Delta Electronics ASDA-Soft PAR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics ASDA-Soft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XWD files. The...

PT-2025-44306

Name of the Vulnerable Software and Affected Versions NCR Atleos Terminal Manager ConfigApp version 3.4.0 Description An issue in NCR Atleos Terminal Manager ConfigApp version 3.4.0 allows attackers to escalate privileges via a crafted request. Exploiting this vulnerability allows a crafted reque...

Microsoft Windows LNK File Parsing Improper Input Validation NTLM Relay Vulnerability

This vulnerability allows remote attackers to relay NTLM credentials on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of L...

Krita TGA File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Krita. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TGA files. Th...

CVE-2025-54268

Bridge versions 14.1.8, 15.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

EulerOS 2.0 SP13 : libblockdev (EulerOS-SA-2025-2298)

According to the versions of the libblockdev packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the 'allowactive' setting in Polkit permits a physically...

PT-2025-43470

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems due to insufficient protection of system data. Remote attackers may be able to escalate privileges by exploiting this...

PT-2025-43451

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems related to insufficient protection of service data. Successful exploitation may allow a remote attacker to elevate...

PT-2025-43467

Name of the Vulnerable Software and Affected Versions KeyguardViewMediator.java affected versions not specified Description A race condition exists in multiple functions within KeyguardViewMediator.java, potentially allowing a lockscreen bypass. Successful exploitation could lead to local privile...

PT-2025-43482

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Android Framework component where insufficient input validation can be exploited to trick a user into accepting a permission through a tapjacking or overlay attack. This...

PT-2025-43460

Name of the Vulnerable Software and Affected Versions versions prior to 2025 Description There is a potential bypass of user profile boundaries through improperly validated forwarded intents. This could allow for local privilege escalation without requiring additional execution privileges or user...

PT-2025-43502

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the VoiceInteractionManagerService.java component, specifically within the findAvailRecognizer function. This issue stems from an insecure default value, potentially allowing...

PT-2025-43469

Name of the Vulnerable Software and Affected Versions MediaProvider.java affected versions not specified Description A flaw exists in multiple functions of MediaProvider.java that may allow a bypass of external storage write permissions due to a confused deputy condition. Successful exploitation...

PT-2025-43461

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A flaw exists where a file path filter designed to restrict access to sensitive directories can be bypassed due to incorrect unicode normalization. This could allow a local user to gain elevated...

PT-2025-43453

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems related to insufficient protection of service data. Exploitation may allow a remote attacker to elevate privileges...

PT-2025-43474

In multiple functions of ProfilingService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-43471

Name of the Vulnerable Software and Affected Versions affected versions not specified Description There is a potential for media deletion without the necessary MANAGE EXTERNAL STORAGE permission due to an intent redirect. This could result in local escalation of privilege and does not require use...

PT-2025-43468

Name of the Vulnerable Software and Affected Versions MediaProvider.java affected versions not specified Description A flaw exists in multiple functions within MediaProvider.java that may allow bypassing the WRITE EXTERNAL STORAGE permission due to a missing permission check. Successful...

PT-2025-43477

In multiple functions of HeaderPrivacyIconsController.kt, there is a possible way to grand permissions across user due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...