CVE-2025-1366

A vulnerability was found in MicroWord eScan Antivirus 7.0.32 on Linux and classified as critical. Affected by this issue is the function strcpy of the component VirusPopUp. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-119
• CWE-121

• https://github.com/dmknght/FIS_RnD/blob/main/escan_av_usb_protection_multiple_vulns.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.295970Permissions Required, VDB Entry
• https://vuldb.com/?id.295970Third Party Advisory, VDB Entry

Published

Feb 17, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-13653In Search Guard FLX versions from 3.1.0 up to 4.0.0 with ent…4.3
• CVE-2025-13654A stack buffer overflow vulnerability exists in the buffer_g…7.5
• CVE-2025-13656The Cute News Ticker plugin for WordPress is vulnerable to S…6.4
• CVE-2025-13657The HelpDesk contact form plugin for WordPress is vulnerable…4.3
• CVE-2025-13658A vulnerability in Longwatch devices allows unauthenticated …9.3
• CVE-2025-13659Improper control of dynamically managed code resources in Iv…8.8
• CVE-2025-13660The Guest Support plugin for WordPress is vulnerable to User…5.3
• CVE-2025-13661Path traversal in Ivanti Endpoint Manager prior to version 2…8
• CVE-2025-13662Improper verification of cryptographic signatures in the pat…7.8
• CVE-2025-13663Under certain circumstances, the Quartus Prime Pro Installer…6.7
• CVE-2025-13664A potential security vulnerability in Quartus® Prime Standar…6.7
• CVE-2025-13665The System Console Utility for Windows is vulnerable to a DL…6.7