HarmonyOS File Management Unauthorized Access

The vulnerability of the File Management module in the HarmonyOS operating system is related to insufficient protection of service data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Notepad HarmonyOS Unauthorized Access

The vulnerability of the Notepad module in the HarmonyOS operating system is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

HarmonyOS Startup Recovery Data Compromise

The vulnerability of the Startup Recovery module of the HarmonyOS operating system is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to compromise the confidentiality and accessibility of the protected information...

ROS-20251202-08

Vulnerability in the Dawn component of Google Chrome browser is related to writing beyond buffer boundaries. Exploitation exploitation of the vulnerability could allow an attacker acting remotely to affect the accessibility of protected information...

Dawn Component Data Compromise

The vulnerability of the Dawn component in the Google Chrome browser is related to writing beyond the buffer limit. Exploiting this vulnerability could allow a malicious actor to gain access to protected information...

JetBrains Hub Authentication Bypass

The vulnerability of the JetBrains Hub account management software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Google Chrome Internals Data Compromise

The vulnerability of Google Chrome’s Internals component relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

DA Component Privilege Escalation

The vulnerability of the DA component of MediaTek’s microprogramming software lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges and expose sensitive information...

search_item_ctrl_f() function in the Unauthorized Access

The vulnerability of the searchitemctrlf function in the src/smolagents/visionwebbrowser.py file of the Hugging Face Smolagents framework is related to insufficient validation of entered data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized...

JetBrains YouTrack Authentication Disclosure

The vulnerability of the JetBrains YouTrack project and task management software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to expose sensitive information through the feedback form...

Google Chrome V8 Engine Use-After-Free

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created HTML page...

SROOT Component Unauthorized Access

The vulnerability of the SROOT component in NVIDIA DGX OS workstations for AI systems, such as DGX Spark, is related to errors in boundary removal of critical data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

FortiOS Authentication Bypass

The vulnerabilities of the FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow a malicious actor, operating remotely, to gain unauthorized access to...

CVE-2024-32388

CVE-2024-32388 affects Kerlink KerOS prior to 5.12. The root cause is a firewall misconfiguration that causes devices to incorrectly accept specially crafted UDP packets, enabling an attacker to bypass the firewall and access UDP-based services that would otherwise be protected. The connected doc...

PT-2025-48466

Due to a firewall misconfiguration, Kerlink devices running KerOS prior to 5.12 incorrectly accept specially crafted UDP packets. This allows an attacker to bypass the firewall and access UDP-based services that would otherwise be protected...

Exploit for CVE-2025-13315

🚨 CVE-2025-13315: Authentication Bypass Alert !Critical Twon...

CVE-2025-33187

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain access to SoC protected areas. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, denial of service, or escalation of...

CVE-2025-59373

A local privilege escalation vulnerability exists in the restore mechanism of ASUS System Control Interface. It can be triggered when an unprivileged actor copies files without proper validation into protected system paths, potentially leading to arbitrary files being executed as SYSTEM. For more...

NVIDIA Isaac GR00T Privilege Escalation

The vulnerability of the NVIDIA Isaac GR00T platform for developing universal humanoid robots is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, enhance their privileges, and gain unauthorized access to protected...

Keyless Entry: Breaking and Entering EMMC RPMB with EMFI

The Replay Protected Memory Block RPMB in modern storage systems provides a secure area where data integrity is ensured by authentication. This block is used in digital devices to store pivotal information that must be safeguarded against modification by potential attackers. This paper targets th...