97 matches found
PT-2025-42134
Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description An issue exists in Windows Local Session Manager LSM where improper validation of input can allow an authorized attacker to cause a denial of service over a network. Recommendations ...
EUVD-2020-28450
Malware in sbrugna...
EUVD-2020-3845
Malware in sbrugna...
EUVD-2023-23295
Malicious code in bioql PyPI...
EUVD-2025-17741
Malicious code in bioql PyPI...
EUVD-2022-40605
Malicious code in bioql PyPI...
EUVD-2025-6260
Malicious code in bioql PyPI...
CVE-2025-53809
Improper input validation in Windows Local Security Authority Subsystem Service LSASS allows an authorized attacker to deny service over a network...
CVE-2025-10213 DLL search path hijacking vulnerability
DLL search path hijacking vulnerability in the UPDF.exe executable for Windows version 1.8.5.0 allows attackers with local access to execute arbitrary code by placing a dxtn.dll file of their choice in the 'C:\Users\AppData\Local\Microsoft\WindowsApps' directory, which could lead to arbitrary...
CVE-2025-53809
Improper input validation in Windows Local Security Authority Subsystem Service LSASS allows an authorized attacker to deny service over a network...
CVE-2024-13972
CVE-2024-13972 affects Sophos Intercept X for Windows updater prior to Core Agent 2024.3.2. The root cause is mishandling of registry permissions that allows a local user to escalate to SYSTEM during a product upgrade. CVSSv3.1 vector: LOCAL, LOW attack complexity, PR: LOW, UI: NONE, Scope: CHANG...
Advantech iView SQL Injection Vulnerability (CNVD-2025-17830)
Advantech iView is a Simple Network Protocol SNMP based software from Advantech, China to manage B + B SmartWorx devices. An SQL injection vulnerability exists in Advantech iView, which can be exploited by an attacker to perform SQL injection and execute code in the context of the 'nt...
CVE-2025-36630 Local Privilege Escalation
In Tenable Nessus versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege...
CVE-2025-36631
CVE-2025-36631 affects Tenable Agent on Windows before version 10.8.5, where a non-administrative user could overwrite arbitrary local system files with content written to logs, executing with SYSTEM privileges (local privilege escalation). The issue is confirmed across multiple sources in the co...
CVE-2025-36633 Local Privilege Escalation
In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could arbitrarily delete local system files with SYSTEM privilege, potentially leading to local privilege escalation...
CVE-2025-33057
Null pointer dereference in Windows Local Security Authority LSA allows an authorized attacker to deny service over a network...
CVE-2025-32724
Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service LSASS allows an unauthorized attacker to deny service over a network...
CVE-2025-32724
Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service LSASS allows an unauthorized attacker to deny service over a network...