UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from an unchecked command index, which could lead to local elevation of privilege...

MediaTek Modem 资源管理错误漏洞

MediaTek Modem is a 5G modem technology from MediaTek, a Chinese company. A resource management error vulnerability exists in MediaTek Modem that stems from memory corruption due to reuse after release, which could lead to local elevation of privilege...

MediaTek Modem 资源管理错误漏洞

MediaTek Modem is a 5G modem technology from MediaTek, a Chinese company. A resource management error vulnerability exists in MediaTek Modem that stems from memory corruption due to reuse after release, which could lead to local elevation of privilege...

Tenda AC10 安全漏洞

Tenda AC10 is a dual-band Gigabit wireless router launched by Shenzhen Jixiang Tenda Technology Co., Ltd, mainly for 200M and above fiber optic users. Tenda AC10 suffers from an elevation of privilege vulnerability, which stems from an ate service input validation flaw that results in elevation t...

Acronis Cyber Protect Cloud Agent 安全漏洞

Acronis Cyber Protect Cloud Agent is a cloud agent from Acronis Switzerland. A security vulnerability exists in versions prior to Acronis Cyber Protect Cloud Agent build 40734, which stems from insecure folder permissions that could lead to local elevation of privileges...

Dell ThinOS 10 安全漏洞

DELL ThinOS 10 is a next-generation thin client operating system from Dell designed for virtual desktop infrastructure VDI to improve security, efficiency and user experience. DELL ThinOS 10 suffers from an elevation of privilege vulnerability that stems from improper assignment of critical...

Cisco UCS Manager Software 操作系统命令注入漏洞

Cisco UCS Manager Software is a device management software from Cisco. Cisco UCS Manager Software suffers from an operating system command injection vulnerability that stems from insufficient validation of command parameter input, which could lead to elevation of privilege...

Dell ThinOS 10 参数注入漏洞

DELL ThinOS 10 is a next-generation thin client operating system from Dell designed for virtual desktop infrastructure VDI to improve security, efficiency and user experience. DELL ThinOS 10 suffers from a parameter injection vulnerability that stems from improper parameter delimiter...

CVE-2025-22409

In rfcsendbufuih of rfctsframes.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Agiloft 安全漏洞

Agiloft is a contract management platform from Agiloft Corporation in the United States. A security vulnerability exists in Agiloft Release 28 that stems from the use of default credentials by multiple accounts, which could lead to local elevation of privilege...

Apache Cassandra 安全漏洞

Apache Cassandra is a distributed Nosql database from the Apache USA Foundation. A security vulnerability exists in Apache Cassandra versions 3.0.30, 3.11.17, 4.0.16, 4.1.7, and 5.0.2, which stems from an improperly defined privilege that could lead to elevation of privilege...

Moxa Utility for DRP-A100 Series 安全漏洞

Moxa Utility for DRP-A100 Series is a software tool from Moxa Corporation, Taiwan, China, that simplifies the configuration and management of the device. A security vulnerability exists in Moxa Utility for DRP-A100 Series, which stems from an un-referenced path configuration in...

Rebuild 安全漏洞

Rebuild is a highly customizable enterprise management system from getrebuild open source. A security vulnerability exists in Rebuild version 4.0.4, which stems from a flaw in the filtering code of the RebuildWebInterceptor class that could lead to information disclosure or elevation of privilege...

PDQ Smart Deploy 安全漏洞

PDQ Smart Deploy is a Windows device imaging and deployment software from PDQ Corporation. A security vulnerability exists in PDQ Smart Deploy version 3.0.2040, which stems from a flaw in the credential encryption routines in SDCommon.dll that could lead to elevation of privilege...

Exagrid EX10 安全漏洞

Exagrid EX10 is a backup storage server from Exagrid Corporation, USA. A security vulnerability exists in Exagrid EX10 version 7.0.1p02, which originates from the presence of XML external entity injection in the /init API endpoint, which could lead to information disclosure and elevation of...

CVE-2025-6181

The StrongDM Windows service incorrectly handled input validation. Authenticated attackers could potentially exploit this leading to privilege escalation...

Intel Distribution for Python Improper Privileges Vulnerability

Intel Distribution for Python is the official Python distribution from Intel, designed to improve the performance of Python code by optimizing high-performance mathematical and scientific computing libraries, with support for multi-core CPUs and the latest instruction set acceleration. Intel...

Intel 800 Series Ethernet Elevation of Privilege Vulnerability

Intel 800 Series Ethernet is a new generation of high-speed Ethernet technology from Intel that supports 25GbE and 100GbE speeds and is backward compatible with 10GbE. An elevation of privilege vulnerability exists in Intel 800 Series Ethernet, which stems from insufficient control flow managemen...

WordPress plugin JobZilla - Job Board WordPress Theme 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

AOMEI Backupper Workstation 后置链接漏洞

AOMEI Backupper Workstation is a system backup and restore software from China's AOMEI Technology AOMEI. AOMEI Backupper Workstation suffers from a backlink vulnerability that stems from improper link following and could lead to local elevation of privilege...