242 matches found
CVE-2025-12120
Lite XL versions 2.1.8 and prior are vulnerable to arbitrary code execution due to the automatic execution of the .lite_project.lua file when opening a project directory. Because the application does not prompt the user for confirmation, a malicious project can execute untrusted Lua logic with th...
CVE-2025-12120 CVE-2025-12120
Lite XL versions 2.1.8 and prior automatically execute the .liteproject.lua file when opening a project directory, without prompting the user for confirmation. The .liteproject.lua file is intended for project-specific configuration but can contain executable Lua logic. This behavior could allow...
CVE-2025-12120: Improper Control of Generation of Code
Lite XL versions 2.1.8 and prior automatically execute the .liteproject.lua file when opening a project directory, without prompting the user for confirmation. The .liteproject.lua file is intended for project-specific configuration but can contain executable Lua logic. This behavior could allow...
CVE-2025-54496
A maliciously crafted project file may cause a heap-based buffer overflow in Fuji Electric Monitouch V-SFT-6, which may allow the attacker to execute arbitrary code...
Fuji Electric V-SFT-6 安全漏洞
Fuji Electric V-SFT-6 is a Fuji Electric operator interface software from Fuji Electric, Japan. A security vulnerability exists in Fuji Electric V-SFT-6 that stems from a maliciously constructed project file that could result in a heap-based buffer overflow, potentially allowing an attacker to...
PT-2025-45049
Name of the Vulnerable Software and Affected Versions Fuji Electric Monitouch V-SFT-6 affected versions not specified Description A maliciously crafted project file may cause a heap-based buffer overflow in Fuji Electric Monitouch V-SFT-6, potentially allowing an attacker to execute arbitrary cod...
Delta Electronics DIAScreen
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to write data outside of the allocated memory buffer. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA...
EUVD-2017-4244
Malware in sbrugna...
EUVD-2018-2709
Malware in sbrugna...
EUVD-2020-18954
Malware in sbrugna...
EUVD-2023-2755
Malicious code in bioql PyPI...
EUVD-2021-9912
Malicious code in bioql PyPI...
EUVD-2023-12202
Malicious code in bioql PyPI...
EUVD-2024-27185
Malicious code in bioql PyPI...
EUVD-2022-34716
Malicious code in bioql PyPI...
EUVD-2023-33015
Malicious code in bioql PyPI...
CVE-2025-27127
A vulnerability has been identified in TIA Project-Server All versions V2.1.1, TIA Project-Server V17 All versions, Totally Integrated Automation Portal TIA Portal V17 All versions, Totally Integrated Automation Portal TIA Portal V18 All versions, Totally Integrated Automation Portal TIA Portal V...
CVE-2025-27127: Unrestricted Upload of File with Dangerous Type
A vulnerability has been identified in TIA Project-Server All versions V2.1.1, TIA Project-Server V17 All versions, Totally Integrated Automation Portal TIA Portal V17 All versions, Totally Integrated Automation Portal TIA Portal V18 All versions, Totally Integrated Automation Portal TIA Portal V...
CVE-2023-0104
The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file. This may allow an attacker to gain control of the user’s computer or gain access to sensitive data...
CVE-2022-2455
A business logic issue in the handling of large repositories in all versions of GitLab CE/EE from 10.0 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2 allowed an authenticated and authorized user to exhaust server resources by importing ...