Lucene search
+L

115 matches found

Kitploit
Kitploit
•added 2026/10/06 10:53 a.m.•14 views

cve-2015-1427

CVE-2015-1427 这是 Cved 的一部分: 一个管理易受攻击的 Docker 容器的工具。 Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2015-1427 Image author: https://github.com/t0kx/exploit-CVE-2015-1427...

9.8CVSS8.5AI score0.99906EPSS
SaveExploits20References3
Kitploit
Kitploit
•added 2026/10/05 2:14 p.m.•16 views

Groovy-scripting-engine-CVE-2015-1427

ElasticSearch Groovy Sandbox Bypass && Code Execution Vulnerability CVE-2015-1427 Test Environment jre version: openjdk:8-jre elasticsearch version: v1.4.2 Principle Reference articles: http://cb.drops.wiki/drops/papers-5107.html...

9.8CVSS8.7AI score0.99906EPSS
SaveExploits20References1
Kitploit
Kitploit
•added 2026/10/01 10:30 p.m.•12 views

CVE-2015-1427-for-trixie

This repository does not have a README...

9.8CVSS8.3AI score0.99906EPSS
SaveExploits20
Tenable Nessus
Tenable Nessus
•added 2026/08/04 12:00 a.m.•16 views

MiracleLinux 9 : runc-1.4.2-2.el9_8 (AXSA:2026-1427:03)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1427:03 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient...

7.5CVSS7.5AI score0.00834EPSS
SaveExploits0References4
OSV
OSV
•added 2026/01/26 8:16 a.m.•14 views

CVE-2026-1427

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

8.7CVSS6.1AI score0.01424EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/01/26 8:06 a.m.•9 views

CVE-2026-1427

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

8.8CVSS6.1AI score0.01424EPSS
SaveExploits0References3
Circl
Circl
•added 2026/01/26 7:33 a.m.•15 views

CVE-2026-1427

creationtimestamp| type| source ---|---|--- 2026-01-26 07:33:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10655-59160-2.html 2026-01-26 09:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdcuydgw3f2m 2026-01-26 09:58:34+00:00| seen|...

8.8CVSS5.8AI score0.01424EPSS
SaveExploits0References4
GithubExploit
GithubExploit
•added 2025/12/17 10:07 a.m.•376 views

Exploit for CVE-2015-1427

Penetration Testing Framework !License: MIThttps://img.sh...

10CVSS7.8AI score0.99906EPSS
SaveExploits128
RedhatCVE
RedhatCVE
•added 2025/05/22 4:20 p.m.•15 views

CVE-2020-1427

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390, CVE-2020-1428, CVE-2020-1438...

7.8CVSS6.6AI score0.00762EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 8:07 a.m.•8 views

CVE-2019-1427

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge HTML-based, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1426, CVE-2019-1428, CVE-2019-1429...

7.6CVSS6.8AI score0.7729EPSS
SaveExploits4References1
Circl
Circl
•added 2025/03/18 4:00 a.m.•30 views

CVE-2025-1427

creationtimestamp| type| source ---|---|--- 2025-03-18 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-162/ 2025-04-04 14:35:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10452...

7.8CVSS7.5AI score0.00248EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/03/15 5:11 p.m.•21 views

CVE-2025-1427

A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS7.6AI score0.00248EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/13 5:15 p.m.•44 views

CVE-2025-1427

A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS0.00248EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/03/13 4:46 p.m.•42 views

CVE-2025-1427 CATPRODUCT File Parsing Uninitialized Variable Vulnerability

A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS0.00248EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/03/13 4:46 p.m.•8 views

CVE-2025-1427 CATPRODUCT File Parsing Uninitialized Variable Vulnerability

A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS7.7AI score0.00248EPSS
SaveExploits0References3
CVE
CVE
•added 2025/03/13 4:46 p.m.•128 views

CVE-2025-1427

Autodesk AutoCAD is affected by CVE-2025-1427 due to an Uninitialized Variable vulnerability when parsing a malicious CATPRODUCT file. Root cause: uninitialized variable in CATPRODUCT parsing. Impact: crash, read sensitive data, or execute arbitrary code in the current process. Exploitation is lo...

7.8CVSS7.7AI score0.00248EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2022-1427

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds Read in mrbobjiskindof in in GitHub repository mruby/mruby prior to 3.2. Impact: Possible arbitrary code execution if being exploited. CVE-2022-14...

7.8CVSS7.8AI score0.00477EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/07/02 5:32 a.m.•18 views

CVE-2024-1427 The Post Grid <= 7.7.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via section title tag

The The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the section title tag attribute in all versions up to, and including, 7.7.1 due to insufficient input sanitization and output escaping on user...

6.4CVSS5.9AI score0.00341EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/07/02 5:32 a.m.•61 views

CVE-2024-1427 The Post Grid <= 7.7.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via section title tag

The The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the section title tag attribute in all versions up to, and including, 7.7.1 due to insufficient input sanitization and output escaping on user...

6.4CVSS0.00341EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2024/07/02 12:00 a.m.•26 views

WordPress The Post Grid Plugin <= 7.7.1 is vulnerable to Cross Site Scripting (XSS)

Software The Post Grid Type Plugin Vulnerable versions = 7.7.1 Fixed in 7.7.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1427 Patch priority Low CVSS severity Low 6.5 Developer Mamunur Rashid PSID a5074a7894c0 Credits wesley wcraft Required...

6.4CVSS5.8AI score0.00341EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder