EUVD-2022-36210

Malicious code in bioql PyPI...

EUVD-2022-34235

Malicious code in bioql PyPI...

CVE-2025-61692

VT STUDIO versions 8.53 and prior contain a use after free vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product...

Keras 安全漏洞

Keras is a multi-backend deep learning framework open-sourced by Keras. A security vulnerability exists in Keras that stems from a specially crafted .keras model archive that could trigger arbitrary code execution...

PT-2025-38505

Name of the Vulnerable Software and Affected Versions Supermicro BMC firmware versions affected versions not specified Description An issue exists in the Supermicro BMC firmware validation logic on Supermicro MBD-X12STW. An attacker can update the system firmware with a specially crafted image...

CVE-2025-53853

A heap-based buffer overflow vulnerability exists in the ISHNE parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch 35a819fa. A specially crafted ISHNE ECG annotations file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this...

CVE-2025-46411

Affects The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa); vulnerability type is a stack-based buffer overflow in the MFER parsing functionality. A specially crafted MFER file can lead to arbitrary code execution. An attacker can supply a malicious file to trigger the vulnerability....

CVE-2025-5514

Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to delay the processing of the web server function and prevent legitimate users from utilizing the web...

CVE-2025-54924

CWE-918: Server-Side Request Forgery SSRF vulnerability exists that could cause unauthorized access to sensitive data when an attacker sends a specially crafted document to a vulnerable endpoint...

CVE-2025-54924

The CVE-2025-54924 entry concerns Schneider Electric EcoStruxure Power Monitoring Expert. A SSRF flaw in the GetPagesAsImages function allows remote attackers to disclose sensitive information. Unauthenticated exploitation is implied by ZDI notes; No published patch/version is specified in the pr...

Microsoft Excel Code Execution Vulnerability (CNVD-2025-18819)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which is caused due to an error when opening a specially crafted file. An attacker could exploit this vulnerability to execute arbitrary code on t...

Microsoft Excel Code Execution Vulnerability (CNVD-2025-18823)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which is caused by free use when opening specially crafted files. An attacker can exploit the vulnerability to execute arbitrary code on the syste...

Microsoft Excel 安全漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel that is caused by a heap buffer overflow when opening a specially crafted file. An attacker can exploit this vulnerability to execute arbitrary cod...

Microsoft Word 资源管理错误漏洞

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which is caused due to a post-release usage error when opening a specially crafted file. An attacker could exploit this vulnerability ...

Microsoft Excel 安全漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which is caused due to a type confusion error when opening a specially crafted file. An attacker could exploit this vulnerability to execute...

CVE-2024-49828

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query...

CVE-2024-49828 IBM Db2 for Linux, UNIX and Windows denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query...

CLSA-2025-1753207126 nginx: Fix of 2 CVEs

CVE-2022-41741: fix vulnerability in ngxhttpmp4module leading to potential memory corruption and termination by improving module handling of specially crafted audio/video files - CVE-2022-41742: fix module ngxhttpmp4module vulnerability to prevent worker process crash and memory disclosure from...

Rockwell Automation Arena Code Execution Vulnerability (CNVD-2025-19255)

Rockwell Automation Arena is a discrete-event simulation software developed by Rockwell Automation for a wide range of manufacturing, logistics, and service industries. A code execution vulnerability exists in Rockwell Automation Arena, which is caused by out-of-bounds writes to specially crafted...

CVE-2025-27367

IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to improper input validation due to bypassing of client-side validation for the data types and requiredness of fields for GRC Objects when an authenticated user sends a specially crafted payload to the server allowing for data to be saved withou...