PT-2025-38064

Name of the Vulnerable Software and Affected Versions: Microsoft PC Manager affected versions not specified Description: Cleartext storage of sensitive information in Microsoft PC Manager allows an unauthorized attacker to bypass a security feature locally. Recommendations: At the moment, there i...

CVE-2025-49728: Cleartext Storage of Sensitive Information

Cleartext storage of sensitive information in Microsoft PC Manager allows an unauthorized attacker to bypass a security feature locally...

KLA88017 SB vulnerability in Microsoft Apps

Unspecified vulnerability was found in Microsoft PC Manager. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2025-49728 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-PC-Manager CVE list CVE-2025-49728...

CVE-2025-53795

Improper authorization in Microsoft PC Manager allows an unauthorized attacker to elevate privileges over a network...

Microsoft PC Manager Elevation of Privilege Vulnerability

Improper authorization in Microsoft PC Manager allows an unauthorized attacker to elevate privileges over a network...

KLA86899 PE vulnerability in Microsoft Apps

An elevation of privilege vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-53795 Exploitation Related products Microsoft-PC-Manager CVE list CVE-2025-53795 critical KB list Solution Install necessary updates...

CVE-2025-53795: Improper Authorization

Improper authorization in Microsoft PC Manager allows an unauthorized attacker to elevate privileges over a network...

CVE-2025-8098

An improper permission vulnerability was reported in Lenovo PC Manager that could allow a local attacker to escalate privileges...

CVE-2025-8098

An improper permission vulnerability was reported in Lenovo PC Manager that could allow a local attacker to escalate privileges...

Lenovo PC Manager 安全漏洞

Lenovo PC Manager is a PC management software from Lenovo China. A security vulnerability exists in Lenovo PC Manager, which stems from improper privileges and may result in local elevation of privileges...

CVE-2025-8098: Incorrect Default Permissions

An improper permission vulnerability was reported in Lenovo PC Manager that could allow a local attacker to escalate privileges...

Malicious code in @zalastax/nolb-pc (npm)

The package @zalastax/nolb-pc was found to contain malicious code...

MAL-2025-13711 Malicious code in @zalastax/nolb-react-pc (npm)

The package @zalastax/nolb-react-pc was found to contain malicious code...

MAL-2025-13093 Malicious code in @zalastax/nolb-pc (npm)

The package @zalastax/nolb-pc was found to contain malicious code...

MAL-2025-29491 Malicious code in poltergeist-ha-pc-power (npm)

The package poltergeist-ha-pc-power was found to contain malicious code...

CVE-2024-5477: Improper Restriction of Software Interfaces to Hardware Features

A potential security vulnerability has been identified in the System BIOS for some HP PC products which may allow escalation of privilege, arbitrary code execution, denial of service, or information disclosure via a physical attack that requires specialized equipment and knowledge. HP is releasin...

CVE-2012-10041

WAN Emulator v2.3 contains two unauthenticated command execution vulnerabilities. The result.php script passes unsanitized input from the pc POST parameter to shell_exec(), allowing remote command execution as the www-data user. Additionally, a SUID-root binary named dosu is vulnerable to command...

Linux Distros Unpatched Vulnerability : CVE-2023-1670

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA PC-card Ethernet driver was found.A local user could use this flaw to crash the system or...

CVE-2025-38421

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: pmf: Use device managed allocations If setting up smart PC fails for any reason then this can lead to a double free when unloading amd-pmf. This is because dev-buf was freed but never set to NULL and is again...

CVE-2025-36846: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in Eveo URVE Web Manager 27.02.2025. The application exposes a /internal/pc/vpro.php localhost endpoint to unauthenticated users that is vulnerable to OS Command Injection. The endpoint takes an input parameter that is passed directly into the shellexec function of PHP...