108 matches found
CVE-2026-89497
A flaw was found in the Linux kernel's Orange File System orangefs client. The orangefspreparecdmarray function incorrectly calculates the buffer size for client debug keywords when an entry starts with a space. This can lead to a buffer overflow, allowing data to be written beyond the intended...
CVE-2025-67015
Incorrect access control in Comtech EF Data CDM-625 / CDM-625A Advanced Satellite Modem with firmware v2.5.1 allows attackers to change the Administrator password and escalate privileges via sending a crafted POST request to /Forms/adminaccess1...
CVE-2025-67015: Improper Access Control
Incorrect access control in Comtech EF Data CDM-625 / CDM-625A Advanced Satellite Modem with firmware v2.5.1 allows attackers to change the Administrator password and escalate privileges via sending a crafted POST request to /Forms/adminaccess1...
PT-2025-53595
Name of the Vulnerable Software and Affected Versions Comtech EF Data CDM-625 / CDM-625A Advanced Satellite Modem version 2.5.1 Description A flaw in access control within the Comtech EF Data CDM-625 / CDM-625A Advanced Satellite Modem firmware allows attackers to modify the Administrator passwor...
CVE-2025-67015
The Comtech EF Data CDM-625 / CDM-625A Advanced Satellite Modem with firmware v2.5.1 is vulnerable to an incorrect access control flaw. An attacker can send a crafted POST request to the /Forms/admin_access_1 endpoint to change the Administrator password and escalate privileges . Proof-of-concept...
CVE-2025-48632
In setDisplayName of AssociationRequest.java, there is a possible way to cause CDM associations to persist after the user has disassociated them due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is n...
CVE-2025-48632
In setDisplayName of AssociationRequest.java, there is a possible way to cause CDM associations to persist after the user has disassociated them due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is n...
CVE-2025-48632
In setDisplayName of AssociationRequest.java, there is a possible way to cause CDM associations to persist after the user has disassociated them due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is n...
CVE-2025-48632: Improper Input Validation
In setDisplayName of AssociationRequest.java, there is a possible way to cause CDM associations to persist after the user has disassociated them due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is n...
PT-2025-43505
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems due to insufficient input validation. This issue may allow an attacker to elevate their privileges. Specifically, the...
EUVD-2018-17530
Malware in sbrugna...
EUVD-2016-2413
Malware in sbrugna...
EUVD-2016-3910
Malware in sbrugna...
EUVD-2025-23801
Malicious code in bioql PyPI...
Google Android elevation of privilege vulnerability (CNVD-2025-23026)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that is caused by a logic error in the setDisplayName function in AssociationRequest.java that causes the application to retain the CDM association. An...
CVE-2025-48522
In setDisplayName of AssociationRequest.java, there is a possible way for an app to retain CDM association due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48522
In setDisplayName of AssociationRequest.java, there is a possible way for an app to retain CDM association due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2025-36049
Name of the Vulnerable Software and Affected Versions: AssociationRequest.java affected versions not specified Description: A logic error in the setDisplayName function within the AssociationRequest.java file may allow an application to retain CDM association. This could potentially lead to local...
CVE-2025-48522: Protection Mechanism Failure
In setDisplayName of AssociationRequest.java, there is a possible way for an app to retain CDM association due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...