6554 matches found
CVE-2025-5191 Unquoted Search Path Vulnerability in the Utility for Industrial Computers (Windows)
An Unquoted Search Path vulnerability has been identified in the utility for Moxa’s industrial computers Windows. Due to the unquoted path configuration in the SerialInterfaceService.exe utility, a local attacker with limited privileges could place a malicious executable in a higher-priority...
CVE-2025-5191
CVE-2025-5191 describes an Unquoted Search Path vulnerability in Moxa’s Windows SerialInterfaceService.exe used by industrial computers. The unquoted path could allow a local, low-privilege attacker to place a malicious executable in a higher-priority search directory, and when the Serial Interfa...
PT-2025-34600 · Moxa · Moxa Industrial Computers
Name of the Vulnerable Software and Affected Versions: Moxa industrial computers Windows affected versions not specified Description: An unquoted search path vulnerability exists in the SerialInterfaceService.exe utility. This allows a local attacker with limited privileges to place a malicious...
Exploit for Use After Free in Apple Ipados
Glass Cage: Zero-Click PNG Exploit Chain for iOS 18.2.1 CVE...
Exploit for Path Traversal in Rarlab Winrar
🚨 CVE-2025-8088 WinRAR Exploit Tool !Pythonhttps://img.s...
Malicious PyPI and npm Packages Discovered Exploiting Dependencies in Supply Chain Attacks
Cybersecurity researchers have discovered a malicious package in the Python Package Index PyPI repository that introduces malicious behavior through a dependency that allows it to establish persistence and achieve code execution. The package, named termncolor , realizes its nefarious functionalit...
Linux Distros Unpatched Vulnerability : CVE-2020-1776
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When an agent user is renamed or set to invalid the session belonging to the user is keept active. The session can not be used to access ticket data in the case...
Exploit for Path Traversal in Rarlab Winrar
PoC for CVE-2025-8088: Path Traversal in WinRAR Vulnerabil...
Exploit for Path Traversal in Rarlab Winrar
WinRAR Path Traversal Exploit CVE-2025-8088 - Multi-Depth Pa...
Linux Distros Unpatched Vulnerability : CVE-2023-28161
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If temporary one-time permissions, such as the ability to use the Camera, were granted to a document loaded using a file: URL, that permission persisted in that...
Malicious code in swa-persistence (npm)
The package swa-persistence was found to contain malicious code...
MAL-2025-34264 Malicious code in swa-persistence (npm)
The package swa-persistence was found to contain malicious code...
New PS1Bot Malware Campaign Uses Malvertising to Deploy Multi-Stage In-Memory Attacks
Cybersecurity researchers have discovered a new malvertising campaign that's designed to infect victims with a multi-stage malware framework called PS1Bot. "PS1Bot features a modular design, with several modules delivered used to perform a variety of malicious activities on infected systems,...
BIT-LIBPHP-2023-3823 Security issue with external entity loading in XML without enabling it
In PHP versions 8.0. before 8.0.30, 8.1. before 8.1.22, and 8.2. before 8.2.8 various XML functions rely on libxml global state to track configuration variables, like whether external entities are loaded. This state is assumed to be unchanged unless the user explicitly changes it by calling...
PT-2025-32555
Name of the Vulnerable Software and Affected Versions: Lenovo 510 FHD Webcam versions prior to 4.8.0 Lenovo Performance FHD Webcam versions prior to 4.8.0 Description: Linux webcams can be compromised and become a persistent malware vector. The flaw allows for re-infection even after an operating...
Linux Distros Unpatched Vulnerability : CVE-2025-8039
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In some cases search terms persisted in the URL bar even after navigating away from the search page. This vulnerability was fixed in Firefox 141, Firefox ESR...
Researchers Reveal ReVault Attack Targeting Dell ControlVault3 Firmware in 100+ Laptop Models
Cybersecurity researchers have uncovered multiple security flaws in Dell's ControlVault3 firmware and its associated Windows APIs that could have been abused by attackers to bypass Windows login, extract cryptographic keys, as well as maintain access even after a fresh operating system install by...
PT-2025-32327 · Undefined · Undefined
BREAKING: GRUB2 flaw CVE-2025-02725 in SUSE Linux enables pre-OS persistence. 🚨 Patch NOW: zypper patch --cve=CVE-2025-02725 Validate Secure Boot. Rebuild initramfs. Read more: 👉 https://t.co/0U2XsMxKqt https://t.co/kkKHlOi9JT...
ReVault! When your SoC turns against you…
Talos reported 5 vulnerabilities to Broadcom and Dell affecting both the ControlVault3 Firmware and its associated Windows APIs that we are calling "ReVault". 100+ models of Dell Laptops are affected by this vulnerability if left unpatched. The ReVault attack can be used as a post-compromise...