CVE-2025-6685

ATEN eco DC Missing Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of ATEN eco DC. Authentication is required to exploit this vulnerability. The specific flaw exists within the web-based interface. The...

CVE-2025-6685 ATEN eco DC Missing Authorization Privilege Escalation Vulnerability

ATEN eco DC Missing Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of ATEN eco DC. Authentication is required to exploit this vulnerability. The specific flaw exists within the web-based interface. The...

CVE-2025-6685: Missing Authorization

ATEN eco DC Missing Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of ATEN eco DC. Authentication is required to exploit this vulnerability. The specific flaw exists within the web-based interface. The...

CVE-2025-9195

Improper input validation in firmware of some Solidigm DC Products may allow an attacker with local access to cause a Denial of Service...

CVE-2025-9195

Improper input validation in firmware of some Solidigm DC Products may allow an attacker with local access to cause a Denial of Service...

CVE-2025-9195: Improper Input Validation

Improper input validation in firmware of some Solidigm DC Products may allow an attacker with local access to cause a Denial of Service...

Linux Distros Unpatched Vulnerability : CVE-2020-25722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total doma...

Malicious code in dc-poc-test (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41379 Malicious code in dc-poc-test (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in melkikh-test-dc (npm)

The package melkikh-test-dc was found to contain malicious code...

Malicious code in melkikh-verdaccio-dc (npm)

The package melkikh-verdaccio-dc was found to contain malicious code...

MAL-2025-26170 Malicious code in melkikh-verdaccio-dc (npm)

The package melkikh-verdaccio-dc was found to contain malicious code...

MAL-2025-26169 Malicious code in melkikh-test-dc (npm)

The package melkikh-test-dc was found to contain malicious code...

Malicious code in @citrix-dc/dc-test (npm)

The package @citrix-dc/dc-test was found to contain malicious code...

PT-2025-46623

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the drm/amd/display subsystem related to cursor attribute functions. Specifically, the dc stream set cursor attributes function dereferences the strea...

Linux Distros Unpatched Vulnerability : CVE-2022-49233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Call dcstreamrelease for remove link enc assignment Why A porting error...

ATEN eco DC Missing Authorization Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of ATEN eco DC. Authentication is required to exploit this vulnerability. The specific flaw exists within the web-based interface. The issue results from the lack of validating the assigned user role when...

PT-2025-30713

Name of the Vulnerable Software and Affected Versions ATEN eco DC affected versions not specified Description The ATEN eco DC software contains a missing authorization flaw that can lead to privilege escalation. This issue allows unauthorized access and potential control over the system...

CVE-2017-20198

The Marathon UI in DC/OS 1.9.0 allows unauthenticated users to deploy arbitrary Docker containers. Due to improper restriction of volume mount configurations, attackers can deploy a container that mounts the host's root filesystem / with read/write privileges. When using a malicious Docker image,...

CVE-2017-20198 DC/OS Marathon UI < 1.9.0 Unauthenticated RCE via Docker Mount Abuse

The Marathon UI in DC/OS 1.9.0 allows unauthenticated users to deploy arbitrary Docker containers. Due to improper restriction of volume mount configurations, attackers can deploy a container that mounts the host's root filesystem / with read/write privileges. When using a malicious Docker image,...