309 matches found
CVE-2025-24036 Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
...
CVE-2025-24973
Concorde, formerly know as Nexkey, is a fork of the federated microblogging platform Misskey. Prior to version 12.25Q1.1, due to an improper implementation of the logout process, authentication credentials remain in cookies even after a user has explicitly logged out, which may allow an attacker ...
Microsoft Excel Remote Code Execution Vulnerability
...
Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
...
CVE-2025-21253 Microsoft Edge for IOS and Android Spoofing Vulnerability
...
Microsoft Edge for IOS and Android Spoofing Vulnerability
...
MAL-2025-625 Malicious code in grammyjs-utils (npm)
This package adds the attacker's public SSH key to the user's authorizedkeys file, creating a backdoor. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45f0349da339aac302d4c3bf992403e9bd539caa80f29576e448ccf3fb4af016 Any computer that has this package installed or...
CVE-2024-42012
GRAU DATA Blocky before 3.1 stores passwords encrypted rather than hashed. At the login screen, the user's password is compared to the user's decrypted cleartext password. An attacker with Windows admin or debugging rights can therefore steal the user's Blocky password and from there impersonate...
USN-7207-1: Git vulnerabilities
It was discovered that Git incorrectly handled certain URLs when asking for credentials. An attacker could possibly use this issue to mislead the user into typing passwords for trusted sites that would then be sent to untrusted sites instead. CVE-2024-50349 It was discovered that git incorrectly...
CVE-2024-54044 Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...
git -- multiple vulnerabilities
Git development team reports: CVE-2024-50349: Printing unsanitized URLs when asking for credentials made the user susceptible to crafted URLs e.g. in recursive clones that mislead the user into typing in passwords for trusted sites that would then be sent to untrusted sites instead. CVE-2024-5200...
This Windows PowerShell Phish Has Scary Potential
ManyGitHub users this week received a novel phishing email warning of critical security holes in their code. Those who clicked the link for details were asked to distinguish themselves from bots by pressing a combination of keyboard keys that causes Microsoft Windows to download password-stealing...
ROS-20240918-09
A vulnerability in the Compositing component of Google Chrome browser is related to improper access control. Exploitation of the vulnerability could allow an attacker acting remotely to spoof the user's security interface using a specially crafted HTML page. security interface using a specially...
CVE-2024-45803
Wire UI is a library of components and resources to empower Laravel and Livewire application development. A potential Cross-Site Scripting XSS vulnerability has been identified in the /wireui/button endpoint, specifically through the label query parameter. Malicious actors could exploit this...
CVE-2024-45803 Cross site scripting (XSS) Vulnerability on route /wireui/button?label=Content in wireui
Wire UI is a library of components and resources to empower Laravel and Livewire application development. A potential Cross-Site Scripting XSS vulnerability has been identified in the /wireui/button endpoint, specifically through the label query parameter. Malicious actors could exploit this...
CVE-2024-22244
CVE-2024-22244 affects Harbor open‑redirect in versions ≤ v2.8.4, ≤ v2.9.2, and ≤ v2.10.0. Connected sources describe the vulnerability as an open redirect risk, linked to insufficient validation of the redirect_url parameter in OIDC authentication flows. Core details include the affected product...
EUVD-2024-23435
Microsoft Install Service Elevation of Privilege Vulnerability...
Permission Dialog Overlapping
Firefox and Thunderbird are vulnerable to Permission Dialog Overlapping. The vulnerability is due to portions of a large custom cursor set by a website potentially overlapping with the permission dialog in Firefox and Thunderbird. This could lead to user confusion and unexpected granted permissio...
RDoc: Command Injection
Background RDoc produces HTML and command-line documentation for Ruby projects. Description A vulnerability has been discovered in RDoc. Please review the CVE identifier referenced below for details. Impact RDoc used to call Kernelopen to open a local file. If a Ruby project has a file whose name...