Lucene search
+L

2786 matches found

Packet Storm News
Packet Storm News
•added 2025/06/21 12:00 a.m.•15 views

Detecting Hard-Coded Credentials in Software Repositories Via LLMs

Software developers frequently hard-code credentials such as passwords, generic secrets, private keys, and generic tokens in software repositories, even though it is strictly advised against due to the severe threat to the security of the software. These credentials create attack surfaces...

7.1AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2025/06/21 12:00 a.m.•16 views

Exploiting Efficiency Vulnerabilities in Dynamic Deep Learning Systems

The growing deployment of deep learning models in real-world environments has intensified the need for efficient inference under strict latency and resource constraints. To meet these demands, dynamic deep learning systems DDLSs have emerged, offering input-adaptive computation to optimize runtim...

7.2AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2025/06/21 12:00 a.m.•18 views

A Comprehensive Survey on Underwater Acoustic Target Positioning and Tracking: Progress, Challenges, and Perspectives

Underwater target tracking technology plays a pivotal role in marine resource exploration, environmental monitoring, and national defense security. Given that acoustic waves represent an effective medium for long-distance transmission in aquatic environments, underwater acoustic target tracking h...

6.9AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2025/06/20 12:00 a.m.•28 views

Navigating the Deep: Signature Extraction on Deep Neural Networks

Neural network model extraction has emerged in recent years as an important security concern, as adversaries attempt to recover a network's parameters via black-box queries. A key step in this process is signature extraction, which aims to recover the absolute values of the network's weights laye...

6.9AI score
SaveExploits0
OSV
OSV
•added 2025/06/17 9:15 p.m.•19 views

CVE-2025-30642

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial of service DoS situation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploi...

5.5CVSS6AI score0.00169EPSS
SaveExploits0References2
OSV
OSV
•added 2025/06/17 9:15 p.m.•20 views

CVE-2025-30640

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

7.8CVSS6AI score0.00189EPSS
SaveExploits0References2
OSV
OSV
•added 2025/06/17 9:15 p.m.•20 views

CVE-2025-30641

A link following vulnerability in the anti-malware solution portion of Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in...

7.8CVSS6AI score0.0019EPSS
SaveExploits0References2
NVD
NVD
•added 2025/06/17 9:15 p.m.•22 views

CVE-2025-30641

A link following vulnerability in the anti-malware solution portion of Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in...

7.8CVSS0.0019EPSS
SaveExploits0References2
NVD
NVD
•added 2025/06/17 9:15 p.m.•42 views

CVE-2025-30642

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial of service DoS situation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploi...

5.5CVSS0.00169EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/06/17 8:11 p.m.•8 views

CVE-2025-30642

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial of service DoS situation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploi...

5.5CVSS7.2AI score0.00169EPSS
SaveExploits0References2
CVE
CVE
•added 2025/06/17 8:11 p.m.•52 views

CVE-2025-30642

CVE-2025-30642 concerns a local DoS in Trend Micro Deep Security Agent 20.0 caused by a link-following issue in the Damage Cleanup Engine. An attacker who can run code with low privileges on the target can trigger a denial of service by creating a junction that leads to file deletion, according t...

5.5CVSS5.6AI score0.00169EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/06/17 8:11 p.m.•28 views

CVE-2025-30642

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial of service DoS situation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploi...

5.5CVSS0.00169EPSS
SaveExploits0References2
CVE
CVE
•added 2025/06/17 8:10 p.m.•53 views

CVE-2025-30641

CVE-2025-30641 is a local privilege-escalation in Trend Micro Deep Security Deep Security Agent’s Anti-Malware component (20.0). The flaw arises from a link-following issue that can be exploited by a local attacker who already has low-privilege code execution to escalate privileges, potentially v...

7.8CVSS7.7AI score0.0019EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/06/17 8:10 p.m.•21 views

CVE-2025-30641

A link following vulnerability in the anti-malware solution portion of Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in...

7.8CVSS0.0019EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/06/17 8:10 p.m.•5 views

CVE-2025-30640

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

7.8CVSS7.4AI score0.00189EPSS
SaveExploits0References2
CVE
CVE
•added 2025/06/17 8:10 p.m.•55 views

CVE-2025-30640

CVE-2025-30640 is a confirmed local privilege escalation affecting Trend Micro Deep Security 20.0 agents, attributed to a link-following flaw in the Anti-Malware/Deep Security Platform. The root cause involves abusing symbolic links to escalate privileges, with an attacker needing to run low-priv...

7.8CVSS7.7AI score0.00189EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/06/17 8:10 p.m.•62 views

CVE-2025-30640

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

7.8CVSS0.00189EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/06/17 12:00 a.m.•19 views

Trend Micro Deep Security 后置链接漏洞

Trend Micro Deep Security is a server deep security protection system client from Trend Micro. A security vulnerability exists in Trend Micro Deep Security version 20.0 that stems from a link following issue in the anti-malware component that could lead to elevated privileges...

7.8CVSS6.5AI score0.0019EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/06/17 12:00 a.m.•17 views

Trend Micro Deep Security 后置链接漏洞

Trend Micro Deep Security is a server deep security system client from Trend Micro. A security vulnerability exists in Trend Micro Deep Security version 20.0 that stems from a link-following issue that could lead to elevated privileges...

7.8CVSS6.5AI score0.00189EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/17 12:00 a.m.•9 views

CVE-2025-30642: Improper Link Resolution Before File Access

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial of service DoS situation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploi...

5.5CVSS6.1AI score0.00169EPSS
SaveExploits0References1
Rows per page
Query Builder