Google Chrome V8 Engine Data Access

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow a remote attacker to gain access to, read, modify, and delete data through a specially creat...

ROS-20251216-7360

A vulnerability in the V8 JavaScript script handler of Google Chrome and Microsoft Edge browsers is related to errors in the implementation of security checks for standard elements. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...

CVE-2025-14693

A vulnerability has been found in Ugreen DH2100+ up to 5.3.0. This affects an unknown function of the component USB Handler. Such manipulation leads to symlink following. The attack can be executed directly on the physical device. The exploit has been disclosed to the public and may be used. It i...

PT-2025-47086

Name of the Vulnerable Software and Affected Versions WeiYe-Jing datax-web versions up to 2.1.2 Description A flaw exists in the Job Handler component of WeiYe-Jing datax-web, specifically within the remove, update, pause, start, and triggerJob functions. This issue results in improper access...

PT-2025-45440

Name of the Vulnerable Software and Affected Versions KubeVirt versions prior to 1.5.3 KubeVirt versions prior to 1.6.1 Description KubeVirt, a virtual machine management add-on for Kubernetes, contains a flaw where the virt-handler does not validate if the launcher-sock is a symbolic link or a...

commandKit 安全漏洞

commandKit is an Under Ctrl open source development tool for building Discord bots. A security vulnerability exists in commandKit versions 1.2.0-rc.1 through 1.2.0-rc.11, which stems from a logic flaw in the message command handler that could lead to unauthorized command execution or inaccurate...

CVE-2025-11642 Tomofun Furbo 360/Furbo Mini Registration denial of service

A vulnerability was identified in Tomofun Furbo 360 and Furbo Mini. Affected is an unknown function of the component Registration Handler. Such manipulation leads to denial of service. The attack can be executed directly on the physical device. The attack requires a high level of complexity. The...

CVE-2025-11637 Tomofun Furbo 360 Audio race condition

A vulnerability was detected in Tomofun Furbo 360 up to FB0035FW036. Impacted is an unknown function of the component Audio Handler. Performing manipulation results in race condition. The attack is possible to be carried out remotely. The vendor was contacted early about this disclosure but did n...

EUVD-2009-2406

Malware in sbrugna...

EUVD-2018-7690

Malware in sbrugna...

Linux arch/arm/kernel/hw_breakpoint breakpoint_handler Heap Buffer Overflow DoS

The vulnerability of the breakpointhandler function in the arch/arm/kernel/hwbreakpoint.c module of the Linux operating system is related to incorrect checking of the return value of the function. Exploiting this vulnerability could allow an attacker to cause a service failure...

D-Link DI-8100 router HTTP Request Handler Command Execution

The vulnerability of the HTTP Request Handler component in D-Link DI-8100 microprogrammed router software is related to the lack of measures taken at the control level to protect data. Exploiting this vulnerability allows a malicious actor to send arbitrary commands remotely by sending specially...

PT-2025-20659 · Yangzongzhuan · Ruoyi-Vue

Name of the Vulnerable Software and Affected Versions: RuoYi-Vue versions up to 3.8.9 Description: A problem was found in the Password Handler component, affecting some unknown functionality of the files ruoyi-ui/jsencrypt.js and ruoyi-ui/login.vue. This issue leads to cleartext storage of...

io.netty:netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine

A flaw was found in Netty's SslHandler. This vulnerability allows a native crash via a specially crafted packet that bypasses proper validation...

PT-2025-29940

Name of the Vulnerable Software and Affected Versions 7-Zip versions prior to 25.0.0 Description 7-Zip is a file archiver with a high compression ratio. A flaw exists in the RAR5 handler where writing zeroes outside of the heap buffer can cause memory corruption and denial of service...

PT-2025-2006 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB05 R1B011D88210 Description: A critical issue has been found in the ACL Handler component, specifically affecting an unknown part of the file /goform/form2LocalAclEditcfg.cgi. This issue leads to improper acce...

CVE-2024-12830

Arista NG Firewall customhandler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Authentication is not required to exploit this vulnerability. The specific flaw exists...

PT-2024-17750 · Arista · Arista Ng Firewall

Name of the Vulnerable Software and Affected Versions: Arista NG Firewall affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Authentication is not required to exploit this issue. The specific...

NET-SNMP Agent MIB nsLogTable Data Compromise

The vulnerability of the NET-SNMP-AGENT-MIB::nsLogTable function in the OID Handler component of the Net-SNMP software for Linux operating systems is related to the assignment of the NULL pointer pointer. Exploitation of this vulnerability could allow a remote attacker to compromise data integrit...

BPL Handler component in

The vulnerability of the BPL Handler component in the IObit iTop Data Recovery Pro password manager is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a hacker to execute arbitrary commands...