339 matches found
CVE-2025-61037
A local privilege escalation vulnerability exists in SevenCs ORCA G2 2.0.1.35 EC2007 Kernel v5.22. The flaw is a Time-of-Check Time-of-Use TOCTOU race condition in the license management logic. The regService process, which runs with SYSTEM privileges, creates a fixed directory and writes files...
SevenCs ORCA G2 安全漏洞
SevenCs ORCA G2 is an electronic charting system from SevenCs Germany. A security vulnerability exists in SevenCs ORCA G2 version 2.0.1.35, which stems from a competing condition in the license management logic that could lead to elevated privileges...
CVE-2025-61037
SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22) is affected by a local TOCTOU race in the license management logic. The regService process (SYSTEM) creates a fixed directory and writes files without verifying NTFS reparse points; an attacker can race to replace the directory with a junction to a u...
CVE-2025-64699
An incorrect NULL DACL issue exists in SevenCs ORCA G2 2.0.1.35 EC2007 Kernel v5.22. The regService process, which runs with SYSTEM privileges, applies a Security Descriptor to a device object with no explicitly configured DACL. This condition could allow an attacker to perform unauthorized raw...
SevenCs ORCA G2 安全漏洞
SevenCs ORCA G2 is an electronic charting system from SevenCs, Germany. A security vulnerability exists in SevenCs ORCA G2 version 2.0.1.35, which originates from the regService process applying a security descriptor without an explicitly configured DACL, and could result in system interruption,...
PT-2025-54358
Name of the Vulnerable Software and Affected Versions SevenCs ORCA G2 version 2.0.1.35 EC2007 Kernel v5.22 Description A local privilege escalation issue exists due to a Time-of-Check Time-of-Use TOCTOU race condition in the license management logic. The regService process, running with SYSTEM...
CVE-2025-64699
CVE-2025-64699 affects SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22). The regService process, running with SYSTEM privileges, applies a Security Descriptor to a device object that has no explicitly configured DACL. This can allow an attacker to perform unauthorized raw disk operations, potential...
EUVD-2025-117517
Malicious code in agreeable-pink-orca npm...
Malicious code in agreeable-pink-orca (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975f42095004558e2c264eef50b6062220d338eefbc544e78141142bf6a25787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in jittery_orca_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0265506e0e75ee69a9ef8d2d8a89632bc6c5e5b9c25d60faae5447db3811ae48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-90139
Malicious code in marineorcaz3n npm...
EUVD-2025-91308
Malicious code in headorcaz3n npm...
EUVD-2025-74164
Malicious code in tenderorcamagenta-62 npm...
EUVD-2025-74468
Malicious code in meaningfulorcateal-81 npm...
EUVD-2025-74395
Malicious code in originalorcasilver-60 npm...
EUVD-2025-77313
Malicious code in collectiveorca-appteadev npm...
EUVD-2025-75557
Malicious code in spottyorca-smiletea npm...
Malicious code in spotty_orca-smiletea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01cb2ee60a2492fa0868cc9248e5c0b5e4755b6f660810423e4655bc066c9ef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...