache HertzBeat (prior to 1.6.1) contains a deserialization of untrusted data vulnerability. The issue can be exploited by authorized users to achieve code execution, with a CVSSv3.1 base score of 8.8 (HIGH) and network access requiring low privileges and no user interaction. Th...

CVE-2024-41151 Apache HertzBeat: RCE by notice template injection vulnerability

Deserialization of Untrusted Data vulnerability in Apache HertzBeat. This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat: before 1.6.1. Users are recommended to upgrade to version 1.6.1, which fixes the issue...

CVE-2024-45505

CVE-2024-45505 concerns Apache HertzBeat (incubating) prior to 1.6.1, where an improper neutralization of special elements enables a Command Injection. The vulnerability affects execution paths that process constructed commands, allowing an attacker with network access (and with low privileges) t...