CVE-2025-61830

Adobe Pass (Android SDK) versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability that allows bypass of security controls to read/write data. Exploitation requires user interaction (victim installs a malicious SDK). The issue is discussed across multiple advisories (CVE...

EUVD-2024-55011

Malicious code in bioql PyPI...

CVE-2024-45432

OpenSynergy BlueSDK aka Blue SDK through 6.x mishandles a function call. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from an incorrect variable used as a function argument. An attacker can leverage this to cause unexpected behavior or obtain sensitive informatio...

CVE-2024-45434

OpenSynergy BlueSDK aka Blue SDK through 6.x has a Use-After-Free. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of validating the existence of an object before performing operations on the object aka use after free. An attacker can leverage this to...

CVE-2024-45433

OpenSynergy BlueSDK Bluetooth stack (BlueSDK) up to version 6.x is affected by an Incorrect Control Flow Scoping flaw. The root cause is improper handling of exceptional conditions and lack of proper return control flow after detecting an unusual state, enabling bypass of security validation and ...

CVE-2024-45432

OpenSynergy BlueSDK aka Blue SDK through 6.x mishandles a function call. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from an incorrect variable used as a function argument. An attacker can leverage this to cause unexpected behavior or obtain sensitive informatio...

CVE-2024-45432

OpenSynergy BlueSDK (Blue SDK) Bluetooth stack up to 6.x contains a flaw caused by an incorrect variable used as a function argument (and related network-packet handling issues in some reports). The vulnerability can lead to unexpected behavior and potential information disclosure, with CVE-2024-...

GHSA-3J63-5H8P-GF7C x402 SDK vulnerable in outdated versions in resource servers for builders

Impact There is a security vulnerability in outdated versions of the x402 SDK. This does not directly affect users' keys, smart contracts, or funds. This primarily impacts builders working on resource servers. Patches Please update to the following package versions: x402 = 0.5.2 x402-next = 0.5.2...

x402 SDK vulnerable in outdated versions in resource servers for builders

Impact There is a security vulnerability in outdated versions of the x402 SDK. This does not directly affect users' keys, smart contracts, or funds. This primarily impacts builders working on resource servers. Patches Please update to the following package versions: x402 = 0.5.2 x402-next = 0.5.2...

MAL-2025-36699 Malicious code in test-sdk-js (npm)

The package test-sdk-js was found to contain malicious code...

Siemens COMOS

SUMMARY COMOS before V10.6 is affected by a local arbitrary code execution vulnerability in the integrated Open Design Alliance Drawings SDK. Siemens has released a new version for COMOS and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS As a general security measure,...

Malicious code in drive-sdk (npm)

The package communicates with a domain associated with malicious activity...

The vulnerability of the Adobe XMP-Toolkit-SDK software, related to the execution of operations beyond the buffer boundaries in memory, allows attackers to circumvent the ASLR protection mechanism and gain unauthorized access to protected information.

The vulnerability of the Adobe XMP-Toolkit-SDK lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism and gain unauthorized access to protected information...

Zoom多款产品 安全漏洞

Zoom Rooms and others are products of Zoom Corporation, USA.Zoom Rooms is a software-based conferencing system.Zoom Meeting SDK is a development kit.Zoom Workplace is a desktop application software. A security vulnerability exists in a number of Zoom products. An attacker exploiting this...

The vulnerability of the Outside In Core component within Oracle’s software development kit (SDK) allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Outside In Core component in Oracle’s software development toolset SDK exists due to insufficient testing of input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

PT-2024-13906 · Realtek · Realtek Rtl819X Jungle Sdk

Name of the Vulnerable Software and Affected Versions: Realtek rtl819x Jungle SDK version 3.4.11 Description: A stack-based buffer overflow vulnerability exists in the boa getInfo functionality. This can be triggered by a specially crafted series of HTTP requests, potentially leading to remote co...

Realtek rtl819x Jungle SDK Data Forgery Issue Vulnerability

The Realtek rtl819x Jungle SDK is a driver for a wireless LAN chip from China's Realtek Semiconductor Realtek. A data forgery issue vulnerability exists in Realtek rtl819x Jungle SDK version 3.4.11, which stems from a firmware update vulnerability in the boa formUpload function that can lead to...

Zoom's multiple product security vulnerabilities

Zoom Meeting SDK and Zoom VDI Client are both products of Zoom Corporation, U.S.A. Zoom Meeting SDK is a development kit. Enables your company to accelerate the development and build of fully customizable video-based applications by leveraging the performance, scale, and reliability of Zoom's...

mUPnP Security Vulnerabilities

mUPnP is a development kit for UPnP developers. A security vulnerability exists in mUPnP for C 3.0.2 and earlier versions, which stems from a missing host length recalculation in mupnp/net/uri.c, resulting in out-of-bounds reads and application crashes...

CVE-2023-41151

An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the server wants to send an error packet, while socket is blocked on writing...