Mitsubishi Electric GX Works3 and Motion Control Settings

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modify part of the executable module in memory, and thereby allows the attacker to view, tamper with,...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38435)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from the setParentalRules function not properly implementing access control mechanisms. Attackers can exploit this vulnerability by sending...

WordPress plugin BP Better Messages has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

CVE-2026-35533

The CVE-2026-35533 issue affects mise (dev tools manager). From 2026.2.18–2026.4.5, mise loads trust-control settings from a local project .mise.toml before the trust check runs. An attacker who can place a malicious .mise.toml in a repository can cause that file to be treated as trusted and reac...

CVE-2021-22454

A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause core dump...

CVE-2021-47722: Cross-Site Request Forgery (CSRF)

Zucchetti Axess CLOKI Access Control 1.64 contains a cross-site request forgery vulnerability that allows attackers to manipulate access control settings without user interaction. Attackers can craft malicious web pages with hidden forms to disable or modify access control parameters by tricking...

Zucchetti Axess CLOKI Access Control Cross-Site Request Forgery Vulnerability

Zucchetti Axess CLOKI Access Control is an automation management software in access control terminals from Zucchetti, Italy. A cross-site request forgery vulnerability exists in Zucchetti Axess CLOKI Access Control version 1.64, which stems from a lack of validation of access control settings and...

EUVD-2018-17733

Malware in sbrugna...

EUVD-2018-18984

Malware in sbrugna...

EUVD-2018-11999

Malware in sbrugna...

EUVD-2019-2678

Malware in sbrugna...

EUVD-2025-14746

Malicious code in bioql PyPI...

EUVD-2021-28941

Malicious code in bioql PyPI...

EUVD-2023-24699

Malicious code in bioql PyPI...

EUVD-2024-19387

Malicious code in bioql PyPI...

EUVD-2025-27348

Malicious code in bioql PyPI...

CVE-2025-54913

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows UI XAML Maps MapControlSettings allows an authorized attacker to elevate privileges locally...

CVE-2025-54913 Windows UI XAML Maps MapControlSettings Elevation of Privilege Vulnerability

...

CVE-2025-54913

CVE-2025-54913 affects Windows UI XAML Maps MapControlSettings. It is a race condition caused by concurrent execution using a shared resource with improper synchronization, allowing an authorized attacker to locally elevate privileges. Reported CVSS base score ~7.8 (HIGH) with LOCAL attack vector...

Windows UI XAML Maps MapControlSettings Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows UI XAML Maps MapControlSettings allows an authorized attacker to elevate privileges locally...