Lucene search
K

9048 matches found

Schneier on Security
Schneier on Security
added 2026/02/11 2:48 p.m.7 views

Rewiring Democracy Ebook is on Sale

I just noticed that the ebook version of Rewiring Democracy is on sale for $5 on Amazon, Apple Books, Barnes & Noble, Books A Million, Google Play, Kobo, and presumably everywhere else in the US. I have no idea how long this will last. Also, Amazon has a coupon that brings the hardcover price dow...

5.6AI score
Exploits0
CVE
CVE
added 2026/02/09 6:23 p.m.14 views

CVE-2026-24684

CVE-2026-24684 affects FreeRDP prior to 3.22.0. The RDPSND async playback thread can process queued PDUs after the channel is closed and internal state is freed, leading to a use-after-free in rdpsnd_treat_wave. This vulnerability impacts availability (high) with no confidentiality/integrity impa...

8.7CVSS5.6AI score0.00018EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2026/02/08 7:16 p.m.5 views

CVE-2026-2175

A weakness has been identified in D-Link DIR-823X 250416. This vulnerability affects the function sub420618 of the file /goform/setupnp. This manipulation of the argument upnpenable causes os command injection. Remote exploitation of the attack is possible. The exploit has been made available to...

8.6CVSS0.00653EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/02/05 4:13 p.m.24 views

CVE-2020-37129 Memu Play 7.1.3 - Insecure Folder Permissions

Memu Play 7.1.3 contains an insecure folder permissions vulnerability that allows low-privileged users to modify the MemuService.exe executable. Attackers can replace the service executable with a malicious file during system restart to gain SYSTEM-level privileges by exploiting unrestricted file...

9.8CVSS0.00018EPSS
Exploits0References3
EUVD
EUVD
added 2026/02/05 4:13 p.m.2 views

EUVD-2020-31025

Memu Play 7.1.3 contains an insecure folder permissions vulnerability that allows low-privileged users to modify the MemuService.exe executable. Attackers can replace the service executable with a malicious file during system restart to gain SYSTEM-level privileges by exploiting unrestricted file...

9.8CVSS5.4AI score0.00018EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/05 4:13 p.m.3 views

CVE-2020-37129

Memu Play 7.1.3 contains an insecure folder permissions vulnerability that allows low-privileged users to modify the MemuService.exe executable. Attackers can replace the service executable with a malicious file during system restart to gain SYSTEM-level privileges by exploiting unrestricted file...

9.8CVSS5.4AI score0.00018EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2026/02/05 4:13 p.m.8 views

CVE-2020-37129

CVE-2020-37129 affects Memu Play 7.1.3. The vulnerability is due to insecure folder permissions that let a low-privileged user modify MemuService.exe, enabling replacement with a malicious file at system restart to gain SYSTEM-level privileges. Connected sources corroborate the issue and describe...

9.8CVSS5.4AI score0.00018EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/02/05 4:13 p.m.4 views

CVE-2020-37129 Memu Play 7.1.3 - Insecure Folder Permissions

Memu Play 7.1.3 contains an insecure folder permissions vulnerability that allows low-privileged users to modify the MemuService.exe executable. Attackers can replace the service executable with a malicious file during system restart to gain SYSTEM-level privileges by exploiting unrestricted file...

9.8CVSS5.4AI score0.00018EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/02/05 12:0 a.m.3 views

PT-2026-6573

Name of the Vulnerable Software and Affected Versions Memu Play version 7.1.3 Description The software contains an insecure folder permissions issue. Low-privileged users can modify the MemuService.exe executable. An attacker can replace the service executable with a malicious file during system...

9.8CVSS5.5AI score0.00018EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2026/02/05 12:0 a.m.1 views

EPSON Printers Incorrect Default Permissions (CVE-2020-12695)

The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue. This plugin only works with Tenable.ot...

