CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

39 matches found

KittySploit•added 2026/10/27 1:35 p.m.•6 views

Altus iX Developer XAML gadget screen RCE

Builds malicious .ix / .ixp with ObjectDataProvider→Process.Start from set payload. Operator opens the file in iX Developer local trigger, not network delivery. """Altus iX Developer XAML Deserialization RCE""" from future import annotations import os import tempfile from kittysploit import impor...

6AI score

SaveExploits0References1

KittySploit•added 2026/10/27 1:35 p.m.•7 views

Altus BluePlant Hardcoded Credentials RCE — Detect

Fingerprint / reachability check for Altus BluePlant Hardcoded Credentials RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Altus BluePlant Hardcoded Credentials RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info...

6.1AI score

SaveExploits0References1

KittySploit•added 2026/10/27 1:35 p.m.•5 views

Altus BluePlant hardcoded Connect bypass RunProcess RCE

Forge Connect pass via ForgePass.exe vendor TCryptoStream, acquire connectionHandle with user getserviceinfo, then SendRequest RunProcess. """Altus BluePlant Hardcoded Credentials RCE""" from future import annotations from kittysploit import from lib.protocols.http.httpclient import Httpclient...

6AI score

SaveExploits0References1

EUVD•added 2025/10/07 12:30 a.m.•26 views

EUVD-2021-25605

Malware in sbrugna...

6.5CVSS6.6AI score0.00535EPSS

SaveExploits3References4

CNNVD•added 2025/08/14 12:00 a.m.•27 views

Altus Cars Lotus Cars Android app has a security vulnerability

Altus Cars Lotus Cars Android app is a mobile app from UK-based Altus Cars that provides vehicle remote control and connectivity services. A security vulnerability exists in Altus Cars Lotus Cars Android app version 1.2.8, which stems from allowBackup set to true, which could lead to user data...

5.9CVSS5.8AI score0.0014EPSS

SaveExploits0References4

CNNVD•added 2025/08/14 12:00 a.m.•23 views

Altus Cars Lotus Cars Android app has a security vulnerability

Altus Cars Lotus Cars Android app is a mobile app from Altus Cars UK that provides vehicle remote control and connectivity services. A security vulnerability exists in Altus Cars Lotus Cars Android app version 1.2.8, which originates from unauthenticated access to a component and could lead to a...

6.5CVSS5.8AI score0.00327EPSS

SaveExploits0References4

RedhatCVE•added 2025/05/22 8:43 p.m.•22 views

CVE-2021-39245

Hardcoded .htaccess Credentials for getlogs.cgi exist on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices. This affects Nexto NX3003 1.8.11.0, Nexto NX3004 1.8.11.0, Nexto NX3005 1.8.11.0, Nexto NX3010 1.8.3.0, Nexto NX3020 1.8.3.0, Nexto NX3030 1.8.3.0, Nexto NX5100 1.8.11.0, Nexto NX5101...

7.5CVSS7.3AI score0.01346EPSS

SaveExploits3References1

RedhatCVE•added 2025/05/22 8:12 p.m.•26 views

CVE-2021-39244

Authenticated Semi-Blind Command Injection via Parameter Injection exists on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices via the getlogs.cgi tcpdump feature. This affects Nexto NX3003 1.8.11.0, Nexto NX3004 1.8.11.0, Nexto NX3005 1.8.11.0, Nexto NX3010 1.8.3.0, Nexto NX3020 1.8.3.0, Nexto...

9CVSS7.9AI score0.03484EPSS

SaveExploits3References1

RedhatCVE•added 2025/05/22 8:12 p.m.•20 views

CVE-2021-39243

Cross-Site Request Forgery CSRF exists on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices via any CGI endpoint. This affects Nexto NX3003 1.8.11.0, Nexto NX3004 1.8.11.0, Nexto NX3005 1.8.11.0, Nexto NX3010 1.8.3.0, Nexto NX3020 1.8.3.0, Nexto NX3030 1.8.3.0, Nexto NX5100 1.8.11.0, Nexto NX51...

6.5CVSS6.6AI score0.00535EPSS

SaveExploits3References1

Openbugbounty•added 2024/05/07 1:11 p.m.•9 views

altus.com.br Cross Site Scripting vulnerability OBB-3926439

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score

SaveExploits0

Openbugbounty•added 2022/12/26 6:23 a.m.•16 views

altus-energy.com Cross Site Scripting vulnerability OBB-3118202

6.2AI score

SaveExploits0

Openbugbounty•added 2022/01/24 9:19 a.m.•13 views

altus-energy.com Cross Site Scripting vulnerability OBB-2344545

6.2AI score

SaveExploits0

osv_cve•added 2021/08/23 5:15 a.m.•26 views

CVE-2021-39243

6.5CVSS5.8AI score0.00535EPSS

SaveExploits3References2

NVD•added 2021/08/23 5:15 a.m.•49 views

CVE-2021-39243

6.5CVSS0.00535EPSS

SaveExploits3References2

NVD•added 2021/08/23 5:15 a.m.•43 views

CVE-2021-39244

9CVSS0.03484EPSS

SaveExploits3References2

osv_cve•added 2021/08/23 5:15 a.m.•26 views

CVE-2021-39244

8.8CVSS5.8AI score0.03484EPSS

SaveExploits3References2

osv_cve•added 2021/08/23 5:15 a.m.•25 views

CVE-2021-39245

7.5CVSS7.1AI score0.01346EPSS

SaveExploits3References2

NVD•added 2021/08/23 5:15 a.m.•44 views

CVE-2021-39245

7.5CVSS0.01346EPSS

SaveExploits3References2

Prion•added 2021/08/23 5:15 a.m.•40 views

Cross site request forgery (csrf)

4.3CVSS6.7AI score0.00535EPSS

SaveExploits3References2Affected Software15

Prion•added 2021/08/23 5:15 a.m.•44 views

Hardcoded credentials

5CVSS7.6AI score0.01346EPSS

SaveExploits3References2Affected Software15

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by