CVE-2024-41686

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to improper implementation of password policies. A local attacker could exploit this by creating password that do not adhere to the defined security standards/policy on the vulnerable system. Successful exploitation of this...

EUVD-2021-26862

Malware in sbrugna...

EUVD-1999-0322

Malware in sbrugna...

EUVD-2020-28932

Malware in sbrugna...

EUVD-2025-17395

Malicious code in bioql PyPI...

EUVD-2024-52224

Malicious code in bioql PyPI...

EUVD-2025-6141

Malicious code in bioql PyPI...

EUVD-2021-34062

Malicious code in bioql PyPI...

EUVD-2024-54764

Malicious code in bioql PyPI...

CVE-2025-21006

Out-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android 15 allows local attackers to write out-of-bounds memory...

CVE-2025-44952

A missing length check in ogspfcpsubnetadd function from PFCP library, used by both smf and upf in open5gs 2.7.2 and earlier, allows a local attacker to cause a Buffer Overflow by changing the session.dnn field with a value with length greater than 101...

CVE-2025-35978

Improper restriction of communication channel to intended endpoints issue exists in UpdateNavi V1.4 L10 to L33 and UpdateNaviInstallService Service 1.2.0091 to 1.2.0125. If a local authenticated attacker send malicious data, an arbitrary registry value may be modified or arbitrary code may be...

CVE-2025-32915

CVE-2025-32915 affects Checkmk: packages downloaded by the automatic agent updates on Linux and Solaris have incorrect permissions in Checkmk < 2.4.0p1, < 2.3.0p32, < 2.2.0p42 and

CVE-2024-56428

The local iLabClient database in itech iLabClient 3.7.1 allows local attackers to read cleartext credentials from the CONFIGS table for their servers configured in the client...

PT-2023-14452 · Lenovo · Thinkpad X13S Bios Driver

Name of the Vulnerable Software and Affected Versions: ThinkPadX13s BIOS driver affected versions not specified Description: A buffer over-read issue was reported in the ThinkPadX13s BIOS driver, potentially allowing a local attacker with elevated privileges to cause information disclosure...

USN-5206-1 linux-oem-5.14 vulnerability

Nadav Amit discovered that the hugetlb implementation in the Linux kernel did not perform TLB flushes under certain conditions. A local attacker could use this to leak or alter data from other processes that use huge pages...

About the security content of iOS 15 and iPadOS 15

About the security content of iOS 15 and iPadOS 15 This document describes the security content of iOS 15 and iPadOS 15. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

CVE-2017-17806

The HMAC implementation crypto/hmac.c in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker able to use the AFALG-based hash interface CONFIGCRYPTOUSERAPIHASH and the SHA-3 hash algorithm CONFIGCRYPTOSHA3 to caus...

typespeed -- arbitrary code execution

Debian reports: Ulf Härnhammar from the Debian Security Audit Project discovered a problem in typespeed, a touch-typist trainer disguised as game. This could lead to a local attacker executing arbitrary code...

Perl: rmtree and DBI tmpfile vulnerabilities

Background Perl is a cross platform programming language. The DBI is the standard database interface module for Perl. Description Javier Fernandez-Sanguino Pena discovered that the DBI library creates temporary files in an insecure, predictable way CAN-2005-0077. Paul Szabo found out that...