Lucene search
K

20 matches found

Circl
Circl
added 2 days ago7 views

CVE-2026-11492

creationtimestamp| type| source ---|---|--- 2026-06-08 06:55:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnr426sgxq26...

8.8CVSS5.3AI score0.00024EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/17 7:46 p.m.2 views

CVE-2025-11492

In the ConnectWise Automate Agent, communications could be configured to use HTTP instead of HTTPS. In such cases, an on-path threat actor with a man-in-the-middle network position could intercept, modify, or replay agent-server traffic. Additionally, the encryption method used to obfuscate some...

9.6CVSS6.8AI score0.00009EPSS
Exploits0References1
Circl
Circl
added 2025/10/17 12:4 a.m.1 views

CVE-2025-11492

creationtimestamp| type| source ---|---|--- 2025-10-17 00:04:25+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3dxwygcl62e 2025-10-17 05:18:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m3ejixlaun27 2025-10-18 03:09:33+00:00| seen|...

9.6CVSS5.1AI score0.00009EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/05/23 6:54 a.m.8 views

CVE-2024-11492

A vulnerability classified as problematic has been found in 115cms up to 20240807. This affects an unknown part of the file /index.php/admin/web/appurladd.html. The manipulation of the argument tid leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

6.1CVSS5.9AI score0.00127EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:10 p.m.10 views

CVE-2020-11492

An issue was discovered in Docker Desktop through 2.2.0.5 on Windows. If a local attacker sets up their own named pipe prior to starting Docker with the same name, this attacker can intercept a connection attempt from Docker Service which runs as SYSTEM, and then impersonate their privileges...

7.8CVSS6.5AI score0.05596EPSS
Exploits2References1
Tenable Nessus
Tenable Nessus
added 2023/09/15 12:0 a.m.33 views

Docker Desktop < 2.3.0.2 Privilege Escalation

The version of Docker Desktop for Windows is prior to 2.3.0.2. It is therefore affected by a privilege escalation vulnerability whereby if a local attacker sets up their own named pipe prior to starting Docker with the same name, this attacker can intercept a connection attempt from Docker Servic...

7.8CVSS7.1AI score0.05596EPSS
Exploits2References3
NVD
NVD
added 2020/06/05 2:15 p.m.22 views

CVE-2020-11492

An issue was discovered in Docker Desktop through 2.2.0.5 on Windows. If a local attacker sets up their own named pipe prior to starting Docker with the same name, this attacker can intercept a connection attempt from Docker Service which runs as SYSTEM, and then impersonate their privileges...

7.8CVSS7.4AI score0.05596EPSS
Exploits2References2
Cvelist
Cvelist
added 2020/06/05 1:10 p.m.28 views

CVE-2020-11492

An issue was discovered in Docker Desktop through 2.2.0.5 on Windows. If a local attacker sets up their own named pipe prior to starting Docker with the same name, this attacker can intercept a connection attempt from Docker Service which runs as SYSTEM, and then impersonate their privileges...

7.4AI score0.05596EPSS
Exploits2References2
CVE
CVE
added 2020/06/05 1:10 p.m.115 views

CVE-2020-11492

Docker Desktop for Windows

7.8CVSS7.4AI score0.05596EPSS
Exploits2References2Affected Software1
GithubExploit
GithubExploit
added 2020/05/28 4:32 a.m.80 views

Exploit for Race Condition in Docker Docker_Desktop

CVE-2020-11492 Proof-of-Concept PoC for Docker Desktop for...

7.8CVSS7.8AI score0.05596EPSS
Exploits2
Pen Test Partners Blog
Pen Test Partners Blog
added 2020/05/22 8:12 a.m.226 views

Docker Desktop for Windows PrivEsc (CVE-2020-11492)

TL;DR Docker Desktop for Windows suffers from a privilege escalation vulnerability to SYSTEM. The core of the issue lies with the fact that the Docker Desktop Service, the primary Windows service for Docker, communicates as a client to child processes using named pipes. The high privilege Docker...

