CVE-2025-1700

A DLL hijacking vulnerability was reported in the Motorola Software Fix Rescue and Smart Assistant installer that could allow a local attacker to escalate privileges during installation of the software...

CVE-2025-1729

A DLL hijacking vulnerability was reported in TrackPoint Quick Menu software that, under certain conditions, could allow a local attacker to escalate privileges...

CVE-2025-1729

A DLL hijacking vulnerability was reported in TrackPoint Quick Menu software that, under certain conditions, could allow a local attacker to escalate privileges...

CVE-2025-1729

A DLL hijacking vulnerability was reported in TrackPoint Quick Menu software that, under certain conditions, could allow a local attacker to escalate privileges...

CVE-2025-1729

CVE-2025-1729 affects Lenovo TrackPoint Quick Menu (TPQMAssistant.exe). A DLL hijacking flaw allows a local attacker to escalate privileges by placing a malicious hostfxr.dll in the TPQM directory where the binary is launched; the TPQM folder is writable by standard users, enabling this. The issu...

CVE-2025-1700

CVE-2025-1700 describes a DLL hijacking weakness in the Motorola Software Fix (Rescue and Smart Assistant) installer that could allow a local attacker to escalate privileges during software installation. The affected component is the installer for Motorola Software Fix, and the root cause is DLL ...

CVE-2025-1700

A DLL hijacking vulnerability was reported in the Motorola Software Fix Rescue and Smart Assistant installer that could allow a local attacker to escalate privileges during installation of the software...

CVE-2025-1700

A DLL hijacking vulnerability was reported in the Motorola Software Fix Rescue and Smart Assistant installer that could allow a local attacker to escalate privileges during installation of the software...

CVE-2025-53895

ZITADEL is an open source identity management system. Starting in version 2.53.0 and prior to versions 4.0.0-rc.2, 3.3.2, 2.71.13, and 2.70.14, vulnerability in ZITADEL's session management API allows any authenticated user to update a session if they know its ID, due to a missing permission chec...

CVE-2025-53890

pyload is an open-source Download Manager written in pure Python. An unsafe JavaScript evaluation vulnerability in pyLoad’s CAPTCHA processing code allows unauthenticated remote attackers to execute arbitrary code in the client browser and potentially the backend server. Exploitation requires no...

PT-2025-29956 · Motorola · Motorola Software Fix

Name of the Vulnerable Software and Affected Versions: Motorola Software Fix Rescue and Smart Assistant affected versions not specified Description: A DLL hijacking issue exists in the Motorola Software Fix Rescue and Smart Assistant installer. This could allow a local attacker to escalate...

PT-2025-29976

Name of the Vulnerable Software and Affected Versions Brocade ASCG versions prior to 3.3.0 Description Brocade ASCG versions prior to 3.3.0 log JSON Web Tokens JWT in log files. An attacker with access to these log files can extract the unencrypted tokens, potentially leading to unauthorized...

Catalyst-Plugin-Session 安全漏洞

Catalyst-Plugin-Session is a Catalyst open source application. A security vulnerability exists in Catalyst-Plugin-Session versions prior to 0.44 that stems from an insecure way of generating session IDs, which could lead to session hijacking...

Lenovo TrackPoint Quick Menu 安全漏洞

Lenovo TrackPoint Quick Menu is a shortcut menu program from the Chinese company Lenovo. A security vulnerability exists in Lenovo TrackPoint Quick Menu, which stems from the presence of a DLL hijacking vulnerability that could lead to elevation of privilege by a local attacker...

CVE-2025-53886

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0 and prior to version 11.9.0, when using Directus Flows with the WebHook trigger all incoming request details are logged including security sensitive data like access and refresh tokens in...

CVE-2025-52687

Successful exploitation of the vulnerability could allow an attacker with administrator credentials for the access point to inject malicious JavaScript into the payload of web traffics, potentially leading to session hijacking and denial-of-service DoS...

CVE-2025-52687 JavaScript Injection Vulnerability in the OmniAccess Stellar Web Management Interface

Successful exploitation of the vulnerability could allow an attacker with administrator credentials for the access point to inject malicious JavaScript into the payload of web traffics, potentially leading to session hijacking and denial-of-service DoS...

CVE-2025-52687

The CVE-2025-52687 issue applies to Alcatel-Lucent OmniAccess Stellar products (Web Management Interface). Affected component: web management payload handling. Root cause described in sources as ability for an attacker with administrator credentials on the access point to inject malicious JavaScr...

Alcatel-Lucent OmniAccess Stellar Products 安全漏洞

Alcatel-Lucent OmniAccess Stellar Products is a line of WiFi access points from Alcatel-Lucent, France. A security vulnerability exists in Alcatel-Lucent OmniAccess Stellar Products that stems from the possible injection of malicious JavaScript, leading to session hijacking and denial of service...

PT-2025-29695 · Unknown · Access Point

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: Successful exploitation of the issue could allow an attacker with administrator credentials for the access point to inject malicious JavaScript into the payload of web traffic, potentially leading ...