15009 matches found
NSecKrnl driver terminates system processes with crafted IOCTL requests
RISK EVALUATION NSecsoft 'NSecKrnl' is a Windows driver that allows a local, authenticated attacker to terminate processes owned by other users, including SYSTEM and Protected Processes by issuing crafted IOCTL requests to the driver. 2. RECOMMENDED PRACTICES Enable the Windows Vulnerable Driver...
Jenkins Automation Server Unauthorized Access
The vulnerability of the Jenkins automation server is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information...
ROS-20260113-7333
A vulnerability in the drm/amd/display component of the Linux kernel is related to pointer dereferencing errors. Exploitation of the vulnerability may allow an attacker to affect the availability of protected information...
PT-2026-2558
Name of the Vulnerable Software and Affected Versions NSecsoft 'NSecKrnl' versions affected versions not specified Description The 'NSecKrnl' Windows driver has a flaw that allows a local, authenticated attacker to terminate processes owned by other users, including SYSTEM and Protected Processes...
Vasion Print Virtual Appliance Host Print Application Unauthorized Access
The vulnerability of the Vasion Print Virtual Appliance Host and Print Application software for process management, control, and organization is related to insufficient spatial separation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
PackageKit Idle Compromise
The vulnerability of the Idle function in the PackageKit package manager is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
CVE-2025-69271 Spectrum basic authentication in use
Insufficiently Protected Credentials vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX NetOps Spectrum: 24.3.13 and earlier...
CVE-2025-69271 Spectrum basic authentication in use
Insufficiently Protected Credentials vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX NetOps Spectrum: 24.3.13 and earlier...
Nextcloud: Email Enumeration via Password-Protected Share Identity Verification
The vulnerability allowed email enumeration through password-protected share identity verification. Requesting a password for an email share resulted in different response messages depending on whether the email address was the intended recipient, enabling confirmation of the share recipient...
ROS-20260112-7313
A vulnerability in the ofmodalias function in the drivers/of/module.c module of the Linux kernel is related to memory access outside of the allocated buffer. Exploitation of the vulnerability may allow a remote attacker to affect confidentiality, integrity and availability of protected informatio...
Lychee 安全漏洞
Lychee is a beautiful and easy to use photo management system from The Lychee Organisation open source. It is used to manage and share photos. A security vulnerability exists in Lychee versions prior to 7.1.0, which stems from an authorization flaw in the album password unlock feature that could...
Radware Cloud HTTP Request Handler Disclosure
The vulnerability of the HTTP GET Request Handler component in the Radware Cloud software firewall is related to access control errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information through a specially created HTTP request...
Radware Cloud Special Character Handler Disclosure
The vulnerability of the Special Character Handler component in the Radware Cloud software firewall is related to access control errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information through a specially created HTTP request...
LenelS2 NetBox Unauthorized Access
The vulnerability of the LenelS2 NetBox access control and event monitoring system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...
CVE-2025-14943
CVE-2025-14943 affects Blog2Social: Social Media Auto Post & Scheduler for WordPress. The vulnerability arises from a misconfigured authorization check in getShipItemFullText: it only verifies Subscriber-level read capability and a valid nonce, but does not confirm access permissions for the spec...
CVE-2025-14943 Blog2Social: Social Media Auto Post & Scheduler <= 8.7.2 - Incorrect Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 8.7.2. This is due to a misconfigured authorization check on the 'getShipItemFullText' function which only verifies that a user has the...
EUVD-2025-206273
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.2. An app may be able to access protected files within an App Sandbox container...
WordPress plugin Blog2Social 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
PT-2026-1759
Name of the Vulnerable Software and Affected Versions Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress versions prior to 8.7.2 Description The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is susceptible to exposure of sensitive information. This occurs...
