6916 matches found
The vulnerability of the XkbSetCompatMap function in the Wayland protocol for X.Org XWayland, as well as in the X.Org Server, allows a attacker to trigger a service failure.
The vulnerability of the XkbSetCompatMap function in the Wayland protocol implementation for X.Org XWayland, as well as in the X.Org Server implementation of the X Window System, is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service...
The vulnerability of the XkbRemoveResourceClient function in the Wayland protocol for X.Org XWayland, as well as in the X.Org Server, allows a attacker to cause a service failure.
The vulnerability of the XkbRemoveResourceClient function in the Wayland protocol for X.Org XWayland, as well as in the X.Org Server implementation of the X Window System, is related to the use of memory after it is freed. Exploiting this vulnerability can allow a attacker to cause a service...
Linux Distros Unpatched Vulnerability : CVE-2025-68291
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: Initialise rcvmss before calling tcpsendactivereset in mptcpdofastclose. syzbot reported divide-by-zero in tcpselectwindow by MPTCP socket. 0 We had a...
Windows Exploitation Techniques: Winning Race Conditions with Path Lookups
Posted by James Forshaw This post was originally written in 2016 for the Project Zero blog. However, in the end it was published separately in the journal PoC||GTFOissue 13 as well as in the second volume of the printed version. In honor of our new blog we’re republishing it on this blog and...
Open Redirect
Overview Affected versions of this package are vulnerable to Open Redirect via improper handling of window.location inside client-side JavaScript templates. An attacker can redirect users to arbitrary external websites by crafting a malicious link and convincing a user to click it. Remediation...
SUSE SLES15: WebKitGTK-4.0-lang / WebKitGTK-4.1-lang / WebKitGTK-6.0-lang / etc (SUSE-SU-2025:02777-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02777-1 advisory. Updated to version 2.48.5: - CVE-2025-31273: Fixed a vulnerability where processing maliciously crafted web content could lead to...
CVE-2025-64680
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
Huawei HarmonyOS/EMUI Privilege Control Vulnerability (CNVD-2026-0013655)
Huawei HarmonyOS is Huawei's self-developed distributed operating system, designed for cell phones, tablets, smart homes and other full-scene devices to achieve seamless cross-device collaboration. Huawei EMUI is Huawei's deeply customized mobile operating system based on Android. A privilege...
📄 Chromodo Browser 45.8.12.391 Same Origin Policy Weakness
This proof of concept demonstrates message passing between two browser windows when opened under the same logical context same origin. It affect Chromodo Browser version 45.8.12.391...
The vulnerability of the Microsoft DWM Core Library on Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Microsoft DWM Core Library on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Microsoft DWM Core Library on Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Microsoft DWM Core Library on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain elevated privileges...
CVE-2025-64679 Windows DWM Core Library Elevation of Privilege Vulnerability
...
EUVD-2025-202202
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2025-64680 Windows DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2025-64679 Windows DWM Core Library Elevation of Privilege Vulnerability
...
EUVD-2025-202203
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2025-66329
Permission control vulnerability in the window management module. Impact: Successful exploitation of this vulnerability may affect availability...
PT-2025-50206
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A flaw exists in the Windows DWM Core Library that could allow a local attacker to gain elevated privileges. The issue is a heap-based buffer overflow. This could allow an authorized attacker...
PT-2025-50272
Name of the Vulnerable Software and Affected Versions MailEnable versions prior to 10.54 Description MailEnable versions prior to 10.54 contain a reflected cross-site scripting XSS vulnerability in the WindowContext parameter of the ''/Mondo/lang/sys/Forms/MAI/compose.aspx'' endpoint. The...
