34 matches found
CVE-2025-11792
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 41124...
CVE-2025-11792
The CVE-2025-11792 entry affects Acronis Cyber Protect Cloud Agent on Windows, vulnerable prior to build 41124, due to DLL hijacking enabling local privilege escalation. The issue is a local exploit with high impact on confidentiality, integrity, and availability as per CVSS v3.0: AV:L/AC:L/PR:L/...
CVE-2026-28727
Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 macOS before build 41186, Acronis Cyber Protect Cloud Agent macOS before build 41124, Acronis True Image macOS before build 42902...
CVE-2026-28727
Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 macOS before build 41186, Acronis Cyber Protect Cloud Agent macOS before build 41124, Acronis True Image macOS before build 42902...
PT-2026-23578
Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 17 versions prior to build 41186 Acronis Cyber Protect Cloud Agent versions prior to build 41124 Description The software contains a flaw related to insufficient authorization checks, potentially leading to sensitive...
PT-2026-23579
Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect Cloud Agent Windows versions prior to build 41124 Description A local privilege escalation can occur due to a DLL hijacking issue. This allows an attacker to execute code with elevated privileges. Recommendations Update...
PT-2026-23601
Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 macOS before build 41186, Acronis Cyber Protect Cloud Agent macOS before build 41124...
PT-2026-23577
Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect Cloud Agent Linux, macOS, Windows versions prior to build 41124 Description Credentials are not deleted from the Acronis Agent after plan revocation. This can potentially lead to unauthorized access or misuse of the store...
CVE-2024-41124
creationtimestamp| type| source ---|---|--- 2024-07-19 22:53:54+00:00| seen| https://t.me/cvedetector/1234...
CVE-2024-41124
CVE-2024-41124 affects the Puncia CLI (Official CLI for Subdomain Center & Exploit Observer) where API_URLS communicated over HTTP instead of HTTPS. Root cause: cleartext transmission enabling eavesdropping, data tampering, unauthorized data access, and MITM risks. The issue is mitigated in relea...
CVE-2024-41124 Puncia Cleartext Transmission of Sensitive Information via HTTP urls in `API_URLS`
Puncia is the Official CLI utility for Subdomain Center & Exploit Observer. APIURLS is utilizing HTTP instead of HTTPS for communication that can lead to issues like Eavesdropping, Data Tampering, Unauthorized Data Access & MITM Attacks. This issue has been addressed in release version 0.21 by...
CVE-2023-41124
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
CVE-2021-41124
The CVE affects the scrapy-splash library used with Scrapy. When HttpAuthMiddleware (http_user/http_pass) is used for Splash authentication, non-Splash requests can leak credentials to the target, including robots.txt requests if ROBOTSTXT_OBEY is True. Remediation per the reports is to upgrade t...