17029 matches found
ABB Terra AC wallboxes Buffer Overflow
The vulnerability of the microprogramming software of ABB Terra AC wallboxes for electric vehicles is related to the overflow of buffer in dynamic memory. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...
Siemens LOGO! RCE
The vulnerability of the microprogrammed software for Siemens LOGO! 12/24RCE, LOGO! 12/24RCEo, LOGO! 230RCE, LOGO! 230RCEo, LOGO! 24CE, LOGO! 24CEo, LOGO! 24RCE, LOGO! 24RCEo, LOGO! 24RCE, LOGO! 24RCEo, SIPLUS LOGO! 12/24RCE, SIPLUS LOGO! 12/24RCEo, SIPLUS LOGO! 230RCE, SIPLUS LOGO! 230RCEo, SIPL...
CVE-2025-15461
CVE-2025-15461 affects UTT 进取 520W, version 1.7.7-180627. The vulnerability is in the function that uses strcpy in the file /goform/formTaskEdit, where manipulating the selDateType argument can trigger a buffer overflow. The attack can be executed remotely and an exploit has been published. Vendo...
PT-2026-1337
Name of the Vulnerable Software and Affected Versions Anthropic's MCP TypeScript SDK versions up to and including 1.25.1 Description The software contains a regular expression denial of service ReDoS issue within the UriTemplate class when handling RFC 6570 exploded array patterns. The dynamicall...
EUVD-2025-206226
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Nuvation Energy Multi-Stack Controller MSC allows OS Command Injection.This issue affects Multi-Stack Controller MSC: from 2.3.8 before 2.5.1...
UPDF Code Execution
The vulnerability of UPDF software for working with PDF files on Windows operating systems is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...
CVE-2025-62148
Cross-Site Request Forgery CSRF vulnerability in Eugen Bobrowski Robots.txt rewrite robotstxt-rewrite allows Cross Site Request Forgery.This issue affects Robots.txt rewrite: from n/a through = 1.6.1...
CVE-2023-54325
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix out-of-bounds read When preparing an AER-CTR request, the driver copies the key provided by the user into a data structure that is accessible by the firmware. If the target device is QAT GEN4, the key size is...
Trend Micro Cleaner One Pro Link File Privilege Escalation
The vulnerability of the software for cleaning and optimizing the Trend Micro Cleaner One Pro system is related to errors in processing files with the extension .LNK locals. Exploiting this vulnerability can allow an attacker to increase their privileges and gain access to delete files...
Elastic Defend Privilege Escalation
The vulnerability of the software for detecting, monitoring, and responding to threats from Elastic Defend is related to improper storage of permissions. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2025-67623
Server-Side Request Forgery SSRF vulnerability in 6Storage 6Storage Rentals 6storage-rentals allows Server Side Request Forgery.This issue affects 6Storage Rentals: from n/a through = 2.22.0...
Poly Lens Desktop Privilege Escalation
The vulnerability of the software for configuring Poly Lens Desktop devices is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability can allow an attacker to enhance their privileges...
PT-2025-53290
Name of the Vulnerable Software and Affected Versions Scott Paterson Accept Donations with PayPal versions prior to 1.5.1 Description The software contains a URL redirection issue that could allow for phishing attacks. The issue involves redirection to untrusted sites. Recommendations Update Scot...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a race condition in the polling function that could lead to a null pointer dereference...
EUVD-2023-60241
MyBB 1.8.32 contains a chained vulnerability that allows authenticated administrators to bypass avatar upload restrictions and execute arbitrary code. Attackers can modify upload path settings, upload a malicious PHP-embedded image file, and execute commands through the language configuration...
Senstar Symphony 信息泄露漏洞
Senstar Symphony is an intelligent video management software from Senstar Canada. An information disclosure vulnerability exists in Senstar Symphony that stems from an improper implementation of the FetchStoredLicense method leading to an information disclosure that could reveal sensitive...
PDFsam Enhanced 缓冲区错误漏洞
PDFsam Enhanced is a PDF editing and management tool from PDFsam, Inc. PDFsam Enhanced suffers from a buffer error vulnerability that stems from a lack of validation of user-supplied data when processing App objects, which could lead to out-of-bounds reads and remote code execution...
PT-2025-52771
Name of the Vulnerable Software and Affected Versions Home Assistant Core versions prior to 2025.8.0 Description The Downloader integration does not completely validate file paths when combining them, which creates a directory traversal issue. This allows unauthorized access to files outside the...
