482 matches found
EUVD-2025-17769
Malicious code in bioql PyPI...
EUVD-2025-10156
Malicious code in bioql PyPI...
EUVD-2023-2412
Malicious code in bioql PyPI...
EUVD-2025-20571
Malicious code in bioql PyPI...
EUVD-2024-40308
Malicious code in bioql PyPI...
BIT-LIBPHP-2024-5585 Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)
In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spaces. Original issue: when using procopen command with array syntax, due to insufficient escaping, if the arguments of the executed command ar...
BIT-LIBPHP-2024-1874 Command injection via array-ish $command parameter of proc_open()
In PHP versions 8.1. before 8.1.28, 8.2. before 8.2.18, 8.3. before 8.3.5, when using procopen command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands ...
CVE-2025-49679
Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2025-49679
Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2025-49679
Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2025-49679 Windows Shell Elevation of Privilege Vulnerability
...
CVE-2025-49679
Technical details about CVE-2025-49679 (affected product/module, root cause, impact, and remediation) are not publicly provided in the supplied documents. Monitor for official updates from Microsoft (KB/SSU) and ENISA EUVD for specifics.
CVE-2025-49679 Windows Shell Elevation of Privilege Vulnerability
...
Windows Shell Elevation of Privilege Vulnerability
Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally...
PT-2025-28577 · Microsoft · Windows Shell +1
Name of the Vulnerable Software and Affected Versions: Windows Shell affected versions not specified Description: A numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no information about a newer version...
Microsoft Windows Shell 安全漏洞
The Microsoft Windows Shell is the graphical user interface for the Windows operating system from Microsoft Corporation USA.Easily recognizable elements of the Windows shell include features such as the desktop, the taskbar, the start menu, the task switcher, and autoplay. On some versions of...
K000152033: PHP vulnerability CVE-2024-1874
Security Advisory Description In PHP versions 8.1. before 8.1.28, 8.2. before 8.2.18, 8.3. before 8.3.5, when using procopen command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that wou...
The vulnerability of the Windows Shell component in Windows operating systems allows a hacker to bypass security restrictions.
The vulnerability of the Windows Shell component in Windows operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass security restrictions remotely...