12887 matches found
CVE-1999-0580
The HKEYLOCALMACHINE key in a Windows NT system has inappropriate, system-critical permissions...
CVE-1999-0265
ICMP redirect messages may crash or lock up a host...
CVE-1999-0625
The rpc.rquotad service is running...
CVE-1999-0355
Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service...
CVE-1999-0571
A router's configuration service or management interface such as a web server or telnet is configured to allow connections from arbitrary hosts...
CVE-1999-0277
The WorkMan program can be used to overwrite any file to get root access...
CVE-1999-0521
An NIS domain name is easily guessable...
CVE-2019-16864
CompleteFTPService.exe in the server in EnterpriseDT CompleteFTP before 12.1.4 allows Remote Code Execution by leveraging a Windows user account that has SSH access. The exec command is always run as SYSTEM...
CVE-2019-12757
Symantec Endpoint Protection SEP, prior to 14.2 RU2 & 12.1 RU6 MP10 and Symantec Endpoint Protection Small Business Edition SEP SBE prior to 12.1 RU6 MP10d 12.1.7510.7002, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to...
CVE-2025-1711
Multiple services of the DUT as well as different scopes of the same service reuse the same credentials...
CVE-2025-1558
Mattermost Mobile Apps versions =2.25.0 fail to properly validate GIF images prior to rendering which allows a malicious user to cause the Android application to crash via message containing a maliciously crafted GIF...
CVE-2024-2912
An insecure deserialization vulnerability exists in the BentoML framework, allowing remote code execution RCE by sending a specially crafted POST request. By exploiting this vulnerability, attackers can execute arbitrary commands on the server hosting the BentoML application. The vulnerability is...
Malicious code in wwwt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00200d502997800295ce4f4ca7fe74962921193042bdddb47c91ef1bc817f61f The package wwwt was found to contain malicious code. Source: ghsa-malware 7076a3b538d3f3d8e1ae114139247fbcd223995fa82f1e63da64c9dc56dc8eb8 Any...
Malicious Package
Overview kdb1-demo-v2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Millions of Android Powered TVs and Streaming Devices Infected by Kimwolf Botnet
Synthient discovers over 2 million Android TV boxes and smart TVs hijacked by the Kimwolf botnet. Learn how hackers are using home devices to launch DDoS attacks and how you can protect your home network...
MAL-2026-78 Malicious code in react-native-kyc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3d1ae391e8ec2bcc50f5d507ae3566a122058f2d3aa4227b5abf64ecc43990a The package react-native-kyc was found to contain malicious code. Source: ghsa-malware b07a2ced47f073e338b59c9aed3d551f9e8acbbe7c1e02102b7a9c8fb37250...
EUVD-2026-0794
Malicious code in atmbmw npm...
MAL-2026-15 Malicious code in eslint-config-skynet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e73967dab61cd67b0f3c96ab2c059e3fc5405fb451c62165d429bfbcf1e3df The package eslint-config-skynet was found to contain malicious code...
PT-2026-34168
Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.6 Description An issue in the Core component of Oracle VM VirtualBox allows a high privileged attacker with logon access to the infrastructure where the software executes to compromise the system. Successful...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not freeing an unused skb, which could lead to a memory leak...