CVE-2025-9323 Foxit PDF Reader JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Foxit PDF Reader JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must...

CVE-2025-9324 Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must...

CVE-2025-9328

CVE-2025-9328 tracks a remote code execution in Foxit PDF Reader due to an out-of-bounds read in PRC file parsing. The flaw arises from inadequate validation of user-supplied data during PRC parsing, allowing a read past the end of an allocated buffer and potential code execution in the target pr...

CVE-2025-9275 Oxford Instruments Imaris Viewer IMS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Oxford Instruments Imaris Viewer IMS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oxford Instruments Imaris Viewer. User interaction is required to exploit this vulnerability...

CVE-2025-9274 Oxford Instruments Imaris Viewer IMS File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

Oxford Instruments Imaris Viewer IMS File Parsing Uninitialized Pointer Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oxford Instruments Imaris Viewer. User interaction is required to exploit this vulnerabili...

CVE-2025-9273 CData API Server MySQL Misconfiguration Information Disclosure Vulnerability

CData API Server MySQL Misconfiguration Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of CData API Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

CVE-2025-9273 CData API Server MySQL Misconfiguration Information Disclosure Vulnerability

CData API Server MySQL Misconfiguration Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of CData API Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

CVE-2025-8613

The CVE-2025-8613 issue affects Vacron Camera devices, specifically a command injection in the webs.cgi endpoint. The flaw arises from insufficient validation of a user-supplied string before it is used to perform a system call, allowing an unauthenticated attacker to execute code with root privi...

CVE-2025-8613 Vacron Camera ping Command Injection Remote Code Execution Vulnerability

Vacron Camera ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vacron Camera devices. Authentication is required to exploit this vulnerability. The specific flaw exists within the webs.cgi...

CVE-2025-6685 ATEN eco DC Missing Authorization Privilege Escalation Vulnerability

ATEN eco DC Missing Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of ATEN eco DC. Authentication is required to exploit this vulnerability. The specific flaw exists within the web-based interface. The...

CVE-2025-7974 rocket.chat Incorrect Authorization Information Disclosure Vulnerability

rocket.chat Incorrect Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of rocket.chat. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web...

CVE-2025-57775

Digilent DASYLab DSB file parsing heap-based buffer overflow is the root cause of CVE-2025-57775. The flaw arises from improper bounds checking when processing DSB files, enabling arbitrary code execution if a user opens a specially crafted DSB file. Affected product: Digilent DASYLab (all versio...

CVE-2025-9189 Out Of Bounds Write when parsing a DSB file with Digilent DASYLab

There is an out of bounds write vulnerability due to improper bounds checking resulting in a large destination address when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a...

Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to out of bounds memory access due to the libarchive package (CVE-2024-37407)

Summary Libarchive is used by DataStage on Cloud Pak for Data as part of archive/compression functionality. Vulnerability Details CVEID:CVE-2024-37407 DESCRIPTION: Libarchive before 3.7.4 allows name out-of-bounds access when a ZIP archive has an empty-name file and mac-ext is enabled. This occur...

PT-2025-35631

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A logic error in the code may allow a malicious app to prevent dialing emergency services under limited circumstances. This could result in a local denial of service until the phone reboots...

Linux Distros Unpatched Vulnerability : CVE-2023-22457

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CKEditor Integration UI adds support for editing wiki pages using CKEditor. Prior to versions 1.64.3,t he CKEditor.HTMLConverter document lacked a protection...

Poisoned at Scale: a Scalable Audit Uncovers Hidden Scam Endpoints in Production LLMs

Large Language Models LLMs have become critical to modern software development, but their reliance on internet datasets for training introduces a significant security risk: the absorption and reproduction of malicious content. To evaluate this threat, this paper introduces a scalable, automated...

Linux Distros Unpatched Vulnerability : CVE-2025-54812

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using HTMLLayout, logger names are not properly escaped when writing out to the HT...

Ensure That the umask Value Is Correct

The umask value is the mask for default file or directory permissions. When a file or directory is created, its default permission is set to 777 minus the umask value. For a file, its execute permission is also removed. If the umask value is set improperly, the permission of new files may be too...

Linux Distros Unpatched Vulnerability : CVE-2023-41053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redis is an in-memory database that persists on disk. Redis does not correctly identify keys accessed by SORTRO and as a result may grant users executing this...