Lucene search
+L

32789 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2018-15599

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The recvmsguserauthrequest function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how...

5.3CVSS6.5AI score0.02686EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/19 12:0 a.m.12 views

Shell Script Compiler 安全漏洞

Shell Script Compiler is a Shell Script Compiler by the individual developer Md Jahidul Hamid. A security vulnerability exists in Shell Script Compiler version 4.0.3 and earlier, which stems from a stack buffer overflow in the file src/shc.c function make...

7.8CVSS7.4AI score0.00189EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.25 views

Linux Distros Unpatched Vulnerability : CVE-2023-38408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The PKCS11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded...

9.8CVSS7.9AI score0.797EPSS
SaveExploits10References2
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2023-47039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Perl. This security issue occurs while Perl for Windows relies on the system path environment variable to find the shell cmd.exe...

7.8CVSS7AI score0.00417EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2021-20315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the Application menu or Window list GNOME...

6.1CVSS6.2AI score0.00196EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2025/08/18 5:6 p.m.318 views

Exploit for CVE-2025-49113

CVE-2025-49113 – Roundcube 1.6.10 Authenticated Remote Code Ex...

9.9CVSS10AI score0.97694EPSS
SaveExploits29
GithubExploit
GithubExploit
added 2025/08/18 3:40 p.m.642 views

Exploit for CVE-2024-28397

CVE-2024-28397 RCE Script Default reverse shell payload and o...

5.3CVSS6.6AI score0.04548EPSS
SaveExploits22
NVD
NVD
added 2025/08/18 2:15 p.m.12 views

CVE-2025-36120

IBM Storage Virtualize 8.4, 8.5, 8.6, and 8.7 could allow an authenticated user to escalate their privileges in an SSH session due to incorrect authorization checks to access resources...

8.8CVSS0.00295EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/18 1:39 p.m.69 views

CVE-2025-36120

CVE-2025-36120 affects IBM Storage Virtualize 8.4–8.7 and can allow an authenticated user to escalate privileges in an SSH session due to incorrect authorization checks when accessing resources. The IBM Security Bulletin details the vulnerability under CWE-863 (Incorrect Authorization) and lists ...

8.8CVSS6.5AI score0.00295EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/08/18 1:39 p.m.18 views

CVE-2025-36120 IBM Storage Virtualize privilege escalation

IBM Storage Virtualize 8.4, 8.5, 8.6, and 8.7 could allow an authenticated user to escalate their privileges in an SSH session due to incorrect authorization checks to access resources...

8.8CVSS0.00295EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/08/18 1:39 p.m.4 views

CVE-2025-36120

IBM Storage Virtualize 8.4, 8.5, 8.6, and 8.7 could allow an authenticated user to escalate their privileges in an SSH session due to incorrect authorization checks to access resources...

8.8CVSS5.8AI score0.00295EPSS
SaveExploits0References2Affected Software1
Packet Storm News
Packet Storm News
added 2025/08/18 12:0 a.m.6 views

Skyvern 0.1.85 Server-Side Template Injection

Proof of concept exploit that leverages a server-side template injection flaw in Skyvern versions up to 0.1.85 to launch a reverse shell...

8.5CVSS7AI score0.20593EPSS
SaveExploits6
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-22254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Under very specific conditions a user could be impersonated using Gitlab shell. This vulnerability affects GitLab CE/EE 13.1 and later through 14.1.2, 14.0.7 an...

4.3CVSS5AI score0.0087EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2020-8813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - graphrealtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph...

9.3CVSS7.2AI score0.73779EPSS
SaveExploits24References2
Positive Technologies
Positive Technologies
added 2025/08/18 12:0 a.m.14 views

PT-2025-33650 · Ibm · Ibm Storage Virtualize

Name of the Vulnerable Software and Affected Versions: IBM Storage Virtualize versions 8.4 through 8.7 Description: An authenticated user may be able to escalate their privileges within an SSH session due to incorrect authorization checks when accessing resources. Recommendations: IBM Storage...

8.8CVSS6.2AI score0.00295EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2019-17069

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1MSGDISCONNECT message...

7.5CVSS7.4AI score0.02248EPSS
SaveExploits0References2
Veracode
Veracode
added 2025/08/17 5:49 p.m.11 views

Remote Code Execution (RCE)

ms-swift is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper output neutralization for logs because malicious input passed into the train method is concatenated into shell commands, allowing arbitrary command execution...

8.1AI score
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/08/17 8:29 a.m.19 views

CVE-2025-9020

A vulnerability was found in PX4 PX4-Autopilot up to 1.15.4. This issue affects the function MavlinkReceiver::handlemessageserialcontrol of the file src/modules/mavlink/mavlinkreceiver.cpp of the component Mavlink Shell Closing Handler. The manipulation of the argument mavlinkshell leads to use...

4.5CVSS7.3AI score0.00151EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/08/17 6:29 a.m.154 views

Exploit for CVE-2025-32778

CVE-2025-32778 - Web-Check Command Injection Exploit !Criti...

9.3CVSS8.2AI score0.19326EPSS
SaveExploits4
RedhatCVE
RedhatCVE
added 2025/08/16 5:25 p.m.11 views

CVE-2025-20265

A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the device. This vulnerability is due to a lack of proper handling of user input...

10CVSS7.9AI score0.14777EPSS
SaveExploits1References1
Rows per page
Query Builder