6937 matches found
The vulnerability of the fly-adjust-palette utility in the window graphical manager fly-wm, which allows a hacker to trigger a service failure.
The vulnerability of the fly-adjust-palette utility in the window graphical manager fly-wm is related to improper memory release after its use. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the fly-adjust-palette utility in the window graphical manager fly-wm, which allows a hacker to trigger a service failure.
The vulnerability of the fly-adjust-palette utility in the window graphical manager fly-wm is related to the manipulation of the zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the fly-wmfunc utility function in the fly-wm window management tool allows a hacker to cause a service failure.
The vulnerability of the fly-wmfunc utility function in the fly-wm window manager is related to improper memory release after its use. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the fly-wmpam utility function in the fly-wm window management application, which allows a hacker to cause a service failure.
The vulnerability of the fly-wmpam window management tool is related to reading data beyond the allowable buffer limit. Exploiting this vulnerability could allow an attacker to cause a service failure...
Dyad 代码注入漏洞
Dyad is an AI application builder open-sourced by Dyad. A code injection vulnerability exists in Dyad 0.19.0 and earlier versions, which stems from the Preview Window feature that can bypass Docker container protection and could lead to the execution of arbitrary code...
PT-2025-38176
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw within the powercap and intel rapl components. A shift-out-of-bounds issue occurs when a value is less than the time unit, leading to an excessively...
CVE-2025-58766: Improper Control of Generation of Code
Dyad is a local AI app builder. A critical security vulnerability has been discovered that affected Dyad v0.19.0 and earlier versions that allows attackers to execute arbitrary code on users' systems. The vulnerability affects the application's preview window functionality and can bypass Docker...
Malware in @thangved/callback-window
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in @thangved/callback-window (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed460a227837fd3f7ae156229624e47d46e10b4bca19f0089a29f75c5ca13e09 Any computer that has this package installed or running should be considered fully compromised. All...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
The vulnerability of the Windows DWM library in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows DWM library in Windows operating systems is related to the swapping of unreliable pointers. Exploiting this vulnerability can allow attackers to gain increased privileges...
CVE-2025-58764
Claude Code is an agentic coding tool. Due to an error in command parsing, versions prior to 1.0.105 were vulnerable to a bypass of the Claude Code confirmation prompt to trigger execution of an untrusted command. Reliably exploiting this requires the ability to add untrusted content into a Claud...
Claude Code rg vulnerability does not protect against approval prompt bypass
Due to an error in command parsing, it was possible to bypass the Claude Code confirmation prompt to trigger execution of an untrusted command. Reliably exploiting this requires the ability to add untrusted content into a Claude Code context window. Users on standard Claude Code auto-update will...
CVE-2025-58764
Claude Code is an agentic coding tool. Due to an error in command parsing, versions prior to 1.0.105 were vulnerable to a bypass of the Claude Code confirmation prompt to trigger execution of an untrusted command. Reliably exploiting this requires the ability to add untrusted content into a Claud...
CVE-2025-58764 Claude Code rg command had Command Injection that allowed bypass of user approval prompt for command execution
Claude Code is an agentic coding tool. Due to an error in command parsing, versions prior to 1.0.105 were vulnerable to a bypass of the Claude Code confirmation prompt to trigger execution of an untrusted command. Reliably exploiting this requires the ability to add untrusted content into a Claud...
Linux Distros Unpatched Vulnerability : CVE-2016-6708
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege in the System UI in Android 7.0 before 2016-11-01 could enable a local malicious user to bypass the security prompt of your work profi...
Linux Distros Unpatched Vulnerability : CVE-2009-4494
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AOLserver 4.5.1 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibl...
CVE-2025-53801
Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally...
