Project-Frame-Jacking-The-Gallery-Heist

Executive Summary A comprehensive penetration test was conduc...

PT-2025-35695

Name of the Vulnerable Software and Affected Versions: Android versions prior to 16 Description: The Secure Folder feature exhibits insecure storage of sensitive information, potentially allowing local attackers to gain unauthorized access to this data. Recommendations: Update to Android version ...

Linux Distros Unpatched Vulnerability : CVE-2021-21324

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI befor...

Linux Distros Unpatched Vulnerability : CVE-2020-11031

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GLPI before version 9.5.0, the encryption algorithm used is insecure. The security of the data encrypted relies on the password used, if a user sets a...

Linux Distros Unpatched Vulnerability : CVE-2018-14335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files outside of their...

SAMSUNG Secure Folder 安全漏洞

SAMSUNG Secure Folder is a privacy protection software from Samsung South Korea. A security vulnerability exists in SAMSUNG Secure Folder Android prior to version 16, which stems from insecure storage of sensitive information and could lead to a local attacker accessing sensitive information...

CVE-2025-46810

A flaw was found in the traefik2 package of OpenSUSE and its derived distributions. This issue occurs due to an insecure chown call in the %post section of the traefik2 package, allowing the traefik user to obtain ownership of arbitrary files on the system when the traefik2 package is reinstalled...

CVE-2025-32098

An issue was discovered in Samsung Magician 6.3 through 8.3 on Windows. An attacker can achieve Elevation of Privileges to SYSTEM by exploiting insecure file delete operations during the update process...

CVE-2025-32098

An issue was discovered in Samsung Magician 6.3 through 8.3 on Windows. An attacker can achieve Elevation of Privileges to SYSTEM by exploiting insecure file delete operations during the update process...

CVE-2025-0670 IDOR in Akinsoft's ProKuafor

Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft ProKuafor allows Resource Leak Exposure. This issue affects ProKuafor: from s1.02.07 before v1.02.08...

CVE-2025-56254

PHPGurukul Employee Leave Management System 2.1 contains an Insecure Direct Object Reference IDOR vulnerability in leave-details.php. An authenticated user can change the leaveid parameter in the URL to access leave application details of other users...

CVE-2025-32098

An issue was discovered in Samsung Magician 6.3 through 8.3 on Windows. An attacker can achieve Elevation of Privileges to SYSTEM by exploiting insecure file delete operations during the update process...

NoMachine 代码问题漏洞

NoMachine is a remote desktop access tool from Luxembourg-based NoMachine. NoMachine suffers from a code issue vulnerability that stems from an insecure OpenSSL configuration path that could lead to local elevation of privilege...

SAMSUNG Magician 安全漏洞

SAMSUNG Magician is an application from the South Korean company Samsung SAMSUNG. Designed to help manage Samsung SSDs. A security vulnerability exists in Samsung Magician versions 6.3 through 8.3, which stems from an insecure file deletion operation during the update process that could result in...

CVE-2025-32098

CVE-2025-32098 affects Samsung Magician (Windows) versions 6.3–8.3. The root cause is an insecure file-delete operation during the update process, which can allow an attacker to achieve elevation of privilege to SYSTEM . The CVSS v3.1 vector indicates a low attack complexity with no user interact...

CVE-2025-32098

An issue was discovered in Samsung Magician 6.3 through 8.3 on Windows. An attacker can achieve Elevation of Privileges to SYSTEM by exploiting insecure file delete operations during the update process...

PT-2025-35590

Name of the Vulnerable Software and Affected Versions: Samsung Magician versions 6.3 through 8.3 Description: An attacker can achieve Elevation of Privileges to SYSTEM by exploiting insecure file delete operations during the update process. Recommendations: Update Samsung Magician to a version...

PT-2025-35564

Name of the Vulnerable Software and Affected Versions: PHPGurukul Employee Leave Management System version 2.1 Description: The software contains an Insecure Direct Object Reference IDOR vulnerability in the leave-details.php file. An authenticated user can modify the leaveid parameter within the...

CVE-2025-56254

PHPGurukul Employee Leave Management System 2.1 contains an Insecure Direct Object Reference IDOR vulnerability in leave-details.php. An authenticated user can change the leaveid parameter in the URL to access leave application details of other users...

PHPGurukul Employee Leave Management System 安全漏洞

PHPGurukul Employee Leave Management System is an employee leave management system from PHPGurukul Inc. A security vulnerability exists in PHPGurukul Employee Leave Management System version 2.1, which stems from improper handling of the leaveid parameter and could lead to an insecure direct obje...