2830 matches found
PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element.
...
CVE-2025-11020
CVE-2025-11020 affects MarkAny SafePC Enterprise. A path traversal flaw can expose server information and potentially enable SQL Injection, with an accompanying risk of Unrestricted Upload of Dangerous Type files. Impacted versions include SafePC Enterprise 5.x.x and 7.0.0 through 7.0.1 on Window...
AS/400 Telnet 5250 terminal emulation clients, as implemented by (1) IBM client access, (2) Bosanova, (3) PowerTerm, (4) Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO (Start PC Organizer) command followed by STRPCCMD (Start PC command), as demonstrated by creating a backdoor account using REXEC.
...
CVE-2025-11233
Starting from Rust 1.87.0 and before Rust 1.89.0, the tier 3 Cygwin target x8664-pc-cygwin didn't correctly handle path separators, causing the standard library's Path API to ignore path components separated by backslashes. Due to this, programs compiled for Cygwin that validate paths could...
CVE-2025-11233: Improper Limitation of a Pathname to a Restricted Directory
Starting from Rust 1.87.0 and before Rust 1.89.0, the tier 3 Cygwin target x8664-pc-cygwin didn't correctly handle path separators, causing the standard library's Path API to ignore path components separated by backslashes. Due to this, programs compiled for Cygwin that validate paths could...
VulnCheck KEV: CVE-2022-37932
A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. The vulnerability could be remotely exploited to allow authentication bypass. HPE has made the following software updates to resolve the vulnerability in...
Microsoft PC Manager Security Feature Bypass Vulnerability (Sep 2025) - Windows
Microsoft PC Manager is prone to a security feature bypass vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
MAL-2025-47856 Malicious code in pc-analytics-promotion-creation-client (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4d66ab8f0d38376b6ec23e7703446b3c1d3849127ae2eb86050e41db25563bc Any computer that has this package installed or running should be considered...
Novakon P series 安全漏洞
Novakon P series is a series of industrial panel PC operation pages from Taiwan, China-based Speedcom Novakon. A security vulnerability exists in the Novakon P series version V2001.A.C518o2, which stems from improper privilege management and could allow an attacker to gain root privileges...
CVE-2025-49728
Cleartext storage of sensitive information in Microsoft PC Manager allows an unauthorized attacker to bypass a security feature locally...
CVE-2025-57452
The realme BackupRestore app (version 15.1.12_2810c08_250314 ) is vulnerable to a security flaw caused by improper URI scheme handling within the com.coloros.pc.PcToolMainActivity component. A local attacker can exploit this by sending crafted ADB intents , potentially leading to an application c...
CVE-2025-57452
In realme BackupRestore app v15.1.122810c08250314, improper URI scheme handling in com.coloros.pc.PcToolMainActivity allows local attackers to cause a crash and potential XSS via crafted ADB intents...
Malicious code in @pc-analytics-filter/core (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdfc2209384455df77ab889ef6aa71c136ff6c7c2f43bb529d93568e71917d2f Any computer that has this package installed or running should be considered...
CVE-2025-49728
Cleartext storage of sensitive information in Microsoft PC Manager allows an unauthorized attacker to bypass a security feature locally...
CVE-2025-49728
Cleartext storage of sensitive information in Microsoft PC Manager allows an unauthorized attacker to bypass a security feature locally...
CVE-2025-49728 Microsoft PC Manager Security Feature Bypass Vulnerability
...
CVE-2025-49728
Microsoft PC Manager is affected by CVE-2025-49728, a vulnerability in which cleartext storage of sensitive information could allow a local attacker to bypass a security feature. The CVSS 3.1 vector indicates local access, low attack complexity, no user interaction, and no privileges required, wi...
CVE-2025-49728 Microsoft PC Manager Security Feature Bypass Vulnerability
...
Microsoft PC Manager Security Feature Bypass Vulnerability
Cleartext storage of sensitive information in Microsoft PC Manager allows an unauthorized attacker to bypass a security feature locally...
Microsoft PC Manager 安全漏洞
Microsoft PC Manager is a computer management software from Microsoft USA that allows one-click acceleration, system space management, pop-up window management, and full health check. A security vulnerability exists in Microsoft PC Manager that originates from storing sensitive information in cle...