PT-2026-76608

openssl encrypt versions before 1.4.0 contain an arbitrary code execution vulnerability in the Whirlpool hash implementation that uses broad glob patterns to load .so modules without integrity verification. Attackers can place malicious .so files matching the whirlpoolpy313.so pattern in...

PT-2025-49363

Name of the Vulnerable Software and Affected Versions Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 versions 1.0.013.001 through 1.2.07.001 Description A security flaw exists in Linksys RE series Wireless Repeaters. The issue involves a stack-based buffer overflow in the...

CVE-2024-48781

An issue in Wanxing Technology Yitu Project Management Kirin Edition version 2.3.6 allows a remote attacker to execute arbitrary code . The vulnerability is triggered via a specially constructed .so file located in the /opt/EdrawProj-2/plugins/imageformat directory. This flaw poses a significant ...

CVE-2021-42884

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceName of the file global.so which can control thedeviceName to attack...

Design/Logic Flaw

An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the best1collect.exe SUID binary could allow an attacker to elevate his/her privileges to the ones of the "patrol" user by specially crafting a shared library .so file that will be loaded during execution...