852 matches found
EUVD-2022-40511
Malicious code in bioql PyPI...
EUVD-2024-20854
Malicious code in bioql PyPI...
EUVD-2025-24650
Malicious code in bioql PyPI...
PT-2025-40008
Name of the Vulnerable Software and Affected Versions Money Making Opportunity versions prior to v0.8.17+commit.8df45f5f Description A flaw exists in the transfer function of a smart contract used by Money Making Opportunity, an Ethereum ERC721 Non-Fungible Token NFT project. This allows for the...
CVE-2025-48550
In testGrantSlicePermission of SliceManagerTest.java, there is a possible permanent denial of service due to a path traversal error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48542
The Google Android operating system is vulnerable to a permanent denial of service (DoS) due to a resource exhaustion flaw in multiple functions within the AccountManagerService.java module. An attacker can exploit this vulnerability to trigger a local denial of service without requiring addition...
CVE-2025-26449
Google Android is susceptible to a denial-of-service vulnerability caused by uncontrolled resource consumption . An attacker can exploit this flaw to cause a local denial of service without requiring additional execution privileges or user interaction. While the provided documents confirm the vul...
XWiki PDF export jobs store sensitive cookies unencrypted in job statuses
Impact The PDF export uses a background job that runs on the server-side. Jobs like this have a status that is serialized in the permanent directory when the job is finished. The job status includes the job request. The PDF export job request is initialized, before the job starts, with some conte...
CVE-2025-55194
Part-DB pre-1.17.3 allows any authenticated user to upload a profile picture with a misleading file extension (for example .jpg.txt), triggering a persistent 500 Internal Server Error when viewing or editing the user profile. This creates a Denial of Service in the user management UI for both use...
Priv2Admin
This repository, Priv2Admin, is an exploitation path that allows users to misuse Windows privileges to elevate their rights within the OS. The repository lists various Windows privileges and their corresponding impact, tools, execution paths, and remarks. The privileges include...
ASB-A-387498139
In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-24457
In JetBrains YouTrack before 2024.3.55417 permanent tokens could be exposed in logs...
CVE-2022-20143
In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-...
CVE-2021-25452
An improper input validation vulnerability in loading graph file in DSP driver prior to SMR Sep-2021 Release 1 allows attackers to perform permanent denial of service on the device...
Privilege Escalation in Admin Management in Grafana
An access control vulnerability was discovered in Grafana where an Organization administrator could permanently delete the Server administrator account. This vulnerability exists in the DELETE /api/org/users/ endpoint. The vulnerability can be exploited when: Impact: This vulnerability is fixed i...
Malicious code in carcandofilex (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d04f8661d47623c323ee795cb954afb6a58fcaaae0b911beb0f6752004996496 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2025-12064 · Lunary · Lunary
Name of the Vulnerable Software and Affected Versions: lunary-ai/lunary versions prior to 1.5.9 Description: The issue concerns a lack of proper access control in the /v1/evaluators/ endpoint, allowing low-privilege users to delete evaluator data by sending a DELETE request. This can cause...
Malicious code in sparo-real-repo-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93d18b364aaf7362713190f03898dae9466135f12296f1c8384d269df6910bc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
