CVE-2024-33059

CVE-2024-33059 involves memory corruption in Qualcomm chipsets caused by processing frame command IOCTL calls. Reported impact per metrics includes High confidentiality, integrity, and availability with Local, Low-Complexity, Low-Privileges requirements (no user interaction). No exploitation deta...

CVE-2024-33059 Use After Free in Computer Vision

Memory corruption while processing frame command IOCTL calls...

CVE-2024-33059 Use After Free in Computer Vision

Memory corruption while processing frame command IOCTL calls...

CVE-2024-33055 Use After Free in Computer Vision

Memory corruption while invoking IOCTL calls to unmap the DMA buffers...

CVE-2024-33055 Use After Free in Computer Vision

Memory corruption while invoking IOCTL calls to unmap the DMA buffers...

CVE-2024-33055

CVE-2024-33055 describes memory corruption occurring when invoking IOCTL calls to unmap DMA buffers in Qualcomm chipsets. Connected sources confirm the issue affects memory handling in the DMA buffer unmapping path and classify the impact at the memory-corruption level; several advisories referen...

CVE-2024-33041 Use of Out-of-range Pointer Offset in Computer Vision

Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,...

CVE-2024-12970: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TUBITAK BILGEM Pardus OS My Computer allows OS Command Injection. This issue affects Pardus OS My Computer: before 0.7.2...

TUBITAK BILGEM Pardus OS: Operating System Command Injection Vulnerability

TUBITAK BILGEM Pardus OS My Computer is a UI from TUBITAK BILGEM for information and management of disks on a computer. An operating system command injection vulnerability exists in TUBITAK BILGEM Pardus OS My Computer versions prior to 0.7.2, which stems from improper neutralization of special...

PT-2025-1982

Name of the Vulnerable Software and Affected Versions Pardus OS My Computer versions prior to 0.7.2 Description The issue is related to an OS Command Injection vulnerability, which allows improper neutralization of special elements used in an OS command. This can lead to OS Command Injection. The...

Malicious code in lambda-demo (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70fa7a653e95d7b948968c1605f557ae4f569e78a26d160f8768a44bca1b6f5b Any computer that has this package install...

Malicious code in ethereumvulncontracthandler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0487271e4934f2a50132c6a3c30213e5a7c8fa71aa50f9d743f14a4cd00cc67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babel-preset-app (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c7766597c4e69a6b6b08fb89e552f8cff845299eb1b612ef107e5f3fcb96156 Any computer that has this package install...

CVE-2024-56061

Missing Authorization vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Privilege Escalation.This issue affects RepairBuddy: from n/a through = 3.8119...

CVE-2024-56061

CVE-2024-56061: Missing Authorization in RepairBuddy CRM WordPress plugin (Webful Creations Computer Repair Shop) enables Privilege Escalation via account takeover for authenticated users. Affected: CRM WordPress Plugin – RepairBuddy, versions up to 3.8119 (per CVE record). Root cause: Missing au...

CVE-2024-13040

The QOCA aim from Quanta Computer has an Authorization Bypass Through User-Controlled Key vulnerability. By controlling the user ID parameter, remote attackers with regular privileges could access certain features as any user, modify any user's account information and privileges, leading to...

CVE-2024-13040

The QOCA aim from Quanta Computer has an Authorization Bypass Through User-Controlled Key vulnerability. By controlling the user ID parameter, remote attackers with regular privileges could access certain features as any user, modify any user's account information and privileges, leading to...

CVE-2024-13040 Quanta Computer QOCA aim - Authorization Bypass

The QOCA aim from Quanta Computer has an Authorization Bypass Through User-Controlled Key vulnerability. By controlling the user ID parameter, remote attackers with regular privileges could access certain features as any user, modify any user's account information and privileges, leading to...

CVE-2024-13040 Quanta Computer QOCA aim - Authorization Bypass

The QOCA aim from Quanta Computer has an Authorization Bypass Through User-Controlled Key vulnerability. By controlling the user ID parameter, remote attackers with regular privileges could access certain features as any user, modify any user's account information and privileges, leading to...

CVE-2024-13040

CVE-2024-13040 details (Quanta Computer QOCA aim): A vulnerability titled “Authorization Bypass Through User-Controlled Key” arises from allowing manipulation of the user ID parameter. Remote attackers with regular privileges could access features as any user, modify any user’s account informatio...