7.8CVSS6.8AI score0.03982EPSS
Exploits3References17
CNNVD
CNNVD
added 2026/02/05 12:0 a.m.4 views

Microvirt Memu Play 安全漏洞

Microvirt Memu Play is an Android emulator developed by Microvirt Corporation. The version 7.1.3 of Microvirt Memu Play contains a security vulnerability. This vulnerability stems from insecure folder permissions, which may lead to permission escalation...

9.8CVSS5.8AI score0.00018EPSS
Exploits0References3
Redos
Redos
added 2026/02/02 12:0 a.m.4 views

ROS-20260202-73-0044

A vulnerability in the amdpowerplay.c component of the Linux operating system kernel is related to pointer dereferencing errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

5.5CVSS5.5AI score0.00054EPSS
Exploits0
Android Security Bulletins
Android Security Bulletins
added 2026/02/02 12:0 a.m.17 views

Android Security Bulletin—February 2026Stay organized with collectionsSave and categorize content based on your preferences.

This Android Security Bulletin contains details of security vulnerabilities that affect Android devices. Security patch levels of 2026-02-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Within 48 hours afte...

6.5AI score
Exploits0
RedhatCVE
RedhatCVE
added 2026/01/27 3:23 p.m.2 views

CVE-2025-59109

The dormakaba registration units 9002 PIN Pad Units have an exposed UART header on the backside. The PIN pad is sending every button press to the UART interface. An attacker can use the interface to exfiltrate PINs. As the devices are explicitly built as Plug-and-Play to be easily replaced, an...

5.1CVSS5.9AI score0.00034EPSS
Exploits0References1
NVD
NVD
added 2026/01/26 10:16 a.m.3 views

CVE-2025-59109

The dormakaba registration units 9002 PIN Pad Units have an exposed UART header on the backside. The PIN pad is sending every button press to the UART interface. An attacker can use the interface to exfiltrate PINs. As the devices are explicitly built as Plug-and-Play to be easily replaced, an...

5.1CVSS0.00034EPSS
Exploits0References4
EUVD
EUVD
added 2026/01/26 10:6 a.m.2 views

EUVD-2025-206377

The dormakaba registration units 9002 PIN Pad Units have an exposed UART header on the backside. The PIN pad is sending every button press to the UART interface. An attacker can use the interface to exfiltrate PINs. As the devices are explicitly built as Plug-and-Play to be easily replaced, an...

5.1CVSS5.9AI score0.00034EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/26 10:6 a.m.1 views

CVE-2025-59109

The dormakaba registration units 9002 PIN Pad Units have an exposed UART header on the backside. The PIN pad is sending every button press to the UART interface. An attacker can use the interface to exfiltrate PINs. As the devices are explicitly built as Plug-and-Play to be easily replaced, an...

5.1CVSS5.9AI score0.00034EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/01/26 12:0 a.m.3 views

PT-2026-4759

Name of the Vulnerable Software and Affected Versions dormakaba registration units 9002 PIN Pad Units affected versions not specified Description The dormakaba registration units 9002 PIN Pad Units have an exposed UART header. The PIN pad transmits every button press through this UART interface. ...

5.1CVSS7.4AI score0.00034EPSS
Exploits0References9
NVD
NVD
added 2026/01/25 2:15 p.m.4 views

CVE-2020-36937

Microvirt MEMU Play 3.7.0 contains an unquoted service path vulnerability in the MEmusvc Windows service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with elevated LocalSystem...

8.5CVSS0.00023EPSS
Exploits0References3
CVE
CVE
added 2026/01/25 2:1 p.m.10 views

CVE-2020-36937

The CVE-2020-36937 entry concerns Microvirt MEMU Play 3.7.0, where the MEmusvc Windows service has an unquoted service path. This allows a local attacker to potentially execute arbitrary code by injecting a malicious executable placed in the unquoted path, with elevated LocalSystem privileges. Do...

8.5CVSS5.9AI score0.00023EPSS
Exploits0References3
Rows per page
Query Builder