38135 matches found
Tomiris wreaks Havoc: New tools and techniques of the APT group
While tracking the activities of the Tomiris threat actor, we identified new malicious operations that began in early 2025. These attacks targeted foreign ministries, intergovernmental organizations, and government entities, demonstrating a focus on high-value political and diplomatic...
CVE-2025-58307
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-58303
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-58307
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-58303
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-58307
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...
EUVD-2025-199847
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-58307
Huawei HarmonyOS uses a screen recording framework module with a memory misreference (UAF) vulnerability that can be exploited locally to affect availability. Affected component: screen recording framework module in HarmonyOS. Root cause: memory misreference. Impact: availability. Exploitation de...
EUVD-2025-199850
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-58303
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-58303
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-58303
CVE-2025-58303 concerns Huawei HarmonyOS: memory misreference/use-after-free in the screen recording framework module. Root cause: UAF/memory misreference leading to availability impact. Affected component: screen recording framework module (HarmonyOS). Impact per sources: availability disruption...
PT-2025-48293
Name of the Vulnerable Software and Affected Versions affected versions not specified Description A use-after-free issue exists in the screen recording framework module. Successful exploitation could impact system availability. Recommendations At the moment, there is no information about a newer...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A memory misreference vulnerability exists in the Huawei HarmonyOS screen recording framework module, which can be exploited by attackers to affect...
PT-2025-48294
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-33204
NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data...
CVE-2025-33205
NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution...
CVE-2025-65092
ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.1, 5.4.3, and 5.3.4, when the ESP32-P4 uses its hardware JPEG decoder, the software parser lacks necessary validation checks. A specially crafted malicious JPEG image could exploit the parsing routine and trigg...
PT-2025-48291
Name of the Vulnerable Software and Affected Versions Astro versions 5.15.7 and below Description Astro, a web framework, is affected by a double URL encoding bypass. This allows unauthenticated attackers to bypass path-based authentication checks in Astro middleware, potentially granting...