7641 matches found
CVE-2024-49720
In multiple functions of Permissions.java, there is a possible way to override the state of the user's location permissions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2025-9330 Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on th...
CVE-2025-8614
CVE-2025-8614 concerns NoMachine. The flaw is in OpenSSL configuration handling: the product loads an OpenSSL configuration file from an unsecured location, enabling local attackers who already have low-privilege code execution to escalate privileges and execute arbitrary code in the context of t...
Local Deep Research's API keys are stored in plain text
Affected Versions: 0.2.0 and = 1.0.0 Description: The library stored confidential information, including API keys, in a local SQLite database without encryption. This behavior was not clearly documented outside of the database architecture page. Users were not given the ability to configure the...
GPS Spoofing Attacks on Automated Frequency Coordination System in Wi-Fi 6E and Beyond
The 6 GHz spectrum, recently opened for unlicensed use under Wi-Fi 6E and Wi-Fi 7, overlaps with frequencies used by mission-critical incumbent systems such as public safety communications and utility infrastructure. To prevent interference, the FCC mandates the use of Automated Frequency...
CVE-2025-8614: Uncontrolled Search Path Element
NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...
CVE-2025-9330: Uncontrolled Search Path Element
Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on th...
PT-2025-35618
Name of the Vulnerable Software and Affected Versions: Permissions.java affected versions not specified Description: A logic error in multiple functions within Permissions.java may allow overriding the state of a user’s location permissions. This could lead to local escalation of privilege withou...
PT-2025-36046
Name of the Vulnerable Software and Affected Versions BiometricEnrollIntroduction.java affected versions not specified Description An issue exists in the onStart function of BiometricEnrollIntroduction.java related to an unsafe PendingIntent. This could allow an attacker to determine the device’s...
ASB-A-388528350
In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2025-9595
A vulnerability was found in code-projects Student Information Management System 1.0. The impacted element is an unknown function of the file /login.php. The manipulation of the argument uname results in cross site scripting. The attack may be performed from a remote location. The exploit has bee...
CVE-2024-46412
Incorrect access control in the prehandle function of Rebuild v3.7.7 allows attackers to bypass authentication via a crafted GET request sent to /commons/ip-location...
CLSA-2025-1756483990 php: Fix of 3 CVEs
CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation...
php: Fix of 3 CVEs
CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation...
PT-2025-35153
Name of the Vulnerable Software and Affected Versions: code-projects Student Information Management System version 1.0 Description: A cross site scripting issue exists due to the manipulation of the uname argument. The issue is located in an unknown function of the file /login.php. The attack can...
More vulnerable stalkerware victims’ data exposed in new TheTruthSpy flaw
TheTruthSpy is at it again. A security researcher has discovered a flaw in the Android-based stalkerware that allows anyone to compromise any record in the system. TheTruthSpy stalkerware is designed to be installed surreptitiously on a victim's Android phone. It then monitors that phone's...
Linux Distros Unpatched Vulnerability : CVE-2020-13941
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Reported in SOLR-14515 private and fixed in SOLR-14561 public, released in Solr version 8.6.0. The Replication handler...
CVE-2024-46412
Incorrect access control in the prehandle function of Rebuild v3.7.7 allows attackers to bypass authentication via a crafted GET request sent to /commons/ip-location...
PT-2025-34652 · Unknown · Rebuild 3.7.7
Name of the Vulnerable Software and Affected Versions: Rebuild version 3.7.7 Description: An incorrect access control issue exists in the prehandle function. This allows attackers to bypass authentication by sending a crafted GET request to the /commons/ip-location API endpoint. Recommendations:...
