37 matches found
EUVD-2019-4878
Malware in sbrugna...
EUVD-1999-0713
Malware in sbrugna...
EUVD-2023-38364
Malicious code in bioql PyPI...
EUVD-2024-54474
Malicious code in bioql PyPI...
EUVD-2021-28223
Malicious code in bioql PyPI...
EUVD-2024-54470
Malicious code in bioql PyPI...
EUVD-2023-29962
Malicious code in bioql PyPI...
CVE-2024-11857 Realtek Bluetooth HCI Adaptor - Privilege Escalation
Bluetooth HCI Adaptor from Realtek has a Link Following vulnerability. Local attackers with regular privileges can create a symbolic link with the same name as a specific file, causing the product to delete arbitrary files pointed to by the link. Subsequently, attackers can leverage arbitrary fil...
PT-2025-23457 · Realtek · Bluetooth Hci Adaptor
Name of the Vulnerable Software and Affected Versions: Bluetooth HCI Adaptor from Realtek affected versions not specified Description: The issue allows local attackers with regular privileges to create a symbolic link with the same name as a specific file, causing the product to delete arbitrary...
CVE-2023-28868
Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to delete arbitrary files on the operating system by creating a symbolic link...
CVE-2022-45440
A vulnerability exists in the FTP server of the Zyxel AX7501-B0 firmware prior to V5.17ABPC.3C0, which processes symbolic links on external storage media. A local authenticated attacker with administrator privileges could abuse this vulnerability to access the root file system by creating a...
CVE-2025-1683 Symbolic Link Exploit in 1E Client's - Nomad module allows Arbitrary File Deletion
Improper link resolution before file access in the Nomad module of the 1E Client, in versions prior to 25.3, enables an attacker with local unprivileged access on a Windows system to delete arbitrary files on the device by exploiting symbolic links...
ROS-2-1894
2.1894 Multiple Exim Server Vulnerabilities 1. Vulnerability description: CVE-2020-28007 A vulnerability in the Exim message forwarding agent, is related to a symbolic link in the Exim log directory. Exploitation of the vulnerability could allow an attacker to create a special symbolic link to a...
ROS-2-2029
2.2029 Multiple Exim Server Vulnerabilities 1. Vulnerability description: CVE-2020-28007 A vulnerability in the Exim message forwarding agent, is related to a symbolic link in the Exim log directory. Exploitation of the vulnerability could allow an attacker to create a special symbolic link to a...
The vulnerability of the Kaspersky VPN Secure Connection remote access tool lies in its ability to delete arbitrary files from the system, allowing a hacker to increase their privileges.
The vulnerability of the Kaspersky VPN Secure Connection remote access tool relates to the possibility of deleting arbitrary files in the system. Exploiting this vulnerability could allow an attacker to enhance their privileges by creating a specially crafted symbolic link to a critical folder in...
ROS-2-1848
2.1848 Multiple Exim Server Vulnerabilities 1. Vulnerability description: CVE-2020-28007 A vulnerability in the Exim message forwarding agent, is related to a symbolic link in the Exim log directory. Exploitation of the vulnerability could allow an attacker to create a special symbolic link to a...
CVE-2015-1340
LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer has an unsafe Chmod call that races against the stat in the Filepath.Walk function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice...
GLSA-200412-04 : Perl: Insecure temporary file creation
The remote host is affected by the vulnerability described in GLSA-200412-04 Perl: Insecure temporary file creation Some Perl modules create temporary files in world-writable directories with predictable names. Impact : A local attacker could create symbolic links in the temporary files directory...
SAP DB 7.3.00 - Symbolic Link
source: https://www.securityfocus.com/bid/6316/info A vulnerability has been discovered in SAP DB that may allow an unprivileged to execute commands with root privileges. The vulnerability is due to insufficient sanity checks by lserver, when attempting to execute the 'lserversrv' binary in the...
CDRDAO 1.1.x - Home Directory Configuration File Symbolic Link (3)
CDRDAO 1.1.x - Home Directory Configuration File Symbolic Link 3 source: https://www.securityfocus.com/bid/3865/info CDRDAO is a freely available, open source CD recording software package available for the Unix and Linux Operating Systems. It is maintained by Andreas Mueller. When CDRDAO saves...