Leica Geosystems多款产品 跨站请求伪造漏洞

The Leica Geosystems GR10, among others, is a reference station receiver from Leica Germany. A cross-site request forgery vulnerability exists in various Leica Geosystems products, which stems from a lack of request validation and could lead to a cross-site request forgery attack. The following...

CVE-2025-63725

Reflected Cross-Site Scripting XSS vulnerability in SVX Portal 2.7A via the id parameter to Recivers.php...

CVE-2025-63725

Reflected Cross-Site Scripting XSS vulnerability in SVX Portal 2.7A via the id parameter to Recivers.php...

PT-2025-46988

Name of the Vulnerable Software and Affected Versions SVX Portal version 2.7A Description A Reflected Cross-Site Scripting XSS issue exists in SVX Portal version 2.7A. The issue is located in the Recivers.php file, specifically through the id parameter. An attacker can exploit this to inject...

EUVD-2012-4977

Malware in sbrugna...

EUVD-2022-30698

Malicious code in bioql PyPI...

EUVD-2021-3210

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-51448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti provides an operational monitoring and fault management framework. Version 1.2.25 has a Blind SQL Injection SQLi vulnerability within the SNMP Notificatio...

TEMPEST-LoRa: Cross-Technology Covert Communication

Electromagnetic EM covert channels pose significant threats to computer and communications security in air-gapped networks. Previous works exploit EM radiation from various components e.g., video cables, memory buses, CPUs to secretly send sensitive information. These approaches typically require...

CVE-2024-27207

Exported broadcast receivers allowing malicious apps to bypass broadcast protection...

CVE-2023-21117

In registerReceiverWithFeature of ActivityManagerService.java, there is a possible way for isolated processes to register a broadcast receiver due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...

CVE-2022-25679

Denial of service in video due to improper access control in broadcast receivers in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

UBUNTU-CVE-2025-21626

GLPI is a free asset and IT management software package. Starting in version 0.71 and prior to version 10.0.18, an anonymous user can fetch sensitive information from the status.php endpoint. Version 10.0.18 contains a fix for the issue. Some workarounds are available. One may delete the status.p...

CVE-2024-27207

Exported broadcast receivers allowing malicious apps to bypass broadcast protection...

CVE-2024-27207

Exported broadcast receivers allowing malicious apps to bypass broadcast protection...

CVE-2024-27207

Exported broadcast receivers allowing malicious apps to bypass broadcast protection...

CVE-2024-27207

Exported broadcast receivers allowing malicious apps to bypass broadcast protection...

PT-2024-21740 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel affected versions not specified Description: The issue allows malicious apps to bypass broadcast protection due to exported broadcast receivers. It is also related to an elevation of privilege in the Android kernel...

CVE-2023-47889

The Android application BINHDRM26 com.bdrm.superreboot 1.0.3, exposes several critical actions through its exported broadcast receivers. These exposed actions can allow any app on the device to send unauthorized broadcasts, leading to unintended consequences. The vulnerability is particularly...

CVE-2023-47889

The Android application BINHDRM26 com.bdrm.superreboot 1.0.3, exposes several critical actions through its exported broadcast receivers. These exposed actions can allow any app on the device to send unauthorized broadcasts, leading to unintended consequences. The vulnerability is particularly...