CVE-2025-7322

CVE-2025-7322 affects the IrfanView CADImage Plugin, where DWG file parsing can trigger an out-of-bounds read due to insufficient validation of user-supplied data. The issue can allow arbitrary code execution in the context of the current process and requires user interaction (target must open a ...

CVE-2025-7312

CVE-2025-7312 : IrfanView CADImage Plugin DWG file parsing flaw where lack of input validation causes a read past end of allocated buffer, enabling code execution in the plugin process. Reported as ZDI-26398 with CVSSv3.0 score 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Exploitation requires user...

CVE-2025-7293

CVE-2025-7293 concerns the IrfanView CADImage Plugin. The vulnerability arises during the parsing of DXF files, due to insufficient validation of user-supplied data, which can cause a memory corruption condition. An attacker can leverage this to execute arbitrary code in the context of the affect...

CVE-2025-7286 IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

CVE-2025-7265

CVE-2025-7265 affects IrfanView CADImage Plugin. The vulnerability is in CGM file parsing, caused by improper validation of user-supplied data, leading to an out-of-bounds read/write and enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a...

CVE-2025-7260

The CVE-2025-7260 entry concerns IrfanView CADImage Plugin and a DXF file parsing issue. A buffer/Out‑Of‑Bounds write in the DXF parser can allow code execution in the plugin’s process. Affected component is the CADImage Plugin’s DXF/DWG parsing path; root cause is improper validation of user-sup...

CVE-2025-7248 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

CVE-2025-7255

CVE-2025-7255 affects IrfanView CADImage Plugin and stems from a DWG file parser memory corruption due to insufficient validation of user-supplied data. This could allow code execution in the plugin’s process after a user opens a malicious DWG or visits a malicious page. The vulnerability is desc...

CVE-2025-7235 IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

CVE-2025-7225 INVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

INVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of INVT HMITool. User interaction is required to exploit this vulnerability in that the target must visit a malicio...

Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2025-16777)

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. An attacker can exploit the vulnerability to elevate privileges...

CANDoSA: a Hardware Performance Counter-Based Intrusion Detection System for DoS Attacks on Automotive CAN Bus

The Controller Area Network CAN protocol, essential for automotive embedded systems, lacks inherent security features, making it vulnerable to cyber threats, especially with the rise of autonomous vehicles. Traditional security measures offer limited protection, such as payload encryption and...

Nextcloud: Deck app allowed user with "Can share" permission to modify permissions of other non-owners

The Deck app in Nextcloud allowed users with "Can share" permission to modify the permissions of other non-owners...

CVE-2025-6802

Marvell QConvergeConsole getFileFromURL Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole. Authentication is not required to exploit this vulnerability. The...

CVE-2025-6807

Marvell QConvergeConsole getDriverTmpPath Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Marvell QConvergeConsole. Authentication is not required to exploit this vulnerability. The...

CVE-2025-40737

A vulnerability has been identified in SINEC NMS All versions V4.0. The affected application does not properly validate file paths when extracting uploaded ZIP files. This could allow an attacker to write arbitrary files to restricted locations and potentially execute code with elevated privilege...

CVE-2025-6663

GStreamer H266 Codec Parsing vulnerability: parsing of H266 sei messages allows a stack-based buffer overflow leading to remote code execution. Root cause is lack of proper validation of user-supplied data length before copying to a fixed-length stack buffer. Attack requires interaction with the ...

CVE-2025-6663

GStreamer H266 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may...

CVE-2025-6802

CVE-2025-6802 affects Marvell QConvergeConsole and is tied to the getFileFromURL method, where lack of input validation permits unrestricted file uploads. The result is remote code execution with the attacker able to run code in the context of SYSTEM, and authentication is not required. Documents...

EUVD-2025-20252

Marvell QConvergeConsole saveAsText Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole. Authentication is not required to exploit this vulnerability. The specific flaw...