PT-2025-9618

Name of the Vulnerable Software and Affected Versions OpenHarmony versions prior to 5.0.2 Description The issue allows a local attacker to execute arbitrary code in pre-installed apps through an out-of-bounds write. This can be exploited only in restricted scenarios. Recommendations For versions...

PT-2025-9617

Name of the Vulnerable Software and Affected Versions OpenHarmony versions prior to 5.0.2 excluding 5.0.2 and later Description The issue allows a local attacker to execute arbitrary code in pre-installed apps through use after free. This can be exploited only in restricted scenarios...

PT-2025-9613

Name of the Vulnerable Software and Affected Versions OpenHarmony versions prior to 5.0.2 excluding 5.0.2 and later Description The issue allows a local attacker to execute arbitrary code in pre-installed apps through use after free. This can be exploited only in restricted scenarios...

CVE-2025-23240: Out-of-bounds Write

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios...

CVE-2025-0587: Integer Overflow or Wraparound

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. This vulnerability can be exploited only in restricted scenarios...

CVE-2025-20024: Integer Overflow or Wraparound

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. This vulnerability can be exploited only in restricted scenarios...

CVE-2025-24301: Use After Free

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios...

PT-2025-9616

Name of the Vulnerable Software and Affected Versions OpenHarmony versions prior to 5.0.2 Description The issue allows a local attacker to execute arbitrary code in pre-installed apps through an out-of-bounds write. This can be exploited only in restricted scenarios. Recommendations For versions...

CVE-2025-23409: Use After Free

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios...

Linux Distros Unpatched Vulnerability : CVE-2018-5389

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of IKE...

PT-2025-20491

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.14.0-rc4-g5394eea10651 Description A vulnerability in the Linux kernel has been resolved, specifically in the mtd: rawnand: brcmnand module. The issue caused a warning on PM resume due to an uninitialized struc...

Mozilla多款产品 安全漏洞

Mozilla Firefox and others are products of the Mozilla Foundation in the U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of e-mail client software that is separate from the Mozilla...

CVE-2025-23420: Out-of-bounds Write

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios...

Oxidized Web 路径遍历漏洞

Oxidized Web is ytti individual developer's Web UI + RESTful API for Oxidized. A security vulnerability exists in Oxidized Web versions prior to 0.15.0 that stems from a RANCID migration page that allows an unauthenticated user to take control of a Linux user account running oxidized-web...

WordPress Pre Order Addon for WooCommerce plugin<= 1.0.7 - Reflected Cross-Site Scripting

Reflected Cross-Site Scripting vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Pre Order Addon for WooCommerce – Advance Order/Backorder Plugin versions = 2.2...

CVE-2025-1814

A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is some unknown functionality of the file /goform/WifiExtraSet. The manipulation of the argument wpapskcrypto leads to stack-based buffer overflow. The attack may be launched remotel...

AZL-57518 CVE-2025-1744 affecting package fltk 1.3.5-4

Out-of-bounds Write vulnerability in radareorg radare2 allows heap-based buffer over-read or buffer overflow.This issue affects radare2: before 5.9.9...

OpenCart 跨站脚本漏洞

OpenCart is an open source e-commerce system by the Chinese OpenCart team. The system provides modules for product reviews, product ratings, and product additions. A cross-site scripting vulnerability exists in OpenCart versions prior to 4.1.0. An attacker can exploit this vulnerability to modify...

CVE-2025-1755

MongoDB Compass may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privileges, when a crafted file is stored in C:\nodemodules. This issue affects MongoDB Compass prior to 1.42.1...

CVE-2025-1756 MongoDB Shell may be susceptible to local privilege escalation in Windows

mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\nodemodules. This issue affects mongosh prior to 2.3.0...