Lucene search
+L

17586 matches found

GithubExploit
GithubExploit
added 2025/12/03 4:00 p.m.169 views

Exploit for CVE-2025-41744

Lab: CVE-2025-41744 - Use of Default Cryptographic Key in Spre...

9.1CVSS7.3AI score0.00399EPSS
SaveExploits4
OSV
OSV
added 2025/12/03 9:21 a.m.25 views

USN-7769-1 linux, linux-aws, linux-gcp, linux-gcp-6.14, linux-oracle, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACP...

9.8CVSS6.6AI score0.01278EPSS
SaveExploits8References184
Redos
Redos
added 2025/12/03 12:00 a.m.15 views

ROS-20251203-07

Vulnerability of C language module for signing and encryption of JSON objects latchset Jose is related to uncontrolled resource consumption. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service. remotely to cause a denial of service...

7.5CVSS7.3AI score0.01383EPSS
SaveExploits1
EUVD
EUVD
added 2025/12/02 3:30 p.m.11 views

EUVD-2025-200254

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with root access to modify the Recovery Partition because of a lack of integrity protection...

6.4AI score0.00165EPSS
SaveExploits1References3
Rosalinux
Rosalinux
added 2025/12/02 1:21 p.m.15 views

Advisory ROSA-SA-2025-3106

Software: c-ares 1.13.0 OS: ROSA Virtualization 2.1 packageevrstring: c-ares-1.13.0-11.rv3 CVE-ID: CVE-2020-22217 BDU-ID: 2023-05898 CVE-Crit: CRITICAL CVE-DESC.: A vulnerability in the aresparsesoareply function of the C-ares asynchronous DNS query library is related to an operation exceeding...

6.4CVSS9AI score0.00977EPSS
SaveExploits1
Rosalinux
Rosalinux
added 2025/12/02 1:21 p.m.19 views

Advisory ROSA-SA-2025-3108

Software: xmlrpc-c 1.51.0 OS: ROSA Virtualization 2.1 packageevrstring: xmlrpc-c-1.51.0-10.rv3 CVE-ID: CVE-2021-46143 BDU-ID: 2022-01052 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the doProlog function of the xmlparse.c file of the Expat library is related to integer overflow. Exploitation of t...

9.8CVSS8.5AI score0.04955EPSS
SaveExploits3
RedhatCVE
RedhatCVE
added 2025/12/02 12:22 p.m.25 views

CVE-2025-13735

Out-of-bounds Read vulnerability in ASR1903、ASR3901 in ASR LapwingLinux on Linux nrfw modules. This vulnerability is associated with program files Code/nrfw/DLP/src/NrCgi.C. This issue affects LapwingLinux: before 2025/11/26...

7.4CVSS7AI score0.00199EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/02 11:15 a.m.10 views

CVE-2025-41743

Insufficient encryption strength in Sprecher Automation SPRECON-E-C, SPRECON-E-P, and SPRECON-E-T3 allows a local unprivileged attacker to extract data from update images and thus obtain limited information about the architecture and internal processes...

4CVSS5.8AI score0.00068EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/12/02 10:39 a.m.12 views

EUVD-2025-200220

Sprecher Automations SPRECON-E-C, SPRECON-E-P, SPRECON-E-T3 is vulnerable to attack by an unauthorized remote attacker via default cryptographic keys. The use of these keys allows the attacker to read, modify, and write projects and data, or to access any device via remote maintenance...

9.8CVSS6.6AI score0.00452EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/12/02 10:38 a.m.13 views

EUVD-2025-200221

Insufficient encryption strength in Sprecher Automation SPRECON-E-C, SPRECON-E-P, and SPRECON-E-T3 allows a local unprivileged attacker to extract data from update images and thus obtain limited information about the architecture and internal processes...

4CVSS5.9AI score0.00068EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/12/02 6:03 a.m.19 views

CVE-2025-13566

A security vulnerability has been detected in jarun nnn up to 5.1. The impacted element is the function showcontentinfloatingwindow/runcmdasplugin of the file nnn/src/nnn.c. The manipulation leads to double free. An attack has to be approached locally. The identifier of the patch is...

4.8CVSS7AI score0.00133EPSS
SaveExploits0References1
Circl
Circl
added 2025/12/02 3:16 a.m.11 views

GHSA-5J98-MCP5-4VW2

creationtimestamp| type| source ---|---|--- 2025-12-02 03:16:32+00:00| seen| https://gist.github.com/deepak-chowdry/3da737fb0b4c63ed1bfe586c677e4860 2025-12-07 15:01:49+00:00| seen| https://gist.github.com/pxlvoid/2dee87e481533f31473871df69b485dc...

5.8AI score
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/02 12:00 a.m.9 views

CVE-2025-59704

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow an attacker to gain access the the BIOS menu because is has no password...

6.8AI score0.00227EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/12/02 12:00 a.m.9 views

Sprecher Automation SPRECON-E-C和Sprecher Automation SPRECON-E-P 安全漏洞

The Sprecher Automation SPRECON-E-C and Sprecher Automation SPRECON-E-P are both an automation control and remote control device from Sprecher Automation of Austria. A security vulnerability exists in the Sprecher Automation SPRECON-E-C and Sprecher Automation SPRECON-E-P, which stems from the us...

9.8CVSS6.6AI score0.00452EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/12/02 12:00 a.m.37 views

CVE-2025-59701

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with elevated privileges to read and modify the Appliance SSD contents because they are unencrypted...

0.00165EPSS
SaveExploits1References2
CVE
CVE
added 2025/12/02 12:00 a.m.24 views

CVE-2025-59697

Entrust nShield devices are affected: Connect XC, nShield 5c, and nShield HSMi up to v13.6.11 and 13.7 allow a physically proximate attacker to escalate privileges by editing the Legacy GRUB bootloader configuration to boot a root shell on host OS start (F06). The underlying issue is a boot-time ...

7.2CVSS6.8AI score0.00273EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/02 12:00 a.m.10 views

PT-2025-48693

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker to modify or erase tamper events via the Chassis management board...

6.9AI score0.00205EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/12/02 12:00 a.m.11 views

Sprecher Automation SPRECON-E-C和Sprecher Automation SPRECON-E-P 加密问题漏洞

The Sprecher Automation SPRECON-E-C and Sprecher Automation SPRECON-E-P are both an automation control and remote control device from Sprecher Automation of Austria. Sprecher Automation SPRECON-E-C and Sprecher Automation SPRECON-E-P have an encryption issue vulnerability that stems from...

4CVSS6.5AI score0.00068EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/12/02 12:00 a.m.15 views

PT-2025-48706

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to access the internal components of the appliance, without leaving tamper evidence. To exploit this, the attacker needs to remove the tamper label and all fixing screws from t...

6.8AI score0.00386EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/12/02 12:00 a.m.12 views

PT-2025-48695

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, might allow a physically proximate attacker to gain access to the EOL legacy bootloader...

7.1AI score0.00285EPSS
SaveExploits1References3
Rows per page
Query Builder