7351 matches found
CVE-2025-12305 quequnlong shiyi-blog Job SysJobController.java deserialization
A vulnerability was found in quequnlong shiyi-blog up to 1.2.1. This impacts an unknown function of the file src/main/java/com/mojian/controller/SysJobController.java of the component Job Handler. The manipulation results in deserialization. The attack can be executed remotely. The exploit has be...
Malwarebytes for Teams 安全漏洞
Malwarebytes for Teams is a multi-terminal protection suite from US-based Malwarebytes, Inc. A security vulnerability exists in Malwarebytes for Teams version 1.0.990 and earlier, which stems from a flaw in the COM interface that could lead to elevated privileges...
CVE-2021-43768
In Malwarebytes For Teams v.1.0.990 and before and fixed in v.1.0.1003 and later a privilege escalation can occur via the COM interface running in mbamservice.exe...
CVE-2021-43768
In Malwarebytes For Teams v.1.0.990 and before and fixed in v.1.0.1003 and later a privilege escalation can occur via the COM interface running in mbamservice.exe...
PT-2025-43621
Name of the Vulnerable Software and Affected Versions Malwarebytes For Teams versions prior to 1.0.1003 Description A privilege escalation can occur through the COM interface within the mbamservice.exe process. Recommendations Update Malwarebytes For Teams to version 1.0.1003 or later...
CVE-2021-43768
In Malwarebytes For Teams v.1.0.990 and before and fixed in v.1.0.1003 and later a privilege escalation can occur via the COM interface running in mbamservice.exe...
EUVD-2025-34862
Malicious code in monzo-com npm...
Malicious code in monzo-com (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39349f1d7e9c11249daccdfa4fd66aece003c79426359c49af2c3d56c341d195 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48449 Malicious code in monzo-com (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39349f1d7e9c11249daccdfa4fd66aece003c79426359c49af2c3d56c341d195 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Microsoft Inbox COM Objects Code Execution Vulnerability
Microsoft Inbox COM Objects is a built-in COM component of the Windows operating system from the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Inbox COM Objects, which can be exploited by an attacker to execute arbitrary code on a system...
CVE-2025-58725
Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally...
CVE-2025-58734
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-9437
A security issue exists within the Studio 5000 Logix Designer add-on profile AOP for the ArmorStart Classic distributed motor controller, resulting in denial-of-service. This vulnerability is possible due to the input of invalid values into Component Object Model COM methods...
CVE-2025-59282
Concurrent execution using shared resource with improper synchronization 'race condition' in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-58738
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-58735
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-58734
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-58731
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...