CVE-2025-53395

Paramount Macrium Reflect through 2025-06-26 allows local attackers to execute arbitrary code with administrator privileges via a crafted .mrimgx backup file and a malicious VSSSvr.dll located in the same directory. When a user with administrative privileges mounts a backup by opening the .mrimgx...

PT-2025-31862 · Boquan · Boquan Dotwallet App

Name of the Vulnerable Software and Affected Versions: Boquan DotWallet App version 2.15.2 Description: A vulnerability exists in the Boquan DotWallet App that is due to improper export of android application components within the AndroidManifest.xml file of the com.boquanhash.dotwallet component...

zpanelx 安全漏洞

zpanelx is an open source web hosting control panel from The ZPanel Project. A security vulnerability exists in zpanelx that stems from a zsudo misconfiguration that could allow a local attacker to elevate privileges by writing a payload and executing it...

PT-2025-31859 · Unknown +1 · Riderlike Fruit Crush-Brain App +1

Name of the Vulnerable Software and Affected Versions: RiderLike Fruit Crush-Brain App version 1.0 Description: A vulnerability exists in RiderLike Fruit Crush-Brain App version 1.0 on Android due to improper export of android application components within the AndroidManifest.xml file of the...

CVE-2025-53395

Paramount Macrium Reflect through 2025-06-26 allows local attackers to execute arbitrary code with administrator privileges via a crafted .mrimgx backup file and a malicious VSSSvr.dll located in the same directory. When a user with administrative privileges mounts a backup by opening the .mrimgx...

CVE-2025-8512

A vulnerability, which was classified as problematic, has been found in TVB Big Big Shop App 2.9.0 on Android. This issue affects some unknown processing of the file AndroidManifest.xml of the component hk.com.tvb.bigbigshop. The manipulation leads to improper export of android application...

CVE-2024-13978

A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this vulnerability is the function t2preadtiffinit of the file tools/tiff2pdf.c of the component fax2ps. The manipulation leads to null pointer dereference. The attack needs to be approached locally...

DEBIAN-CVE-2024-13978

A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this vulnerability is the function t2preadtiffinit of the file tools/tiff2pdf.c of the component fax2ps. The manipulation leads to null pointer dereference. The attack needs to be approached locally...

AZL-67259 CVE-2024-13978 affecting package libtiff for versions less than 4.6.0-9

A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this vulnerability is the function t2preadtiffinit of the file tools/tiff2pdf.c of the component fax2ps. The manipulation leads to null pointer dereference. The attack needs to be approached locally...

UBUNTU-CVE-2024-13978

A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this vulnerability is the function t2preadtiffinit of the file tools/tiff2pdf.c of the component fax2ps. The manipulation leads to null pointer dereference. The attack needs to be approached locally...

CVE-2024-13978 LibTIFF fax2ps tiff2pdf.c t2p_read_tiff_init null pointer dereference

A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this vulnerability is the function t2preadtiffinit of the file tools/tiff2pdf.c of the component fax2ps. The manipulation leads to null pointer dereference. The attack needs to be approached locally...

CVE-2024-13978

CVE-2024-13978 affects LibTIFF up to 4.7.0, specifically the t2p_read_tiff_init function in fax2ps (tools/tiff2pdf.c). The flaw causes a null pointer dereference and is exploitable locally with high attack complexity; patches are available. Public docs (Debian LTS) confirm the vulnerability and p...

CVE-2024-13978 LibTIFF fax2ps tiff2pdf.c t2p_read_tiff_init null pointer dereference

A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this vulnerability is the function t2preadtiffinit of the file tools/tiff2pdf.c of the component fax2ps. The manipulation leads to null pointer dereference. The attack needs to be approached locally...

Exploit for CVE-2025-46018

CVE-2025-46018 – CSC Pay Mobile App Payment Authentication Byp...

CVE-2025-36611

Dell Encryption and Dell Security Management Server, versions prior to 11.11.0, contain an Improper Link Resolution Before File Access 'Link Following' Vulnerability. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation...

CVE-2025-8258

A vulnerability, which was classified as problematic, has been found in Cool Mo Maigcal Number App up to 1.0.3 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.sdmagic.number. The manipulation leads to improper export of android...

CVE-2025-8257

A vulnerability classified as problematic was found in Lobby Universe Lobby App up to 2.8.0 on Android. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.maverick.lobby. The manipulation leads to improper export of android application...

Ubuntu 22.04 LTS / 24.04 LTS / 25.04 : Perl vulnerability (USN-7678-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by a vulnerability as referenced in the USN-7678-1 advisory. It was discovered that Perl threads incorrectly handled certain file operations. A local attacker could possibly use this issue to load code o...

CVE-2025-50777

The firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera version V1.00.02 contains an Incorrect Access Control vulnerability that allows local attackers to gain root shell access. Once accessed, the device exposes critical data including Wi-Fi credentials and ONVIF service...

AVG TuneUp for PC TuneupSvc Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of AVG TuneUp for PC. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the AVG TuneUp...