Lucene search
K

48 matches found

Circl
Circl
added 2026/02/03 10:0 a.m.2 views

CVE-2025-8461

creationtimestamp| type| source ---|---|--- 2026-02-03 10:00:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdx42ssepk2x...

7.6CVSS5.8AI score0.00047EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-8461

Malicious code in bioql PyPI...

6.5CVSS6.4AI score0.0047EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/05/23 7:19 a.m.3 views

CVE-2024-8461

A vulnerability, which was classified as problematic, was found in D-Link DNS-320 2.02b01. This affects an unknown part of the file /cgi-bin/discovery.cgi of the component Web Management Interface. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. T...

6.9CVSS5.2AI score0.01612EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:2 a.m.3 views

CVE-2019-8461

Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed. An attacker can leverage this to gain LPE using a specially crafted DLL placed in any PATH location accessible with...

7.8CVSS7AI score0.00164EPSS
Exploits1References1
Circl
Circl
added 2024/09/05 4:22 p.m.1 views

CVE-2024-8461

creationtimestamp| type| source ---|---|--- 2024-09-05 16:22:20+00:00| seen| https://t.me/cvedetector/4917...

6.9CVSS6.2AI score0.01612EPSS
Exploits1References1
CVE
CVE
added 2024/09/05 12:31 p.m.51 views

CVE-2024-8461

The CVE-2024-8461 case concerns D-Link DNS-320 firmware 2.02b01 where the Web Management Interface file /cgi-bin/discovery.cgi mishandles access, enabling information disclosure. Documents state the vulnerability can be triggered remotely and that public exploits exist. The affected product is en...

6.9CVSS5.1AI score0.01612EPSS
Exploits1References6Affected Software1
F5 Networks
F5 Networks
added 2023/02/21 5:28 p.m.28 views

K30673534: BIND vulnerability CVE-2015-8461

Security Advisory Description Beginning with the September 2015 maintenance releases 9.9.8 and 9.10.3, an error was introduced into BIND 9 which can cause a server to exit after encountering an INSIST assertion failure in resolver.c. CVE-2015-8461 Impact There is no impact; F5 products are not...

7.1CVSS7.4AI score0.15997EPSS
Exploits0
OpenVAS
OpenVAS
added 2022/04/21 12:0 a.m.24 views

Slackware: Security Advisory (SSA:2015-349-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.4AI score0.68868EPSS
Exploits1References2
0day.today
0day.today
added 2021/03/08 12:0 a.m.110 views

Microsoft Windows RRAS Service MIBEntryGet Overflow Exploit

This Metasploit module exploits an overflow in the Windows Routing and Remote Access Service RRAS to execute code as SYSTEM. The RRAS DCERPC endpoint is accessible to unauthenticated users via SMBv1 browser named pipe on Windows Server 2003 and Windows XP hosts; however, this module targets Windo...

7.8CVSS8.1AI score0.08421EPSS
Exploits4
Circl
Circl
added 2021/03/05 10:8 a.m.8 views

CVE-2017-8461

creationtimestamp| type| source ---|---|--- 2021-03-05 10:08:41+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/smbrraserraticgopher.rb 2024-10-14 21:44:46+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/508 2025-02-06...

7.8CVSS7.6AI score0.08421EPSS
Exploits4References2
Packet Storm
Packet Storm
added 2021/03/05 12:0 a.m.453 views

Microsoft Windows RRAS Service MIBEntryGet Overflow

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft Windows RRAS Service MIBEntryGet Overflow', 'Description' = %q This module exploits an overflow in the Windows Routing and Remote Acces...

6.9CVSS7.8AI score0.08421EPSS
Exploits4
NVD
NVD
added 2020/12/17 9:15 p.m.9 views

CVE-2020-8465

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to manipulate system updates using a combination of CSRF bypass CVE-2020-8461 and authentication bypass CVE-2020-8464 to execute code as user root...

10CVSS8.4AI score0.00178EPSS
Exploits2References2
CVE
CVE
added 2020/12/17 9:5 p.m.48 views

CVE-2020-8461

CVE-2020-8461 describes a CSRF protection bypass in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2. An attacker could induce a victim to make a specially encoded request without a valid CSRF token, effectively bypassing CSRF protections. This affects IWSVA 6.5 SP2; CVSS metrics indi...

8.8CVSS9AI score0.00231EPSS
Exploits2References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/03/25 12:0 a.m.24 views

Check Point Local Privilege Escalation

The remote host is running a version of Checkpoint Endpoint Security Initial Client. that is vulnerable to a local privilege escalation vulnerability. The vulnerability exists because vulnerable versions attempt to load a DLL that is placed in any PATH location on a clean install. An attacker cou...

7.8CVSS7.5AI score0.00164EPSS
Exploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2019/12/18 2:26 p.m.34 views

Security Bulletin: IBM i is affected by networking BIND vulnerabilities.

Summary ISC BIND is vulnerable to several security vulnerabilities. Vulnerability Details CVEID: CVE-2015-8000 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by an error in db.c when parsing incoming responses. A remote attacker could exploit this vulnerability to trigger a...

7.1CVSS2.4AI score0.68868EPSS
Exploits0Affected Software1
CheckPoint Security
CheckPoint Security
added 2019/08/31 8:55 p.m.22 views

Check Point Response to CVE-2019-8461 - Endpoint Security Initial Client

...

6.8CVSS2.1AI score0.00164EPSS
Exploits1Affected Software1
NVD
NVD
added 2019/08/29 9:15 p.m.7 views

CVE-2019-8461

Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed. An attacker can leverage this to gain LPE using a specially crafted DLL placed in any PATH location accessible with...

7.8CVSS7.7AI score0.00164EPSS
Exploits1References2
CVE
CVE
added 2019/08/29 8:41 p.m.113 views

CVE-2019-8461

CVE-2019-8461 – Check Point Endpoint Security Initial Client for Windows is a local privilege escalation vulnerability affecting versions prior to E81.30. The issue arises when the client loads a DLL placed in any PATH location on a clean image without the Endpoint Client installed, allowing an a...

7.8CVSS7.7AI score0.00164EPSS
Exploits1References2Affected Software3
NVD
NVD
added 2018/09/13 12:29 a.m.14 views

CVE-2018-8461

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-8447...

7.6CVSS7.8AI score0.28809EPSS
Exploits0References3
Prion
Prion
added 2018/09/13 12:29 a.m.19 views

Remote code execution

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8461...

7.6CVSS7.7AI score0.28809EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder