Lucene search
K

115 matches found

Circl
Circl
added 2026/04/07 1:16 a.m.3 views

CVE-2026-5689

creationtimestamp| type| source ---|---|--- 2026-04-07 01:16:43+00:00| published-proof-of-concept| Telegram/NRb0QMHrG2YdeQFhFIBC199wVAoJ1DSSMrQ5jp3E6gcHNig...

7.5CVSS7.3AI score0.01153EPSS
Exploits0
NVD
NVD
added 2026/04/06 11:16 p.m.3 views

CVE-2026-5689

A vulnerability was detected in Totolink A7100RU 7.4cu.2313b20191024. The affected element is the function setNtpCfg of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument tz results in os command injection. Remote exploitation of the attack is possible. The exploit is now...

7.5CVSS0.01153EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/04/06 10:30 p.m.16 views

CVE-2026-5689 Totolink A7100RU cstecgi.cgi setNtpCfg os command injection

A vulnerability was detected in Totolink A7100RU 7.4cu.2313b20191024. The affected element is the function setNtpCfg of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument tz results in os command injection. Remote exploitation of the attack is possible. The exploit is now...

7.5CVSS0.01153EPSS
Exploits0References5
OSV
OSV
added 2026/03/25 10:15 a.m.0 views

RHSA-2026:5689 Red Hat Security Advisory: kernel security update

Bulletin has no description...

7.5CVSS5.7AI score0.00033EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2017-14775

Malware in sbrugna...

4.9CVSS4.9AI score0.0012EPSS
Exploits6References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2018-5689

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in admin/auth.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the...

5.4CVSS5.8AI score0.00163EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2024-5689

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In addition to detecting when a user was taking a screenshot XXX, a website was able to overlay the 'My Shots' button that appeared, and direct the user to a...

4.3CVSS6.9AI score0.00693EPSS
Exploits0References2
Circl
Circl
added 2025/06/16 12:42 p.m.8 views

CVE-2025-5689

creationtimestamp| type| source ---|---|--- 2025-06-16 12:42:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18446 2025-06-16 19:42:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114694747478598696 2025-06-16 19:47:13+00:00| seen|...

8.5CVSS5.2AI score0.00075EPSS
Exploits0References4
NVD
NVD
added 2025/06/16 12:15 p.m.7 views

CVE-2025-5689

A flaw was found in the temporary user record that authd uses in the pre-auth NSS. As a result, a user login for the first time will be considered to be part of the root group in the context of that SSH session...

8.5CVSS0.00075EPSS
Exploits0References1
CVE
CVE
added 2025/06/16 11:37 a.m.63 views

CVE-2025-5689

CVE-2025-5689 concerns ubuntu/authd and related components. A flaw in the temporary user record used by authd during pre-auth NSS can cause a first-time SSH login to place the new user into the root group for that SSH session, potentially exposing root-group read/write access during that session....

8.5CVSS7AI score0.00075EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/16 11:37 a.m.4 views

CVE-2025-5689 Improper Permission Management in SSH Session Handling

A flaw was found in the temporary user record that authd uses in the pre-auth NSS. As a result, a user login for the first time will be considered to be part of the root group in the context of that SSH session...

8.5CVSS6.3AI score0.00075EPSS
Exploits0References1
OSV
OSV
added 2025/06/06 2:4 p.m.1 views

OESA-2025-1604 firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Security Fixes: In addition to detecting when a user was taking a screenshot XXX, a website was able to overlay the 'My Shots' button tha...

4.3CVSS8.3AI score0.00693EPSS
Exploits0References2
OSV
OSV
added 2025/04/03 10:27 p.m.7 views

CGA-5689-G646-C847

Bulletin has no description...

9.6CVSS7.2AI score0.00451EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2016-5689

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of NULL pointer checks...

9.8CVSS8.2AI score0.01978EPSS
Exploits1References2
Rosalinux
Rosalinux
added 2025/01/28 7:41 p.m.26 views

Advisory ROSA-SA-2025-2665

software: postgresql 12.16 WASP: ROSA-CHROME packageevrstring: postgresql-12.16 CVE-ID: CVE-2023-5868 BDU-ID: 2023-07905 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in the PostgreSQL database management system is related to the lack of service data protection in function calls with aggregation...

7.1CVSS6.6AI score0.02718EPSS
Exploits1
Packet Storm
Packet Storm
added 2024/09/01 12:0 a.m.318 views

Intel AMT Digest Authentication Bypass Scanner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Intel AMT Digest Authentication Bypass Scanner', 'Description' = %q This module scans for Intel Active Management Technology endpoints and attemp...

10CVSS7.2AI score0.94194EPSS
Exploits7
OpenVAS
OpenVAS
added 2024/07/04 12:0 a.m.20 views

Ubuntu: Security Advisory (USN-6862-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.4AI score0.0588EPSS
Exploits2References2
Ubuntu
Ubuntu
added 2024/07/03 5:46 a.m.45 views

USN-6862-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. CVE-2024-5689, CVE-2024-5690,...

9.8CVSS7.7AI score0.0588EPSS
Exploits2
SUSE CVE
SUSE CVE
added 2024/06/15 2:20 a.m.1 views

SUSE CVE-2024-5689

In addition to detecting when a user was taking a screenshot XXX, a website was able to overlay the 'My Shots' button that appeared, and direct the user to a replica Firefox Screenshots page that could be used for phishing. This vulnerability affects Firefox 127...

4.3CVSS6.2AI score0.00693EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2024/06/13 12:0 a.m.21 views

Mozilla Firefox Security Update (mfsa_2024-23_2024-26) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

9.8CVSS7.4AI score0.0588EPSS
Exploits3References1
Rows per page
Query Builder