Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2025-63685
Critical · 9.8
CWE-491 Nov 20, 2025
Quark Cloud Drive v3.23.2 has a DLL Hijacking vulnerability. This vulnerability stems…
Quark Cloud Drive v3.23.2 has a DLL Hijacking vulnerability. This vulnerability stems from the insecure loading of system libraries. Specifically, the application does not validate the path or signature of [regsvr32.exe] it loads. An attacker can place a crafted malicious DLL in the application's startup directory, which will be loaded and executed when the user launches the program.
CVE-2025-60425
High · 8.6
CWE-491 Oct 27, 2025
Nagios Fusion v2024R1.2 and v2024R2 does not invalidate already existing session tokens…
Nagios Fusion v2024R1.2 and v2024R2 does not invalidate already existing session tokens when the two-factor authentication mechanism is enabled, allowing attackers to perform a session hijacking attack.