7.2CVSS8.2AI score0.05596EPSS
Exploits2
CVE
CVE
added 2019/04/26 8:2 p.m.50 views

CVE-2019-11492

CVE-2019-11492 affects ProjectSend before release r1070, where user passwords are written to server logs. This creates exposure of credentials via log data. According to NVD, the CVSS metrics indicate a network-accessible issue with low attack complexity and a medium (CVSS2) to high (CVSS3) base ...

7.5CVSS7.5AI score0.00322EPSS
Exploits0References1Affected Software1
exploitpack
exploitpack
added 2019/04/17 12:0 a.m.21 views

ASUS HG100 - Denial of Service

ASUS HG100 - Denial of Service Exploit Title:ASUS HG100 devices denial of serviceDOS via IPv4 packets/SlowHTTPDOS Date: 2019-04-14 Exploit Author: YinT Wang; Vendor Homepage: www.asus.com Version: Hardware version: HG100 、Firmware version: 1.05.12 Tested on: Currnet 1.05.12 CVE : CVE-2018-11492 1...

7.8CVSS7.6AI score0.08924EPSS
Exploits5
0day.today
0day.today
added 2019/04/17 12:0 a.m.38 views

ASUS HG100 - Denial of Service Exploit

Exploit Title:ASUS HG100 devices denial of serviceDOS via IPv4 packets/SlowHTTPDOS Date: 2019-04-14 Exploit Author: YinT Wang; Vendor Homepage: www.asus.com Version: Hardware version: HG100 、Firmware version: 1.05.12 Tested on: Currnet 1.05.12 CVE : CVE-2018-11492 1. Description The attack at sam...

7.5CVSS7.6AI score0.08924EPSS
Exploits5
Packet Storm
Packet Storm
added 2019/04/17 12:0 a.m.42 views

ASUS HG100 Denial Of Service

Exploit Title:ASUS HG100 devices denial of serviceDOS via IPv4 packets/SlowHTTPDOS Date: 2019-04-14 Exploit Author: YinT Wang; Vendor Homepage: www.asus.com Version: Hardware version: HG100 、Firmware version: 1.05.12 Tested on: Currnet 1.05.12 CVE : CVE-2018-11492 1. Description The attack at sam...

7.8CVSS7.6AI score0.08924EPSS
Exploits5
Exploit DB
Exploit DB
added 2019/04/17 12:0 a.m.99 views

ASUS HG100 - Denial of Service

Exploit Title:ASUS HG100 devices denial of serviceDOS via IPv4 packets/SlowHTTPDOS Date: 2019-04-14 Exploit Author: YinT Wang; Vendor Homepage: www.asus.com Version: Hardware version: HG100 、Firmware version: 1.05.12 Tested on: Currnet 1.05.12 CVE : CVE-2018-11492 1. Description The attack at sam...

7.8CVSS7.6AI score0.08924EPSS
Exploits5
CVE
CVE
added 2019/03/05 8:0 p.m.20 views

CVE-2017-11492

CVE-2017-11492 is rejected; this entry is not an active vulnerability.

7.4AI score
Exploits0
NVD
NVD
added 2018/08/10 4:29 p.m.9 views

CVE-2018-11492

ASUS HG100 devices allow denial of service via an IPv4 packet flood...

7.8CVSS7.5AI score0.08924EPSS
Exploits5References3
CVE
CVE
added 2018/08/10 4:0 p.m.86 views

CVE-2018-11492

CVE-2018-11492 affects ASUS HG100 devices, enabling denial of service via an IPv4 packet flood. Public documentation describes DoS achievable from the local network by sending crafted IPv4 packets to crash the device, with PoCs using hping3/SlowHTTPDoS and references noting hardware version HG100...

7.8CVSS7.4AI score0.08924EPSS
Exploits5References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:0 a.m.23 views

SuSE9 Security Update : man (YOU Patch Number 11492)

A heap-based buffer overflow in the 'man' command could potentially be exploited by users to run code as root. CVE-2006-4250 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

4.6CVSS5.8AI score0.00325EPSS
Exploits1References2
Rows per page
Query Builder