616690 matches found
CVE-2026-94425 Moore Threads MTT S80 Driver Package IOCTL mtdispkm64.sys sub_140006F0C privileges management
A vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the function sub140006F0C in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation results in improper privilege management. Attacking locally is a requirement. The vendor was...
CVE-2026-94425
CVE-2026-94425 affects the Moore Threads MTT S80 Driver Package 340.150 , specifically the IOCTL Handler in the driver library mtdispkm64.sys (function sub_140006F0C). The root cause is improper privilege management , allowing a local attacker with low privileges to escalate access. The CVSS 3.1 ...
CVE-2026-94425 Moore Threads MTT S80 Driver Package IOCTL mtdispkm64.sys sub_140006F0C privileges management
A vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the function sub140006F0C in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation results in improper privilege management. Attacking locally is a requirement. The vendor was...
CVE-2026-94424
A vulnerability has been found in Moore Threads MTT S80 Driver Package up to 340.150. Impacted is the function sub140001000 in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The vendor was...
CVE-2026-94588
An argument injection vulnerability exists in Proxmox Mail Gateway (pmg-api) within the package changelog retrieval functionality . The root cause is improper handling of user-supplied input passed to the underlying apt-get command when fetching package changelogs. Exploitation requires authentic...
CVE-2026-94588
In Proxmox pmg-api, an argument injection vulnerability exists in the package changelog retrieval functionality. This is caused by improper handling of user-supplied input passed to the underlying apt-get command when fetching package changelogs. It requires authentication but can be exploited in...
CVE-2026-94588
In Proxmox pmg-api, an argument injection vulnerability exists in the package changelog retrieval functionality. This is caused by improper handling of user-supplied input passed to the underlying apt-get command when fetching package changelogs. It requires authentication but can be exploited in...
CVE-2026-94424
CVE-2026-94424 affects the Moore Threads MTT S80 Driver Package up to version 340.150 . The vulnerable component is the function sub_140001000 in the kernel-mode library mtdispkm64.sys , specifically within the IOCTL Handler , where a heap-based buffer overflow can be triggered through manipulati...
CVE-2026-94424 Moore Threads MTT S80 Driver Package IOCTL mtdispkm64.sys sub_140001000 heap-based overflow
A vulnerability has been found in Moore Threads MTT S80 Driver Package up to 340.150. Impacted is the function sub140001000 in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The vendor was...
CVE-2026-94424 Moore Threads MTT S80 Driver Package IOCTL mtdispkm64.sys sub_140001000 heap-based overflow
A vulnerability has been found in Moore Threads MTT S80 Driver Package up to 340.150. Impacted is the function sub140001000 in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The vendor was...
Malicious code in @asdfaskdjfksadhfkasf/nadaver2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa99497d70b8eae199242d576c111b7b351efcf5d81d613e3f7b43eec257f27 The package declares a preinstall lifecycle script that executes index.js on npm install. index.js uses childprocess.exec to run a curl command whose...
ROOT-APP-PYPI-CVE-2026-31958 CVE-2026-31958 in tornado - Patched by Root
Root has patched CVE-2026-31958 in the tornado package for Root:PyPI. Multiple fixed versions available...
EUVD-2026-83974
Conda is a system-level binary package and environment manager that runs on major operating systems and platforms. Prior to 26.5.2, parseentrypointdef in conda/common/path/python.py accepted an unvalidated entry-point command from a noarch:python package's info/link.json metadata...
CVE-2026-68919 GoCD has stored XSS possible via forged package material comments on Stage/Job/VSM pages
GoCD is a continuous deliver server. From 13.3.0 until 26.1.0, GoCD does not correctly encode and escape malicious material modification comments that mimic the special trackback format used by package materials when rendering the Stage Detail, Job/Build Detail, Value Stream Map, and Pipeline...
CVE-2026-55071 MCP-for-Stata: Stata Command Injection via Unsanitized `package` in `ado_package_install`
MCP-for-Stata is a MCP server for integrating Stata into agent loops with a safety-first design. Prior to version 1.19.0, the adopackageinstall MCP tool in stata-mcp concatenates user-controlled input directly into a Stata command string without any validation or sanitization. An attacker who can...
ROOT-APP-NPM-CVE-2025-13033 CVE-2025-13033 in nodemailer - Patched by Root
Root has patched CVE-2025-13033 in the nodemailer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-268H-HP4C-CRQ3 GHSA-268h-hp4c-crq3 in nodemailer - Patched by Root
Root has patched GHSA-268h-hp4c-crq3 in the nodemailer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-P6GQ-J5CR-W38F GHSA-p6gq-j5cr-w38f in nodemailer - Patched by Root
Root has patched GHSA-p6gq-j5cr-w38f in the nodemailer package for Root:npm. Multiple fixed versions available...