PT-2025-4254 · Oracle · Oracle Analytics Desktop

Name of the Vulnerable Software and Affected Versions: Oracle Analytics Desktop versions prior to 8.1.0 Description: The issue is related to a vulnerability in the Oracle Analytics Desktop product, specifically in the Install component. This vulnerability can be easily exploited by a low-privileg...

The vulnerability of the DWM Core Library in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the DWM Core Library in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Remote Desktop Gateway (RD Gateway) for Windows Server operating systems allows a hacker to trigger a service failure.

The vulnerability of Remote Desktop Gateway RD Gateway for Windows Server operating systems is related to data type mixing errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of Remote Desktop Services RDS for Windows operating systems lies in the storage of confidential data in improperly locked memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2025-0430

Belledonne Communications Linphone-Desktop is vulnerable to a NULL Dereference vulnerability, which could allow a remote attacker to create a denial-of-service condition...

CVE-2025-0430 Belledonne Communications Linphone-Desktop NULL Pointer Dereference

Belledonne Communications Linphone-Desktop is vulnerable to a NULL Dereference vulnerability, which could allow a remote attacker to create a denial-of-service condition...

CVE-2025-0430 Belledonne Communications Linphone-Desktop NULL Pointer Dereference

Belledonne Communications Linphone-Desktop is vulnerable to a NULL Dereference vulnerability, which could allow a remote attacker to create a denial-of-service condition...

CVE-2025-0430

CVE-2025-0430 concerns Belledonne Communications Linphone-Desktop with a NULL pointer dereference that could allow a remote attacker to cause a denial-of-service. Connected sources confirm the vulnerability type and impact (DoS) but do not publicly specify affected versions or a fixed/mitigation ...

Zoom Workplace Desktop App < 6.2.5 Escalation of Privilege (ZSB-25004)

The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.2.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-25004 advisory. - Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduc...

Zoom Workplace Desktop App < 6.2.5 DoS (ZSB-25002)

The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.2.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-25002 advisory. - Out-of-bounds write in the Zoom Workplace App for Linux before version 6.2.5 may allow an unauthorized user to conduct...

Zoom Workplace Desktop App < 6.2.5 Out-of-bounds Write (ZSB-25003)

The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.2.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-25003 advisory. - Out-of-bounds write in some Zoom Workplace Apps may allow an authorized user to conduct a loss of integrity via networ...

Zoom Workplace Desktop App < 6.2.10 DoS (ZSB-25005)

The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.2.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25005 advisory. - Symlink following in the installer for Zoom Workplace app for macOS before 6.2.10 may allow an authenticated user to...

Linphone Desktop 代码问题漏洞

Linphone Desktop is an open source software phone from Belledonne Communications for voice and video over IP calls and instant messaging. A code issue vulnerability exists in Linphone Desktop version 5.2.6, which stems from a null pointer reference vulnerability that could allow a remote attacker...

Zoom Workplace Desktop App < 6.2.10 Privilege Escalation (ZSB-25006)

The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.2.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25006 advisory. - Type confusion in the Zoom Workplace App for Linux before 6.2.10 may allow an authorized user to conduct an escalatio...

openSUSE 15 Security Update : opera (openSUSE-SU-2025:0012-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2025:0012-1 advisory. - Update to 116.0.5366.21 CHR-9904 Update Chromium on desktop-stable-131-5366 to 131.0.6778.86 DNA-119581 Crash at views::View::ConvertPointToTarget...

The vulnerability of the Remote Desktop Gateway (RD Gateway) for Microsoft Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of the Remote Desktop Gateway RD Gateway for Microsoft Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Bruno IDE Desktop Command Injection Vulnerability

Bruno IDE Desktop prior to 1.29.0 Author: Rodolfo Tavares Tempest Security Intelligence - Recife, Pernambuco - Brazil ===== Table of Contents ================================================== Overview Detailed Description Timeline of Disclosure Thanks & Acknowledgements References =====...

CVE-2025-23040

GitHub Desktop is an open-source Electron-based GitHub app designed for git development. An attacker convincing a user to clone a repository directly or through a submodule can allow the attacker access to the user's credentials through the use of maliciously crafted remote URL. GitHub Desktop...

CVE-2025-23040

CVE-2025-23040 affects GitHub Desktop prior to 3.4.12. A maliciously crafted remote URL can cause the credential request from Git to be misinterpreted by GitHub Desktop via the git-credential protocol, leading to exfiltration of credentials (GitHub username, OAuth tokens, or other remote-host cre...

CVE-2025-23040 Maliciously crafted remote URLs could lead to credential leak in GitHub Desktop

GitHub Desktop is an open-source Electron-based GitHub app designed for git development. An attacker convincing a user to clone a repository directly or through a submodule can allow the attacker access to the user's credentials through the use of maliciously crafted remote URL. GitHub Desktop...