Lucene search
K

248 matches found

GithubExploit
GithubExploit
added 2026/03/18 4:29 p.m.131 views

Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Openssl

🔐 SSH Exploit Tool Educational Use Only 📌 Description Th...

7.8CVSS7AI score0.70721EPSS
Exploits7
RedhatCVE
RedhatCVE
added 2026/01/09 8:41 a.m.8 views

CVE-2022-0166

A privilege escalation vulnerability in the McAfee Agent prior to 5.7.5. McAfee Agent uses openssl.cnf during the build process to specify the OPENSSLDIR variable as a subdirectory within the installation directory. A low privilege user could have created subdirectories and executed arbitrary cod...

7.8CVSS7.4AI score0.02969EPSS
Exploits0References1
EUVD
EUVD
added 2026/01/02 6:30 p.m.1 views

EUVD-2026-0166

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

5.5AI score
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2008-2282

Malware in sbrugna...

5CVSS6.1AI score0.01693EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2011-0166

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The HTML5 drag and drop functionality in WebKit in Apple Safari before 5.0.4 allows user-assisted remote attackers to bypass the Same Origin Policy and obtain...

5.8CVSS8.1AI score0.02063EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 2:51 a.m.10 views

CVE-2023-0166

The Product Slider for WooCommerce by PickPlugins WordPress plugin before 1.13.42 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored...

5.4CVSS5.9AI score0.00477EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:58 p.m.11 views

CVE-2020-0166

In multiple functions of URI.java, there is a possible escalation of privilege due to missing validation in the parceling of URI information. This could lead to a local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

7.8CVSS8.6AI score0.0015EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 6:5 a.m.2 views

CVE-2019-0166

Insufficient input validation in the subsystem for IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access...

7.5CVSS6.6AI score0.01385EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2013-0166

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCS...

5CVSS7.3AI score0.1965EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/07/23 12:0 a.m.14 views

Photon OS 4.0: Squashfs PHSA-2022-4.0-0166

An update of the squashfs package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0166. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

8.1CVSS6.9AI score0.025EPSS
Exploits2References3
Tenable Nessus
Tenable Nessus
added 2024/07/23 12:0 a.m.34 views

Photon OS 4.0: Httpd PHSA-2022-4.0-0166

An update of the httpd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0166. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

9.8CVSS8.8AI score0.69803EPSS
Exploits0References5
Circl
Circl
added 2024/03/15 12:41 p.m.6 views

CVE-2019-0166

creationtimestamp| type| source ---|---|--- 2024-03-15 12:41:28+00:00| seen| https://t.me/ctinow/208704...

7.5CVSS7.9AI score0.01385EPSS
Exploits0References1
Circl
Circl
added 2024/02/12 8:26 p.m.6 views

CVE-2024-0166

creationtimestamp| type| source ---|---|--- 2024-02-12 20:26:48+00:00| seen| https://t.me/ctinow/183372 2025-05-06 21:21:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15226...

7.8CVSS7.5AI score0.01101EPSS
Exploits0References2
NVD
NVD
added 2024/02/12 7:15 p.m.13 views

CVE-2024-0166

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svctcpdump utility. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands with elevated privileges...

7.8CVSS7.9AI score0.01101EPSS
Exploits0References1
CVE
CVE
added 2024/02/12 6:27 p.m.50 views

CVE-2024-0166

Dell Unity contains an OS Command Injection in the svc_tcpdump utility for versions prior to 5.4. An authenticated, local attacker can exploit this to execute arbitrary OS commands with elevated privileges. The underlying issue is command parsing/input handling in svc_tcpdump, enabling command ex...

7.8CVSS7.8AI score0.01101EPSS
Exploits0References1Affected Software1
F5 Networks
F5 Networks
added 2023/02/21 7:29 p.m.42 views

K14261: OpenSSL OCSP vulnerability CVE-2013-0166

Security Advisory Description OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for Online Certificate Status Protocol OCSP responses, which allow remote attackers to cause a denial-of-service DoS NULL pointer dereference and...

8AI score
Exploits0Affected Software13
SUSE CVE
SUSE CVE
added 2023/02/15 4:19 a.m.2 views

SUSE CVE-2019-0166

Insufficient input validation in the subsystem for IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access...

7.5CVSS7.6AI score0.01385EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2023/02/13 2:32 p.m.10 views

CVE-2023-0166 PickPlugins Product Slider for WooCommerce < 1.13.42 - Contributor+ Stored XSS

The Product Slider for WooCommerce by PickPlugins WordPress plugin before 1.13.42 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored...

5.4AI score0.00477EPSS
Exploits2References1
CVE
CVE
added 2023/02/13 2:32 p.m.55 views

CVE-2023-0166

The CVE refers to the WordPress plugin Product Slider for WooCommerce by PickPlugins, affected in versions prior to 1.13.42. The vulnerability arises because certain shortcode attributes are not validated or escaped before being output in a page or post, enabling Stored Cross-Site Scripting when ...

5.4CVSS5.3AI score0.00477EPSS
Exploits2References1Affected Software1
Cvelist
Cvelist
added 2023/02/13 2:32 p.m.17 views

CVE-2023-0166 PickPlugins Product Slider for WooCommerce < 1.13.42 - Contributor+ Stored XSS

The Product Slider for WooCommerce by PickPlugins WordPress plugin before 1.13.42 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored...

5.6AI score0.00477EPSS
Exploits2References1
Rows per page
Query Builder