PT-2025-15157 · Arkui · Arkui

Name of the Vulnerable Software and Affected Versions: ArkUI framework affected versions not specified Description: The issue is related to an exception capture failure vulnerability in the SVG parsing module of the ArkUI framework. Successful exploitation of this vulnerability may affect...

PT-2025-15158 · Arkui · Arkui

Name of the Vulnerable Software and Affected Versions: ArkUI framework affected versions not specified Description: The issue is related to an exception capture failure vulnerability in the SVG parsing module of the ArkUI framework. Successful exploitation of this vulnerability may affect...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from an SVG parsing module exception capture failure, and can be exploited by an attacker to...

CVE-2024-58112: Uncaught Exception

Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-58111: Uncaught Exception

Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability...

Advanced XSS Exploitation - User Screenshot

In this paper, the author teaches advanced persistent cross site scripting techniques that can be used to take screenshots of the client's screen and send them to an external server. The paper is primarily focusing on a pentesting perspective but also discusses mitigations. Written in Brazilian...

CVE-2025-27095: Incorrect Privilege Assignment

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.8.0 and 3.10.18, an attacker with a low-privileged account can access the Kubernetes session feature and manipulate the kubeconfig file to redirect API requests to an external server...

CVE-2025-2859

An attacker with network access, could capture traffic and obtain user cookies, allowing the attacker to steal the active user session and make changes to the device via web, depending on the privileges obtained by the user...

CVE-2023-52981

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix request ref counting during error capture & debugfs dump When GuC support was added to error capture, the reference counting around the request object was broken. Fix it up. The context based search manages the...

CVE-2025-2859

An attacker with network access, could capture traffic and obtain user cookies, allowing the attacker to steal the active user session and make changes to the device via web, depending on the privileges obtained by the user...

SUSE CVE-2023-52981

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix request ref counting during error capture & debugfs dump When GuC support was added to error capture, the reference counting around the request object was broken. Fix it up. The context based search manages the...

Arteche saTECH BCU 授权问题漏洞

The Arteche saTECH BCU is a flight room control unit from Arteche. An authorization issue vulnerability exists in the Arteche saTECH BCU version 2.1.3, which originates from an attacker being able to capture traffic and obtain a user cookie to steal active sessions and change the device based on...

maccms10 安全漏洞

maccms10 is magicblack open source a set of PHP + MYSQL environment running under the perfect and powerful rapid site building system. A security vulnerability exists in maccms10 version v2025.1000.4047, which originates from a server-side request forgery in the Capture Custom Interface feature...

CVE-2025-2859: Improper Authentication

An attacker with network access, could capture traffic and obtain user cookies, allowing the attacker to steal the active user session and make changes to the device via web, depending on the privileges obtained by the user...

AZL-68952 CVE-2023-52981 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix request ref counting during error capture & debugfs dump When GuC support was added to error capture, the reference counting around the request object was broken. Fix it up. The context based search manages the...

DEBIAN-CVE-2023-52981

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix request ref counting during error capture & debugfs dump When GuC support was added to error capture, the reference counting around the request object was broken. Fix it up. The context based search manages the...

CVE-2023-52981

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix request ref counting during error capture & debugfs dump When GuC support was added to error capture, the reference counting around the request object was broken. Fix it up. The context based search manages the...

UBUNTU-CVE-2023-52981

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix request ref counting during error capture & debugfs dump When GuC support was added to error capture, the reference counting around the request object was broken. Fix it up. The context based search manages the...

CVE-2023-52981 drm/i915: Fix request ref counting during error capture & debugfs dump

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix request ref counting during error capture & debugfs dump When GuC support was added to error capture, the reference counting around the request object was broken. Fix it up. The context based search manages the...

CVE-2023-52981

The CVE-2023-52981 issue affects the Linux kernel DRM/I915: the error-capture and debugfs dump paths had broken request reference counting when GuC submission was involved. The fixes adjust reference counting for the context-based search and the execlist-based search, ensuring proper get/put sema...