The vulnerability of the Windows operating system’s kernel, which allows a hacker to bypass security restrictions

The vulnerability of the Windows operating system’s kernel is related to security configuration errors. Exploiting this vulnerability can allow a hacker to bypass security restrictions...

Ivanti Policy Secure 9.x / 22.x Multiple Vulnerabilities

The Ivanti Policy Secure installed on the remote host is 9.x or 22.x. It is, therefore, affected by multiple vulnerabilities: - An authentication bypass vulnerability in the web component of Ivanti Policy Secure 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted...

How to Prepare for a Cyberattack

Deciphering the Cyber Invasion Terrain We exist in an era deeply entrenched in digital dependence, where cyber invasions present significant risks for companies, government establishments, and solitary users. As we hurdle deeper into the digital era, the art of cyber misdemeanors continues to...

Design/Logic Flaw

An attacker could potentially exploit this vulnerability, leading to files being read from the Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC. This exploit could be used to read files from the controller that may expose limited information from the device. Honeywell recommends...

Denial of Service Vulnerability in Damon Database

Damon Database Management System is a high-performance database management system with completely independent intellectual property rights launched by Wuhan Damon Database Co. A denial of service vulnerability exists in Damon Database, which can be exploited by attackers to cause a denial of...

PCMan FTP Server Denial of Service Vulnerability (CNVD-2025-10876)

PCMan FTP Server is PCMan open source set of FTP server software. PCMan FTP Server has a denial of service vulnerability that originates from the component STOR Command Handler, which can be exploited by an attacker to cause a denial of service...

Google Chrome Security Bypass Vulnerability (CNVD-2024-07829)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that stems from improper implementation of the Downloads module. An attacker could exploit this vulnerability to bypass security restrictions...

Exploit for Forced Browsing in Fortra Goanywhere_Managed_File_Transfer

It is an exploit module targeting the GoAnywhere MFT vulnerabili...

CVE-2023-4818

PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used. The attacker must have physical USB access to the device in order to exploit this vulnerability...

CVE-2023-49254 Command injection in the network test tools

Authenticated user can execute arbitrary commands in the context of the root user by providing payload in the "destination" field of the network test tools. This is similar to the vulnerability CVE-2021-28151 mitigated on the user interface level by blacklisting characters with JavaScript, howeve...

TOTOLINK T6 Access Control Error Vulnerability

TOTOLINK T6 is a wireless dual-band router from China's Gion Electronics TOTOLINK. An access control error vulnerability exists in TOTOLINK T6 version 4.1.9cu.5241B20210923, which originates from an access control error in the file /cgi-bin/cstecgi.cgi. An attacker could exploit this vulnerabilit...

GTKWave integer overflow vulnerability (CNVD-2024-37751)

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. An integer overflow vulnerability exists in GTKWave version 3.3.115, which can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

Tenda AX3 Code Execution Vulnerability

The Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A code execution vulnerability exists in Tenda AX3 version v16.03.12.11, which stems from the list parameter in /goform/SetNetControlList failing to correctly filter the special elements of the constructed...

Google Android Information Disclosure Vulnerability (CNVD-2024-16935)

Google Android is a Linux-based open source operating system from Google. Google Android has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2023-51435

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak...

CVE-2023-23427

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions...

TOTOLINK EX1800T setRebootScheCfg Interface Command Execution Vulnerability

The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. A command execution vulnerability exists in the TOTOLINK EX1800T setRebootScheCfg interface, which can be exploited by an attacker to execute arbitrary commands on the system...

Arbitrary File Download Vulnerability in Electronic Document Security Management System of Beijing Yisetong Technology Development Co., Ltd (CNVD-2024-05347)

Electronic document security management system is a controllable authorization of electronic document security sharing management system, using real-time dynamic encryption and decryption protection technology and real-time rights recovery mechanism, to provide all kinds of electronic documents...

Cryptography has a denial of service vulnerability

Cryptography is a Python library that provides cryptography functionality. Cryptography suffers from a denial of service vulnerability that can be exploited by an attacker to cause a program to crash...

GitLab: Account Takeover via Password Reset without user interactions

The report submitted to GitLab described a vulnerability that allowed account takeover via the password reset form. The vulnerability was triggered by modifying the JSON request to include the victim's email along with the attacker's email. This resulted in the password reset email being sent to...