CVE-2025-15133

ZSPACE Z4Pro+ 1.0.0440024 contains a vulnerability in the HTTP POST Request Handler, specifically the zfilev2_api_CloseSafe function in /v2/file/safe/close. The issue allows remote command injection and is facilitated by manipulation of this function. Several sources confirm the exploit is public...

EUVD-2005-3376

Malware in sbrugna...

Multiple deserialization vulnerabilities in PyTorch Lightning 2.4.0 and earlier versions

Overview PyTorch Lightning versions 2.4.0 and earlier do not use any verification mechanisms to ensure that model files are safe to load before loading them. Users of PyTorch Lightning should use caution when loading models from unknown or unmanaged sources. Description PyTorch Lightning, a...

Git 路径遍历漏洞

Git is a free, open source distributed version control system. A path traversal vulnerability exists in Git that stems from not checking if a file is safe...

Microsoft SharePoint Server CVE-2018-0916 Remote Privilege Escalation Vulnerability

Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...

Apple Safari automatically executes arbitrary shell commands or code

Overview Apple Safari fails to properly determine file safety, allowing a remote unauthenticated attacker to execute arbitrary commands or code. Description Safari Apple Safari is a web browser that comes with the Mac OS X operating system. Explicit binding Mac OS X supports a feature called...

WinAmp contains a flaw in metadata handling in .mpa and .mp4 files

Overview WinAmp contains a flaw which may allow an attacker to crash WinAmp remotely via .mpa or .mp4 files. Description Nullsoft's WinAmp Player, a popular multimedia system for Microsoft Windows, contains a flaw in the handling of the metadata called "tags" contained within .mpa and .mp4 files...

Imagemagic symlink problem

Unsafe temporary files handling...

Дырка в sort (FreeBSD)

Небезопасная работа с временными файлами...