6917 matches found
The vulnerability of the fly-adjust-palette utility in the window graphical manager fly-wm, which allows a hacker to trigger a service failure.
The vulnerability of the fly-adjust-palette utility in the window graphical manager fly-wm is related to reading data beyond the allowed buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the fly-adjust-palette utility in the window graphical manager fly-wm, which allows a hacker to trigger a service failure.
The vulnerability of the fly-adjust-palette utility in the window graphical manager fly-wm is related to improper memory release after its use. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the fly-adjust-palette utility in the window graphical manager fly-wm, which allows a hacker to trigger a service failure.
The vulnerability of the fly-adjust-palette utility in the window graphical manager fly-wm is related to the manipulation of the zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the fly-wm window graphical manager, related to reading beyond the buffer in memory, allows a attacker to cause a service failure.
The vulnerability of the fly-wm window graphical manager is related to reading data beyond the allowable buffer limit. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the fly-wmfunc utility function in the fly-wm window management tool allows a hacker to cause a service failure.
The vulnerability of the fly-wmfunc utility function in the fly-wm window manager is related to improper memory release after its use. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the fly-wmpam utility function in the fly-wm window management application, which allows a hacker to cause a service failure.
The vulnerability of the fly-wmpam window management tool is related to reading data beyond the allowable buffer limit. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-58766: Improper Control of Generation of Code
Dyad is a local AI app builder. A critical security vulnerability has been discovered that affected Dyad v0.19.0 and earlier versions that allows attackers to execute arbitrary code on users' systems. The vulnerability affects the application's preview window functionality and can bypass Docker...
Malware in @thangved/callback-window
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in @thangved/callback-window (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed460a227837fd3f7ae156229624e47d46e10b4bca19f0089a29f75c5ca13e09 Any computer that has this package installed or running should be considered fully compromised. All...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
The vulnerability of the Windows DWM library in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows DWM library in Windows operating systems is related to the swapping of unreliable pointers. Exploiting this vulnerability can allow attackers to gain increased privileges...
CVE-2025-58764
Claude Code is an agentic coding tool. Due to an error in command parsing, versions prior to 1.0.105 were vulnerable to a bypass of the Claude Code confirmation prompt to trigger execution of an untrusted command. Reliably exploiting this requires the ability to add untrusted content into a Claud...
Claude Code rg vulnerability does not protect against approval prompt bypass
Due to an error in command parsing, it was possible to bypass the Claude Code confirmation prompt to trigger execution of an untrusted command. Reliably exploiting this requires the ability to add untrusted content into a Claude Code context window. Users on standard Claude Code auto-update will...
CVE-2025-58764
Claude Code is an agentic coding tool. Due to an error in command parsing, versions prior to 1.0.105 were vulnerable to a bypass of the Claude Code confirmation prompt to trigger execution of an untrusted command. Reliably exploiting this requires the ability to add untrusted content into a Claud...
CVE-2025-58764 Claude Code rg command had Command Injection that allowed bypass of user approval prompt for command execution
Claude Code is an agentic coding tool. Due to an error in command parsing, versions prior to 1.0.105 were vulnerable to a bypass of the Claude Code confirmation prompt to trigger execution of an untrusted command. Reliably exploiting this requires the ability to add untrusted content into a Claud...
Linux Distros Unpatched Vulnerability : CVE-2016-6708
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege in the System UI in Android 7.0 before 2016-11-01 could enable a local malicious user to bypass the security prompt of your work profi...
Linux Distros Unpatched Vulnerability : CVE-2009-4494
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AOLserver 4.5.1 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibl...
CVE-2025-53801
Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally...
