CVE-2025-54519

A DLL hijacking vulnerability in Doc Nav could allow a local attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2026-25676

The installer of M-Track Duo HD version 1.0.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrator privileges...

CVE-2026-25676

CVE-2026-25676 affects the M-Track Duo HD installer (version 1.0.0). The issue arises from insecure DLL search path handling, which may allow loading of arbitrary DLLs and lead to code execution with administrator privileges. The description does not specify affected products beyond this installe...

CVE-2026-25676

The installer of M-Track Duo HD version 1.0.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrator privileges...

CVE-2026-25676

The installer of M-Track Duo HD version 1.0.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrator privileges...

PT-2026-7878

A DLL hijacking vulnerability in Doc Nav could allow a local attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

PT-2026-7817

The installer of M-Track Duo HD version 1.0.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrator privileges...

Resource-Aware Deployment Optimization for Collaborative Intrusion Detection in Layered Networks

Collaborative Intrusion Detection Systems CIDS are increasingly adopted to counter cyberattacks, as their collaborative nature enables them to adapt to diverse scenarios across heterogeneous environments. As distributed critical infrastructure operates in rapidly evolving environments, such as...

The vulnerability of the CS-Cart Multi-Vendor software for electronic shopping platforms lies in the insufficient control over resources with dynamic management. This allows a hacker to execute arbitrary code.

The vulnerability of the CS-Cart Multi-Vendor software for electronic shopping platforms is related to insufficient control over resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

M-Audio M-Track Duo HD 代码问题漏洞

The M-Audio M-Track Duo HD is an entry-level sound card device from M-Audio. The version 1.0.0 of the M-Audio M-Track Duo HD has a code vulnerability. This vulnerability stems from issues with the DLL search path in the installer, which may allow arbitrary code to be executed with administrator...

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Overview Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via the /api/users endpoint. A remote attacker with a low-privileged API token can create new administrative users by abusing the "admin" parameter in a POST...

CVE-2025-69873

ajv Another JSON Schema Validator before 8.18.0 is vulnerable to Regular Expression Denial of Service ReDoS when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax $data reference, which is passed directly to the JavaScript RegExp constructor without...

CVE-2025-48503

A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2025-52541

A DLL hijacking vulnerability in Vivado could allow a local attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2025-52541

A DLL hijacking vulnerability in Vivado could allow a local attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2025-52541

CVE-2025-52541 is a DLL hijacking vulnerability in AMD/Vivado components. The Red Hat, NVD, CVE list and AMD bulletin describe a local attacker can exploit uncontrolled DLL search paths in the 2024.2 Vivado installation to achieve privilege escalation and potentially arbitrary code execution. The...

CVE-2025-52541

A DLL hijacking vulnerability in Vivado could allow a local attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2025-48503

A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2025-48503

A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2025-48503

CVE-2025-48503 is described as a DLL hijacking vulnerability in the AMD Software Installer that could enable privilege escalation and potentially arbitrary code execution. The primary affected component is the AMD Software Installer (and related AMD graphics software) as noted in multiple feeds, ...