Lucene search
+L

7334 matches found

CNNVD
CNNVD
added 2025/08/03 12:0 a.m.4 views

Caixin News App 安全漏洞

Caixin News App is a news app application from China Caixin Caixin News. A security vulnerability exists in Caixin News App version 8.0.1, which originates from an improper export of Android application components due to misuse of the file AndroidManifest.xml in the component com.caixin.news...

5.3CVSS5.4AI score0.00123EPSS
Exploits0References5
OSV
OSV
added 2025/07/15 12:51 a.m.3 views

MAL-2025-5905 Malicious code in crypto-com-developer-platform-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3ba03d0d0285dec410f541b8e7fb12a809792658d08b88105efe3ecf507350b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References3
NVD
NVD
added 2025/07/02 8:15 p.m.6 views

CVE-2025-34090

Rejected reason: Neither filed by Chrome nor a valid security vulnerability...

Exploits0
CVE
CVE
added 2025/07/02 7:25 p.m.31 views

CVE-2025-34090

The CVE-2025-34090 entries reveal a local security bypass in Google Chrome related to the AppBound cookie encryption mechanism. Root cause: insufficient validation of COM server paths during inter-process communication allows a low-privilege attacker to hijack the COM CLSID registration used by C...

6.1AI score
Exploits0
Vulnrichment
Vulnrichment
added 2025/07/02 7:25 p.m.6 views

CVE-2025-34090

...

6.5AI score
Exploits0
Cvelist
Cvelist
added 2025/07/02 7:25 p.m.13 views

CVE-2025-34090

...

Exploits0
Positive Technologies
Positive Technologies
added 2025/07/02 12:0 a.m.7 views

PT-2025-27671 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Google Chrome affected versions not specified Description: A security bypass issue exists in the AppBound cookie encryption mechanism of Google Chrome due to insufficient validation of COM server paths during inter-process communication. This...

9.3CVSS5.8AI score
Exploits0References8
GithubExploit
GithubExploit
added 2025/06/06 2:31 p.m.1074 views

Exploit for Command Injection in Google Android

unisoc-su A method for CVE-2025-31710https://nvd.nist.gov/v...

8.4CVSS7.3AI score0.00403EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/06/06 1:1 a.m.22 views

CVE-2025-27811

A local privilege escalation in the razerelevationservice.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service...

7.8CVSS7.2AI score0.00117EPSS
Exploits0References1
NVD
NVD
added 2025/06/04 2:15 p.m.36 views

CVE-2025-27811

A local privilege escalation in the razerelevationservice.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service...

7.8CVSS0.00117EPSS
Exploits0References2
OSV
OSV
added 2025/06/04 2:15 p.m.4 views

CVE-2025-27811

A local privilege escalation in the razerelevationservice.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service...

7.8CVSS5.8AI score0.00117EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/06/04 12:0 a.m.7 views

PT-2025-23806 · Razer · Razer Synapse

Name of the Vulnerable Software and Affected Versions: Razer Synapse versions 4 through 4.0.86.2502180127 Description: A local privilege escalation issue in the razer elevation service.exe allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service...

7.8CVSS6.7AI score0.00117EPSS
Exploits0References7
Cvelist
Cvelist
added 2025/06/04 12:0 a.m.34 views

CVE-2025-27811

A local privilege escalation in the razerelevationservice.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service...

0.00117EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/06/04 12:0 a.m.6 views

CVE-2025-27811

A local privilege escalation in the razerelevationservice.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service...

7.8AI score0.00117EPSS
Exploits0References2
CVE
CVE
added 2025/06/04 12:0 a.m.82 views

CVE-2025-27811

CVE-2025-27811 concerns a local privilege escalation in Razer Synapse 4, specifically via the razer_elevation_service.exe (version 4.0.86.2502180127) that exposes a vulnerable COM interface. The issue allows a local attacker to escalate privileges through this COM interface in the target service....

7.8CVSS7.2AI score0.00117EPSS
Exploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/06/01 4:31 p.m.9 views

CVE-2024-42191

HCL Traveler for Microsoft Outlook HTMO is susceptible to a COM hijacking vulnerability which could allow an attacker to modify or replace the application with malicious content...

6.5CVSS6.8AI score0.00238EPSS
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/05/31 8:1 p.m.3 views

Malicious code in com.meta.utilities (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 592e7d2fdd81405fea876197df41d2cca8625ba879c21ace66ff6e3fd9a699e5 Any computer that has this package installed or running should be considered...

6.8AI score
Exploits0References1
NVD
NVD
added 2025/05/30 4:15 p.m.10 views

CVE-2024-42191

HCL Traveler for Microsoft Outlook HTMO is susceptible to a COM hijacking vulnerability which could allow an attacker to modify or replace the application with malicious content...

9.8CVSS0.00238EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/30 3:54 p.m.8 views

CVE-2024-42191 HCL Traveler for Microsoft Outlook (HTMO) is susceptible to COM hijacking

HCL Traveler for Microsoft Outlook HTMO is susceptible to a COM hijacking vulnerability which could allow an attacker to modify or replace the application with malicious content...

6.5CVSS6.8AI score0.00238EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/05/30 3:54 p.m.19 views

CVE-2024-42191 HCL Traveler for Microsoft Outlook (HTMO) is susceptible to COM hijacking

HCL Traveler for Microsoft Outlook HTMO is susceptible to a COM hijacking vulnerability which could allow an attacker to modify or replace the application with malicious content...

6.5CVSS0.00238EPSS
Exploits0References1
Rows per page
Query Builder