28151 matches found
Critical Photon OS Security Update - PHSA-2025-4.0-0856
Updates of 'libssh', 'docker' packages of Photon OS have been released...
PT-2025-34167
Name of the Vulnerable Software and Affected Versions: wong2 mcp-cli version 1.13.0 Description: A flaw has been identified in the redirectToAuthorization function within the oAuth Handler component, specifically in the file /src/oauth/provider.js. This manipulation results in OS command injectio...
PT-2025-34126 · Strongdm · Strongdm Macos Client
Name of the Vulnerable Software and Affected Versions: StrongDM macOS client affected versions not specified Description: The StrongDM macOS client incorrectly processed JSON-formatted messages. Attackers could potentially modify macOS system configuration by crafting a malicious JSON message...
Important Photon OS Security Update - PHSA-2025-5.0-0597
Updates of 'libssh', 'postgresql14', 'postgresql13', 'postgresql15' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2025-4.0-0855
Updates of 'git' packages of Photon OS have been released...
Point-to-Point Protocol Privilege Escalation
The vulnerability of the Point-to-Point Protocol PPP implementation in the Windows operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
DirectX Graphics Kernel Code Execution
The vulnerability of the DirectX Graphics Kernel component of the Windows operating system is related to errors in data type mixing. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Windows LSASS DoS
The vulnerability of the Local Security Authority Subsystem Service LSASS in the Windows operating system is related to the pointer manipulation of NULL. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...
Remote Desktop Services DoS
The vulnerability of Remote Desktop Services RDS for Windows operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions from a remote location...
StateRepository service Windows Privilege Escalation
The vulnerability of the StateRepository service in the Windows operating system is related to the lack of authentication for critical functions. Exploiting this vulnerability can allow attackers to increase their privileges...
Desktop Window Manager Code Execution
The vulnerability of desktop window managers in Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Photon OS 4.0: Linux PHSA-2025-4.0-0844
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0844. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
macOS 15.x < 15.6.1 (124927)
The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.6.1. It is, therefore, affected by a vulnerability: - Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticat...
CVE-2025-9176 neurobin shc Environment Variable shc.c make os command injection
A security flaw has been discovered in neurobin shc up to 4.0.3. Impacted is the function make of the file src/shc.c of the component Environment Variable Handler. The manipulation results in os command injection. The attack is only possible with local access. The exploit has been released to the...
CVE-2025-9174
The CVE describes a local OS command-injection in neurobin shc ≤ 4.0.3, caused by unsafe handling in the make function of src/shc.c (Filename Handler). Public exploit details indicate local access is required; exploitation has been disclosed. Impact includes potential compromise of confidentialit...
CVE-2025-55033 Drag and drop gestures in Focus for iOS could allow JavaScript links to be executed incorrectly
Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in XSS attacks. This vulnerability was fixed in Focus for iOS 142...
CVE-2025-55032 Focus incorrectly ignores Content-Disposition headers for some MIME types
Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentially allowing for XSS attacks. This vulnerability was fixed in Focus for iOS 142...
CVE-2025-55032 Focus incorrectly ignores Content-Disposition headers for some MIME types
Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentially allowing for XSS attacks. This vulnerability was fixed in Focus for iOS 142...
CVE-2025-38555
In the Linux kernel, the following vulnerability has been resolved: usb: gadget : fix use-after-free in compositedevcleanup 1. In func configfscompositebind - compositeosdescreqprepare: if kmalloc fails, the pointer cdev-osdescreq will be freed but not set to NULL. Then it will return a failure t...
