Lucene search
+L

16730 matches found

Cvelist
Cvelist
•added 2025/10/14 5:00 p.m.•33 views

CVE-2025-59502 Remote Procedure Call Denial of Service Vulnerability

...

7.5CVSS0.01063EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2025/10/14 2:00 p.m.•6 views

Remote Procedure Call Denial of Service Vulnerability

Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network...

7.5CVSS7.5AI score0.01063EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2025/10/14 8:39 a.m.•11 views

kernel: sunrpc: fix handling of server side tls alerts

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix handling of server side tls alerts Scott Mayhew discovered a security exploit in NFS over TLS in tlsalertrecv due to its assumption it can read data from the msg iterator's kvec.. kTLS implementation splits TLS non-da...

9.8CVSS6.2AI score0.00587EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/10/14 12:17 a.m.•7 views

CVE-2025-42903 User Enumeration and Sensitive Data Exposure via RFC Function in SAP Financial Service Claims Management

A vulnerability in SAP Financial Service Claims Management RFC function ICLUSERGETNAMEANDADDRESS allows user enumeration and potential disclosure of personal data through response discrepancies, causing low impact on confidentiality with no impact on integrity or availability...

4.3CVSS5.8AI score0.00335EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/14 12:17 a.m.•38 views

CVE-2025-42903

CVE-2025-42903 pertains to SAP Financial Service Claims Management via the RFC function ICL_USER_GET_NAME_AND_ADDRESS. The issue allows user enumeration and potential disclosure of personal data due to response discrepancies, with low confidentiality impact and no impact to integrity or availabil...

4.3CVSS5.8AI score0.00335EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/14 12:00 a.m.•23 views

Microsoft Windows Remote Procedure Call Runtime 资源管理错误漏洞

Microsoft Windows Remote Procedure Call Runtime is a powerful technology for creating distributed client/server programs from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Remote Procedure Call Runtime, which can be exploited by an attacker to...

7.5CVSS7.4AI score0.01063EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/14 12:00 a.m.•11 views

PT-2025-42157

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An issue involving uncontrolled resource consumption exists in Windows Remote Procedure Call. This can allow an unauthorized attacker to cause a denial of service over a network...

7.5CVSS7.3AI score0.01063EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/14 12:00 a.m.•5 views

CVE-2025-59502: Uncontrolled Resource Consumption

Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network...

7.5CVSS7.3AI score0.01063EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/10/12 12:58 a.m.•439 views

cobbler-file-read-exploit

Cobbler XML-RPC Arbitrary File Read Exploit !Python Version...

6.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/10/10 7:17 p.m.•23 views

CVE-2025-27049

Transient DOS while processing IOCTL call for image encoding...

5.5CVSS7AI score0.00077EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/10 5:23 a.m.•17 views

CVE-2025-27059

Memory corruption while performing SCM call...

8.8CVSS7.1AI score0.00088EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/10 5:23 a.m.•18 views

CVE-2025-27060

Memory corruption while performing SCM call with malformed inputs...

8.8CVSS7.1AI score0.00087EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/10 3:23 a.m.•24 views

CVE-2025-47349

Memory corruption while processing an escape call...

7.8CVSS7.2AI score0.00087EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/10 1:31 a.m.•12 views

CVE-2025-44823

Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/getusers call. This is GL:NLS475...

9.9CVSS6.7AI score0.16118EPSS
SaveExploits2References1
The Hacker News
The Hacker News
•added 2025/10/09 3:30 p.m.•18 views

New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps

A rapidly evolving Android spyware campaign called ClayRat has targeted users in Russia using a mix of Telegram channels and lookalike phishing websites by impersonating popular apps like WhatsApp, Google Photos, TikTok, and YouTube as lures to install them. "Once active, the spyware can exfiltra...

6.9AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2025/10/09 3:30 p.m.•17 views

New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps

A rapidly evolving Android spyware campaign called ClayRat has targeted users in Russia using a mix of Telegram channels and lookalike phishing websites by impersonating popular apps like WhatsApp, Google Photos, TikTok, and YouTube as lures to install them. "Once active, the spyware can exfiltra...

5.8AI score
SaveExploits0
NVD
NVD
•added 2025/10/09 1:15 p.m.•18 views

CVE-2025-39962

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix untrusted unsigned subtract Fix the following Smatch static checker warning: net/rxrpc/rxgkapp.c:65 rxgkyfsdecodeticket warn: untrusted unsigned subtract. 'ticketlen - 10 4' by prechecking the length of what we're tryi...

7.8CVSS0.00246EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2025/10/09 9:47 a.m.•8 views

CVE-2025-39955

In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcpsksk-fastopenrsk in tcpdisconnect. syzbot reported the splat below where a socket had tcpsksk-fastopenrsk in the TCPESTABLISHED state. 0 syzbot reused the server-side TCP Fast Open socket as a new client before the...

7.8CVSS6.5AI score0.00161EPSS
SaveExploits0
NVD
NVD
•added 2025/10/09 4:16 a.m.•26 views

CVE-2025-47349

Memory corruption while processing an escape call...

7.8CVSS0.00087EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/09 4:16 a.m.•31 views

CVE-2025-27059

Memory corruption while performing SCM call...

8.8CVSS0.00088EPSS
SaveExploits0References1
Rows per page
Query Builder