Lucene search
+L

14101 matches found

Positive Technologies
Positive Technologies
โ€ขadded 2025/01/17 12:00 a.m.โ€ข6 views

PT-2025-8847

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory corruption issue exists due to insufficient bounds checking in the nci hci create pipe function. The pipe variable, which is a u8 value coming from the network, can cause memory...

7.8CVSS6.8AI score0.00337EPSS
SaveExploits0
GithubExploit
GithubExploit
โ€ขadded 2025/01/16 2:45 p.m.โ€ข316 views

Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure

PoC exploit for CVE-2025-0282, a remote unauthenticated stack-ba...

9CVSS8.7AI score0.99979EPSS
SaveExploits14
zdt
zdt
โ€ขadded 2025/01/16 12:00 a.m.โ€ข310 views

Ivanti Buffer Overflow Proof of Concept Exploit

Proof of concept exploit for CVE-2025-0282, a remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA gateways. PoC for CVE-2025-0282, a remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure,...

9CVSS8.2AI score0.99979EPSS
SaveExploits14
Packet Storm News
Packet Storm News
โ€ขadded 2025/01/16 12:00 a.m.โ€ข7 views

Ivanti Connect Secure IFT TLS Stack Overflow / Remote Code Execution

This is an Ivanti Connect Secure IFT TLS stack overflow pre-authentication remote code execution proof of concept exploit. It is crippled by default...

9CVSS8.4AI score0.99979EPSS
SaveExploits14
GithubExploit
GithubExploit
โ€ขadded 2025/01/15 6:27 p.m.โ€ข259 views

Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure

CVE-2025-0282 Ivanti Connect Secure IFT TLS Stack Overflow pre...

9CVSS7.2AI score0.99979EPSS
SaveExploits14
OSSF Malicious Packages
OSSF Malicious Packages
โ€ขadded 2025/01/14 12:15 a.m.โ€ข8 views

Malicious code in ebay-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d19ac42f1b12b95f81ed89c55872795f9fceb4ea498c981624eb1eb04828bcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
โ€ขadded 2025/01/14 12:15 a.m.โ€ข5 views

MAL-2025-107 Malicious code in uber-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b42422c68e4256dc883e7d5e02350870cab3c0068d92985ffa4c4bc4ab43df8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
โ€ขadded 2025/01/14 12:15 a.m.โ€ข6 views

Malicious code in uber-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b42422c68e4256dc883e7d5e02350870cab3c0068d92985ffa4c4bc4ab43df8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSV
OSV
โ€ขadded 2025/01/14 12:15 a.m.โ€ข7 views

MAL-2025-83 Malicious code in ebay-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d19ac42f1b12b95f81ed89c55872795f9fceb4ea498c981624eb1eb04828bcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Packet Storm News
Packet Storm News
โ€ขadded 2025/01/14 12:00 a.m.โ€ข14 views

Ivanti CVE-2025-0282 Checker

This script allows you to safely scan and test to see if you are vulnerable to CVE-2025-0282, a stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 that allows a...

9CVSS8.5AI score0.99979EPSS
SaveExploits14
BDU FSTEC
BDU FSTEC
โ€ขadded 2025/01/14 12:00 a.m.โ€ข20 views

The vulnerability of the App Connect Enterprise Certified Container management tool, related to unlimited resource distribution, allows a attacker to cause a service failure.

The vulnerability of the App Connect Enterprise Certified Container management tool is related to the unlimited distribution of resources during the process of writing files to the local file system. Exploiting this vulnerability can allow a attacker to cause service failures...

5.5CVSS5.4AI score0.0016EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
โ€ขadded 2025/01/13 12:00 a.m.โ€ข18 views

The vulnerability of Ivanti Connect Secure (formerly Pulse Connect Secure), Ivanti Policy Secure, and Ivanti Neurons for ZTA โ€“ tools for managing IT services โ€“ stems from a buffer overflow in the stack. This vulnerability allows attackers to escalate their privileges.

The vulnerability of Ivanti Connect Secure formerly Pulse Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA, which are tools for managing IT services, is related to a buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS7.4AI score0.17429EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
โ€ขadded 2025/01/13 12:00 a.m.โ€ข21 views

The vulnerability of the OpenVPN Connect software lies in the improper deletion of critical data at the boundary; this allows a hacker to increase their privileges.

The vulnerability of the OpenVPN Connect software is related to improper cross-border deletion of critical data. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

7.8CVSS8.1AI score0.00546EPSS
SaveExploits0References3Affected Software1
GithubExploit
GithubExploit
โ€ขadded 2025/01/12 11:58 a.m.โ€ข231 views

Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure

Storks: Remote Code Execution Vulnerability Exploitation Tool...

9CVSS8.3AI score0.99979EPSS
SaveExploits14
GithubExploit
GithubExploit
โ€ขadded 2025/01/11 2:06 a.m.โ€ข342 views

Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure

CVE-2025-0282-Ivanti-exploit CVE-2025-0282 is a critical vulne...

9CVSS7.8AI score0.99979EPSS
SaveExploits14
HackRead
HackRead
โ€ขadded 2025/01/10 9:21 p.m.โ€ข14 views

Ivanti Urges Patch for Flaws in Connect Secure, Policy Secure and ZTA Gateways

Ivanti has issued a critical security advisory addressing two vulnerabilities in its Connect Secure, Policy Secure, and ZTA Gateway products...

7.6AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
โ€ขadded 2025/01/10 8:20 a.m.โ€ข19 views

Security Bulletin: Vulnerability in XStream library affects App Connect Professional

Summary There is vulnerability in the XStream library used by App Connect Professional. App Connect Professional has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2024-47072 DESCRIPTION: XStream is vulnerable to a denial of service, caused by a stack-based buffer overflow in...

7.5CVSS7.1AI score0.02001EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
โ€ขadded 2025/01/10 8:18 a.m.โ€ข16 views

Security Bulletin: Due to the use of Eclipse Jetty, IBM App Connect Professional is vulnerable to bypass security restrictions

Summary Eclipse Jetty is used within IBM App Connect Professional Vulnerability Details CVEID:CVE-2024-6763 DESCRIPTION: Eclipse Jetty could allow a remote attacker to bypass security restrictions, caused by improper validation on the authority segment of a URI in the HttpURI class. By sending a...

6.5CVSS5.5AI score0.0103EPSS
SaveExploits1Affected Software1
Positive Technologies
Positive Technologies
โ€ขadded 2025/01/10 12:00 a.m.โ€ข24 views

PT-2025-3699 ยท Undefined ยท Undefined

๐Ÿ”— DarkWebInformer.com - Cyber Threat Intelligence ๐Ÿ“Œ CVE ID: GHSA-qcg2-98h8-485j ๐Ÿ”— Aliases: CVE-2024-8474 ๐Ÿ”น Details: OpenVPN Connect before version 3.5.0 can contain the configuration profile's clear-text private key which is logged in the application log, which an unauthorized actor can use to...

7.5CVSS9.3AI score0.00546EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
โ€ขadded 2025/01/10 12:00 a.m.โ€ข8 views

The vulnerability of the generic_ip_connect() function in the fs/smb/client/connect.c module of the SMB client kernel in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the genericipconnect function in the fs/smb/client/connect.c module of the SMB client kernel in Linux operating systems is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

7.8CVSS6.7AI score0.00563EPSS
SaveExploits0References13Affected Software5
Rows per page
Query Builder