Lucene search
+L

10187 matches found

BDU FSTEC
BDU FSTEC
•added 2025/10/23 12:00 a.m.•14 views

The vulnerability of Inbox COM objects in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of Inbox COM objects in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7CVSS8.7AI score0.0035EPSS
SaveExploits0References2Affected Software24
BDU FSTEC
BDU FSTEC
•added 2025/10/23 12:00 a.m.•20 views

The vulnerability of Inbox COM objects in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of Inbox COM objects in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7CVSS8.8AI score0.0035EPSS
SaveExploits0References2Affected Software18
BDU FSTEC
BDU FSTEC
•added 2025/10/23 12:00 a.m.•20 views

The vulnerability of Inbox COM objects in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of Inbox COM objects in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7CVSS8.7AI score0.00478EPSS
SaveExploits0References2Affected Software24
BDU FSTEC
BDU FSTEC
•added 2025/10/23 12:00 a.m.•18 views

The vulnerability of Inbox COM objects in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of Inbox COM objects in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7CVSS8.8AI score0.0035EPSS
SaveExploits0References2Affected Software15
Wired Threat Level
Wired Threat Level
•added 2025/10/22 8:31 p.m.•20 views

No, ICE (Probably) Didn’t Buy Guided Missile Warheads

A federal contracting database lists an ICE payment for $61,218 with the payment code for “guided missile warheads and explosive components.” But it appears ICE simply entered the wrong code...

7.2AI score
SaveExploits0
OSV
OSV
•added 2025/10/22 12:00 a.m.•11 views

ALSA-2025:18983 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: firefox: Memory safety bugs CVE-2025-11714 thunderbird: firefox: Out of bounds read/write in a privileged process triggered by WebGL textures CVE-2025-11709 thunderbird: firefox: Cross-process information...

9.8CVSS7.2AI score0.00509EPSS
SaveExploits0References16
Snyk
Snyk
•added 2025/10/21 8:03 p.m.•18 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the Server: Components Services component. A high privileged attacker can cause the server to hang or crash repeatedly by sending specially crafted requests over the network...

6.9CVSS6.2AI score0.0058EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
•added 2025/10/21 12:00 a.m.•11 views

Real-World Usability of Vulnerability Proof-Of-Concepts: A Comprehensive Study

The Proof-of-Concept PoC for a vulnerability is crucial in validating its existence, mitigating false positives, and illustrating the severity of the security threat it poses. However, research on PoCs significantly lags behind studies focusing on vulnerability data. This discrepancy can be...

6.8AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/21 12:00 a.m.•2 views

CVE-2025-53069: Allocation of Resources Without Limits or Throttling

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Components Services. Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

4.9CVSS5.5AI score0.0058EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/10/21 12:00 a.m.•8 views

PT-2025-42966

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.43 Oracle MySQL versions 8.4.0 through 8.4.6 Oracle MySQL versions 9.0.0 through 9.4.0 Description An easily exploitable issue exists in the Server: Components Services component of MySQL Server. A...

6.8CVSS6.2AI score0.0058EPSS
SaveExploits0References76
IBM Security Bulletins
IBM Security Bulletins
•added 2025/10/20 8:06 p.m.•19 views

Security Bulletin: IBM Security QRadar Log Management AQL Plugin includes components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. These vulnerabilities have been addressed in the update. Vulnerability Details CVEID:CVE-2025-30153 DESCRIPTION: kin-openapi is a Go project for handling OpenAPI...

7.5CVSS6.8AI score0.00868EPSS
SaveExploits5Affected Software1
Microsoft KB
Microsoft KB
•added 2025/10/20 12:00 a.m.•77 views

October 20, 2025—KB5070773 (OS Builds 26200.6901 and 26100.6901) Out-of-band

None None...

6.1AI score
SaveExploits0
osv-rustsec
osv-rustsec
•added 2025/10/18 12:00 p.m.•17 views

RUSTSEC-2025-0079 `unic-ucd-hangul` is unmaintained

All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. Recommended alternatives - icunormalizer - unicode-normalization...

7AI score
SaveExploits0References3
RustSec
RustSec
•added 2025/10/18 12:00 p.m.•27 views

`unic` is unmaintained

All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. Recommended alternatives - icu - idna - unicode-bidi...

7AI score
SaveExploits0
osv-mal
osv-mal
•added 2025/10/17 12:56 p.m.•8 views

MAL-2025-48450 Malicious code in cp2-shared-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e522530df817242e07e68b2cb283eb4e70763b4ba8d248c97791fab28dc67887 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
EUVD
EUVD
•added 2025/10/17 12:56 p.m.•10 views

EUVD-2025-34876

Malicious code in cp2-shared-components npm...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/10/17 12:56 p.m.•11 views

Malicious code in cp2-shared-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e522530df817242e07e68b2cb283eb4e70763b4ba8d248c97791fab28dc67887 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/10/17 3:28 a.m.•7 views

Malicious code in @vscode-bicep-ui/components (npm)

The package @vscode-bicep-ui/components was found to contain malicious code...

7AI score
SaveExploits0
osv-mal
osv-mal
•added 2025/10/17 3:28 a.m.•9 views

MAL-2025-48475 Malicious code in @vscode-bicep-ui/components (npm)

The package @vscode-bicep-ui/components was found to contain malicious code...

7AI score
SaveExploits0
CNVD
CNVD
•added 2025/10/17 12:00 a.m.•26 views

Microsoft Inbox COM Objects Code Execution Vulnerability (CNVD-2025-25713)

Microsoft Inbox COM Objects is a built-in COM component of the Windows operating system from the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Inbox COM Objects, which can be exploited by an attacker to execute arbitrary code...

7CVSS8.4AI score0.0035EPSS
SaveExploits0References1
Rows per page
Query Builder