Início / CVEs
Base de CVEs
Vulnerabilidades publicadas, com severidade, exploração conhecida e fontes oficiais.
CVE-2025-63685
Crítica · 9.8
CWE-491 20/11/2025
Quark Cloud Drive v3.23.2 has a DLL Hijacking vulnerability. This vulnerability stems…
Quark Cloud Drive v3.23.2 has a DLL Hijacking vulnerability. This vulnerability stems from the insecure loading of system libraries. Specifically, the application does not validate the path or signature of [regsvr32.exe] it loads. An attacker can place a crafted malicious DLL in the application's startup directory, which will be loaded and executed when the user launches the program.
CVE-2025-60425
Alta · 8.6
CWE-491 27/10/2025
Nagios Fusion v2024R1.2 and v2024R2 does not invalidate already existing session tokens…
Nagios Fusion v2024R1.2 and v2024R2 does not invalidate already existing session tokens when the two-factor authentication mechanism is enabled, allowing attackers to perform a session hijacking attack.