46 matches found
ThreatExchange
Projects in this Repository This repository originally started as code to support Meta's ThreatExchange API, but over time has grown to include a number of projects to support signal exchange and content moderation in general. Below are a list of sub-projects. PDQ Image Hashing and Similarity...
ms-msdt-vulnerability-pdq-package
ms-msdt-vulnerability-pdq-package Necesitarás todos los archivos para que el paquete funcione correctamente "de fábrica". Si no tienes PDQ Inventory, elimina el paso de escaneo del paquete antes de ejecutarlo. Este paquete ahora busca la clave de registro search-ms además de la clave ms-msdt...
EUVD-2017-18563
Malware in sbrugna...
EUVD-2023-35536
Malicious code in bioql PyPI...
CVE-2025-52094
Insecure Permissions vulnerability in PDQ Smart Deploy V.3.0.2040 allows a local attacker to execute arbtirary code via the \HKLM\SYSTEM\Setup\SmartDeploy component...
CVE-2025-52094
Insecure Permissions vulnerability in PDQ Smart Deploy V.3.0.2040 allows a local attacker to execute arbtirary code via the \HKLM\SYSTEM\Setup\SmartDeploy component...
CVE-2025-52095
An issue in PDQ Smart Deploy V.3.0.2040 allows an attacker to escalate privileges via the Credential encryption routines in SDCommon.dll...
PDQ Smart Deploy 安全漏洞
PDQ Smart Deploy is a Windows device imaging and deployment software from PDQ Corporation. A security vulnerability exists in PDQ Smart Deploy version 3.0.2040, which stems from a flaw in the credential encryption routines in SDCommon.dll that could lead to elevation of privilege...
CVE-2025-52095: Insufficiently Protected Credentials
An issue in PDQ Smart Deploy V.3.0.2040 allows an attacker to escalate privileges via the Credential encryption routines in SDCommon.dll...
CVE-2025-52094: Incorrect Permission Assignment for Critical Resource
Insecure Permissions vulnerability in PDQ Smart Deploy V.3.0.2040 allows a local attacker to execute arbtirary code via the \HKLM\SYSTEM\Setup\SmartDeploy component...
CVE-2025-52095
A security vulnerability exists in PDQ Smart Deploy V.3.0.2040 , a Windows device imaging and deployment software. The flaw is located within the credential encryption routines in the SDCommon.dll component, which could allow an attacker to achieve elevation of privilege . Currently, there is no ...
PDQ Smart Deploy 安全漏洞
PDQ Smart Deploy is a Windows device imaging and deployment software from PDQ Corporation. A security vulnerability exists in PDQ Smart Deploy version 3.0.2040, which stems from improper permissions on the HKLMSYSTEMSetupSmartDeploy component, and could lead to execution of arbitrary code by a...
CVE-2025-52095
An issue in PDQ Smart Deploy V.3.0.2040 allows an attacker to escalate privileges via the Credential encryption routines in SDCommon.dll...
Malicious code in @zalastax/nolb-pdq (npm)
The package @zalastax/nolb-pdq was found to contain malicious code...
MAL-2025-13115 Malicious code in @zalastax/nolb-pdq (npm)
The package @zalastax/nolb-pdq was found to contain malicious code...
CVE-2023-31221
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ransom Christofferson PDQ CSV plugin = 1.0.0 versions...
PDQ Deploy allows reuse of deleted credentials that can compromise a device and facilitate lateral movement
Overview PDQ Deploy is a service intended for usage by system administrators for the deployment of software or updates to targeted machines within their network. PDQ Deploy uses "run modes" to deploy software to their target devices. The run mode "Deploy User" insecurely creates credentials on th...
pdqfirewaterdamage.com Cross Site Scripting vulnerability OBB-3650935
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PDQ CSV <= 1.0.0 - Admin+ Stored Cross-Site Scripting
Description The plugin does not sanitize and escape some fields in the plugin settings, which could allow high-privilege users such as an administrator to inject arbitrary web scripts even when the unfilteredhtml capability is disallowed for example in a multisite setup...