981050 matches found
Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client
Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching could have taken over the presenter's. The flaw sat in the annotation tool, the feature that lets participants draw and type on a shared screen, and it asked nothing of the...
Security Bulletin: IBM Watsonx BI Assistant for CP4D affected by multiple CVEs
Summary Multiple CVE's were addressed in IBM Watsonx BI Assistant for CP4D version 5.4 patch 4 Vulnerability Details CVEID:CVE-2026-44665 DESCRIPTION: fast-xml-builder builds XML from JSON. Prior to 1.1.7, when an input data has quotes in attribute values but process entities is not enabled, it...
Exploit for CVE-2026-62737
CVE-2026-62737 - ExecutionContext.sys Windows 11 zero-day !M...
Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands
The Computer Emergency Response Team of Ukraine CERT-UA has disclosed details of a new social engineering campaign orchestrated by Russian nation-state threat actors targeting IT workers in the country by masquerading as recruiters to trick them into installing malware. CERT-UA pinned the activit...
EUVD-2022-56016
Weaver Fanwei E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitrary data from the backend database by manipulating the id GET parameter. Attackers can send a single crafted GET reques...
EUVD-2016-10910
Weaver Fanwei E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthenticated remote attackers to read arbitrary files by injecting a UNION SELECT payload into the markId GET parameter, which is concatenated unsanitized into a SQL query. Attackers...
EUVD-2026-56603
Improper link resolution before file access 'link following' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to perform tampering locally...
EUVD-2026-56597
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...
EUVD-2026-56598
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...
EUVD-2026-56599
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...
EUVD-2026-56601
Improper link resolution before file access 'link following' in Windows Management Services allows an authorized attacker to deny service locally...
EUVD-2026-56596
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...
EUVD-2026-56587
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally...
EUVD-2026-56564
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
EUVD-2026-56586
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally...
EUVD-2026-56469
Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally...
EUVD-2026-56467
Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network...
EUVD-2026-56468
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...