PYSEC-2025-139

MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a segmentation fault in mlx::core::loadgguf when loading malicious GGUF files. Untrusted pointer from external gguflib library is dereferenced without validation, causing application crash. This iss...

SonicWall SMA 100 series Code Execution

The vulnerability of SonicWall SMA 100 network firewall microprogramming software is related to the unlimited loading of dangerous files. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

SATO CL4NX Plus Industrial Thermal Printers Privilege Escalation

The vulnerability of microprogrammed industrial thermal printers such as SATO CL4NX Plus, CL6NX Plus, CL4NX-J Plus, and CL6NX-J Plus lies in the ability to load files of a malicious nature without limitation. Exploiting this vulnerability can allow an attacker to enhance their privileges and...

DrayTek Vigor Router Signature Loading Arbitrary Code

The vulnerability of the signature loading function in the APPE Signature Upgrade microprogramming software for DrayTek Vigor routers allows for unlimited loading of malicious files. Exploiting this vulnerability can enable a hacker to execute arbitrary code...

SCP Unlimited Resource Distribution Command Execution

The vulnerability of the SCP utility for access control and remote authentication, as well as software such as BIG-IP Advanced Firewall Manager, BIG-IP Advanced Web Application Firewall, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP...

ACEManager Component Arbitrary Script Execution System Reboot

The vulnerability of the ACEManager component in the ALEOS operating system of Sierra Wireless’ wireless routers—MP70, RV50x, RV55, LX40, LX60 ES450, GX450—is related to the ability to load files of a malicious nature without limitation. Exploiting this vulnerability allows an attacker to execute...

IVA MCU Video Conference Server XSS

The vulnerability of the IVA MCU video conference server software relates to the possibility of loading files of a malicious nature. Exploiting this vulnerability allows a remote attacker to carry out an XSS-type attack...

CVE-2022-23748: Process Control

mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files...

Foxit PDF Editor DLL Hijacking Vulnerability

Foxit PDF Editor is a PDF file editing software. Foxit PDF Editor has a DLL hijacking vulnerability. An attacker can exploit this vulnerability to load a fake malicious dll file...

Information disclosure

Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance ASA could allow an authenticated, local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is being established. For more information about these...

Novell Netware Enterprise Web Server 5.16.0 - Multiple Cross-Site Scripting Vulnerabilities

Novell Netware Enterprise Web Server 5.16.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/9479/info Multiple vulnerabilities have been identified in Novell Netware Enterprise Web Server that may allow an attacker to carry out cross-site scripting attack...