37642 matches found
EUVD-2024-19097
Malicious code in bioql PyPI...
EUVD-2025-2262
Malicious code in bioql PyPI...
EUVD-2022-47644
Malicious code in bioql PyPI...
EUVD-2022-29396
Malicious code in bioql PyPI...
Zabbix Agent 安全漏洞
Zabbix Agent is a component in Zabbix from Zabbix Latvia. A security vulnerability exists in Zabbix Agent that stems from an OpenSSL configuration file load path that can be written by a low-privileged user, potentially resulting in local elevation of privilege...
CVE-2025-22862
An Authentication Bypass Using an Alternate Path or Channel vulnerability CWE-288 in FortiOS 7.4.0 through 7.4.7, 7.2.0 through 7.2.11, 7.0.6 and above; and FortiProxy 7.6.0 through 7.6.2, 7.4.0 through 7.4.8, 7.2 all versions, 7.0.5 and above may allow an authenticated attacker to elevate their...
ALSA-2025:17129 Important: idm:DL1 security update
AlmaLinux Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fixes: FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA CVE-2025-7493 For more details...
Google Chrome 安全漏洞
Google Chrome is a web browser. v8 is one of the open source JavaScript engines. form is a form state manager. A security vulnerability exists in Google Chrome, which stems from an improper storage implementation that could lead to data disclosure or elevation of privilege...
PT-2025-39876
Name of the Vulnerable Software and Affected Versions Dell Repository Manager versions 3.4.7 through 3.4.8 Description Dell Repository Manager DRM versions 3.4.7 and 3.4.8 have an issue related to improper handling of insufficient permissions or privileges. A local attacker with limited privilege...
SetupHijack Privilege Escalation Tool
SetupHijack is a security research tool that exploits race conditions and insecure file handling in Windows installer and update processes. It targets scenarios where privileged installers or updaters drop files in %TEMP% or other world-writable locations, allowing an attacker to replace these...
CVE-2025-59827 FlagForgeCTF is Missing Authorization in main-v2
Flag Forge is a Capture The Flag CTF platform. In version 2.1.0, the /api/admin/assign-badge endpoint lacks proper access control, allowing any authenticated user to assign high-privilege badges e.g., Staff to themselves. This could lead to privilege escalation and impersonation of administrative...
Asterisk 安全漏洞
Asterisk is an Asterisk open source software for PBX systems that runs on Linux and supports IP calls using SIP, IAX, and H323 protocols. Asterisk has a security vulnerability that originates from not verifying the ownership or permissions of the .sh file in the /etc/asterisk/startup.d directory,...
WordPress plugin Ibtana 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
WordPress plugin pebas CouponXxL 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...
Grouper 安全漏洞
Grouper is an Internet2 open source enterprise access management system designed for highly distributed administrative environments and heterogeneous information technology environments common to colleges and universities. A security vulnerability exists in Grouper versions 5.17.1 through prior t...
CVE-2025-59220
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
CVE-2025-59220 Windows Bluetooth Service Elevation of Privilege Vulnerability
...
CVE-2025-59216 Windows Graphics Component Elevation of Privilege Vulnerability
...
CVE-2025-59220
CVE-2025-59220 involves a race condition in the Microsoft Windows Bluetooth Service, caused by improper synchronization of shared resources. The vulnerability enables an authenticated, local attacker to elevate privileges. The connected CNVD entry describes a resource-management error in the Wind...