CVE-2025-38678_POC

CVE-2025-38678POC The first poc for CVE-2025-38678 今日（2026/1/21）检索Google时找到了发现该漏洞的师傅写的文章，证实了笔者的猜测，该漏洞利用手法沿用的是过去的利用姿势。那么应该在较新版本的kernel中哪怕有该漏洞也比较难利用乃至无法利用 link：https://196082.github.io/2025/12/19/CVE-2025-38678/...

CVE-2026-16208

A flaw has been found in django-tastypie up to 0.15.1. The affected element is the function CacheThrottle/CacheDBThrottle of the file tastypie/throttle.py. This manipulation causes race condition. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitability...

CVE-2026-8233

A vulnerability was determined in Dotouch XproUPF 2.0.0-release-088aa7c4. Affected is an unknown function of the component UPF. This manipulation causes improper access controls. A high degree of complexity is needed for the attack. The exploitability is told to be difficult. The vendor was...

EUVD-2020-28926

Malware in sbrugna...

EUVD-2025-16782

Malicious code in bioql PyPI...

EUVD-2023-59240

Malicious code in bioql PyPI...

EUVD-2023-23749

Malicious code in bioql PyPI...

EUVD-2025-7492

Malicious code in bioql PyPI...

EUVD-2025-28817

Malicious code in bioql PyPI...

EUVD-2025-14326

Malicious code in bioql PyPI...

EUVD-2023-23752

Malicious code in bioql PyPI...

EUVD-2025-18435

Malicious code in bioql PyPI...

EUVD-2023-12675

Malicious code in bioql PyPI...

EUVD-2025-2114

Malicious code in bioql PyPI...

CVE-2025-7578

A vulnerability was found in Teledyne FLIR FB-Series O and FLIR FH-Series ID 1.3.2.16. It has been declared as critical. This vulnerability affects the function sendCommand of the file runcmd.sh. The manipulation of the argument cmd leads to command injection. The attack can be initiated remotely...

CVE-2025-7097 Comodo Internet Security Premium Manifest File cis_update_x64.xml os command injection

A vulnerability, which was classified as critical, has been found in Comodo Internet Security Premium 12.3.4.8162. This issue affects some unknown processing of the file cisupdatex64.xml of the component Manifest File Handler. The manipulation of the argument binary/params leads to os command...

CVE-2025-7096 Comodo Internet Security Premium Manifest File cis_update_x64.xml integrity check

A vulnerability classified as critical was found in Comodo Internet Security Premium 12.3.4.8162. This vulnerability affects unknown code of the file cisupdatex64.xml of the component Manifest File Handler. The manipulation leads to improper validation of integrity check value. The attack can be...

CVE-2025-5715

A vulnerability was found in Signal App 7.41.4 on Android. It has been declared as problematic. This vulnerability affects unknown code of the component Biometric Authentication Handler. The manipulation leads to missing critical step in authentication. It is possible to launch the attack on the...

SUSE CVE-2025-5647

A vulnerability was found in Radare2 5.9.9 and classified as problematic. This issue affects the function rconscontextbreakpop in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. The attack needs to be approached locally. The...

CVE-2025-5149 WCMS Login getallcon getMemberByUid improper authentication

A vulnerability was found in WCMS up to 8.3.11. It has been declared as critical. Affected by this vulnerability is the function getMemberByUid of the file /index.php?articleadmin/getallcon of the component Login. The manipulation of the argument uid leads to improper authentication. The attack c...