The vulnerability of embedded software developed by Qualcomm, related to the disclosure of system data in a controlled area, allows attackers to gain unauthorized access to protected information.

The vulnerability of embedded software developed by Qualcomm relates to the exposure of system data to the controlled area. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the Nagios XI monitoring tool, related to the disclosure of system data by unauthorized parties in the controlled area, allows attackers to gain unauthorized access to protected information, enhance their privileges, and gain full control over the application.

The vulnerability of the Nagios XI monitoring tool is related to the disclosure of system data by unauthorized parties in the controlled area. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information, enhance their privileges, and gain full...

The vulnerability of the Nagios XI monitoring tool, related to the disclosure of system data by unauthorized parties in the controlled area, allows a perpetrator to disclose protected information.

The vulnerability of the Nagios XI monitoring tool is related to the disclosure of system data by unauthorized parties in the controlled area. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

Malicious code in nspacercesolve (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8a8c6f18d1f22d3d0f0b9902a176d91fdfe33270faea47c835a0078955b85914 During installation, the package looks for a flag file and exfiltrates it. Similar content is in the main file. There is no other purpose of the package ---...

The vulnerability of the Nagios XI monitoring tool, related to the disclosure of system data by unauthorized parties in the controlled area, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Nagios XI monitoring tool is related to the disclosure of system data by unauthorized parties in the controlled area. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the Nagios XI monitoring tool, related to the disclosure of system data by unauthorized parties in the controlled area, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Nagios XI monitoring tool is related to the disclosure of system data by unauthorized parties in the controlled area. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

CVE-2025-64407

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. Such links could also be used to transmit system information, such as environment variable...

EUVD-2025-124979

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. Such links could also be used to transmit system information, such as environment variable...

CVE-2025-64407

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. Such links could also be used to transmit system information, such as environment variable...

AWS VDP: AWS Auto Scaling Service Reporting "AWS Internal" for CloudTrail Events Generated from Specific Endpoints

A vulnerability was discovered in the AWS Auto Scaling service, where 6 API endpoints incorrectly reported the user-agent and network information as "AWS Internal" in CloudTrail logs. This allowed the adversary to perform API calls using these endpoints and evade the logging of their IP address a...

EUVD-2025-38270

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...

CVE-2025-57712 Qsync Central

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...

CVE-2025-57712 Qsync Central

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...

CVE-2025-58464: Relative Path Traversal

A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: QuMagie 2.7.3 and later...

CVE-2025-58463: Relative Path Traversal

A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following...

CVE-2025-62395 Moodle: external cohort search service leaks system cohort data

A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data...

EUVD-2025-35649

Exposure of Sensitive System Information to an Unauthorized Control Sphere CWE-497 in the Gallagher Morpho integration could allow an authenticated operator with limited site permissions to make critical changes to local Morpho devices. This issue affects Command Centre Server: 9.30 prior to...

PT-2025-43506

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue resides in the hasAccountsOnAnyUser function within DevicePolicyManagerService.java. A logic error in the code allows for the addition of a Device Owner after provisioning. This can...

PT-2025-43443

Name of the Vulnerable Software and Affected Versions cohort search web service affected versions not specified Description A flaw exists in the cohort search web service that allows users with limited permissions to access cohort information intended for system-level access. This results in the...

PT-2025-43462

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A security issue exists in the Android Framework that could allow a remote attacker to escalate privileges. The issue involves a permissions bypass that may allow launching activities from th...