Lucene search
+L

9456 matches found

GithubExploit
GithubExploit
•added 2025/04/24 7:31 p.m.•787 views

Exploit for SQL Injection in Code-Projects Patient_Record_Management_System

CVE-2025-32433 Erlang SSH Library Exploit A proof-of-concept...

10CVSS8.9AI score0.98786EPSS
SaveExploits41
BDU FSTEC
BDU FSTEC
•added 2025/04/23 12:00 a.m.•23 views

HPE Aruba Networking Access Point CLI Code Execution

The vulnerability of the CLI interface of HPE Aruba Networking Access Point software relates to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted packets to the UDP port...

10CVSS6AI score0.01419EPSS
SaveExploits0References3Affected Software2
GithubExploit
GithubExploit
•added 2025/04/21 9:11 p.m.•97 views

PoCVulDb

It is an offensive tool for various vulnerabilities. The reposit...

8.4AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2025/04/17 7:19 a.m.•20 views

postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

A flaw was found in PostgreSQL. Due to improper neutralization of quoting syntax, affected versions potentially allow a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the affected function's result to constru...

8.1CVSS7.7AI score0.9003EPSS
SaveExploits10References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/17 12:00 a.m.•9 views

CVE-2025-2903: Privilege Chaining

An attacker with knowledge of creating user accounts during VM deployment on Google Cloud Platform GCP using the OS Login feature, can login via SSH gaining command-line control of the operating system. This allows an attacker to gain access to sensitive data stored on the VM, install malicious...

8.5CVSS6AI score0.00203EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/15 2:15 a.m.•39 views

CVE-2025-32987

Arctera eDiscovery Platform before 10.3.2, when Enterprise Vault Collection Module is used, places a cleartext password on a command line in EVSearcher...

6CVSS0.0017EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/15 12:00 a.m.•31 views

CVE-2025-32987

Arctera eDiscovery Platform before 10.3.2, when Enterprise Vault Collection Module is used, places a cleartext password on a command line in EVSearcher...

6CVSS0.0017EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/15 12:00 a.m.•87 views

CVE-2025-32987

CVE-2025-32987 affects Arctera eDiscovery Platform prior to version 10.3.2 when the Enterprise Vault Collection Module is used. The root cause is cleartext password exposure on the EVSearcher command line, enabling local disclosure of credentials via an attacker with limited local access. Public ...

6CVSS7.2AI score0.0017EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/15 12:00 a.m.•16 views

PT-2025-16281 · Veritas +1 · Vault Enterprise +1

Name of the Vulnerable Software and Affected Versions: Arctera eDiscovery Platform versions prior to 10.3.2 Description: The issue concerns the Arctera eDiscovery Platform, where a cleartext password is placed on a command line in EVSearcher when the Enterprise Vault Collection Module is used...

6CVSS7.5AI score0.0017EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/15 12:00 a.m.•4 views

CVE-2025-32987: Invocation of Process Using Visible Sensitive Information

Arctera eDiscovery Platform before 10.3.2, when Enterprise Vault Collection Module is used, places a cleartext password on a command line in EVSearcher...

6CVSS5.8AI score0.0017EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/15 12:00 a.m.•5 views

CVE-2025-32987

Arctera eDiscovery Platform before 10.3.2, when Enterprise Vault Collection Module is used, places a cleartext password on a command line in EVSearcher...

6CVSS7.4AI score0.0017EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/04/14 12:00 a.m.•23 views

Cisco IOS XR Privilege Escalation Command Injection

The vulnerability of the command-line interface CLI of Cisco IOS XR operating systems exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level and execute arbitrary commands...

8.8CVSS5.8AI score0.00231EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/04/14 12:00 a.m.•28 views

PAN-OS CLI Unauthorized Access

The command-line interface CLI of the PAN-OS operating system has vulnerabilities due to the lack of measures to neutralize specific elements. Exploiting these vulnerabilities can allow attackers to gain unauthorized access to protected information...

5.5CVSS5.5AI score0.00192EPSS
SaveExploits0References2Affected Software1
Fedora
Fedora
•added 2025/04/11 6:32 p.m.•20 views

[SECURITY] Fedora 42 Update: cri-tools1.29-1.29.0-11.fc42

CLI and validation tools for Kubelet Container Runtime Interface CRI...

4.4CVSS7.5AI score0.00425EPSS
SaveExploits2
CNNVD
CNNVD
•added 2025/04/11 12:00 a.m.•17 views

Rancher Information Leakage Vulnerability

Rancher is an open source container management platform open-sourced by Rancher in the United States, built for organizations that deploy containers in production environments. An information disclosure vulnerability exists in Rancher versions prior to 2.8.0 to 2.8.13, 2.9.0 to 2.9.7, and 2.10.0 ...

5.3CVSS6.1AI score0.00592EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/04/11 12:00 a.m.•24 views

EulerOS 2.0 SP11 : vim (EulerOS-SA-2025-1380)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does no...

5.5CVSS5.7AI score0.00375EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/04/10 12:00 a.m.•22 views

zlib gzip_do_write() ASLR Bypass Code Execution

The vulnerability of the gzipdowrite function in the zlib compression library, a command-line utility of CURL, is related to integer overflow. Exploiting this vulnerability allows an attacker to bypass ASLR protection, execute arbitrary code, or cause a denial-of-service attack...

7.5CVSS7.4AI score0.01801EPSS
SaveExploits1References10Affected Software5
BDU FSTEC
BDU FSTEC
•added 2025/04/09 12:00 a.m.•24 views

Zstandard Command Line Uncontrolled Resource Consumption DoS

The vulnerability of the command-line tool of the Zstandard data compression library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS6.7AI score0.01588EPSS
SaveExploits0References11Affected Software3
BDU FSTEC
BDU FSTEC
•added 2025/04/09 12:00 a.m.•26 views

ESET Command-line Scanner Code Execution

The vulnerability of ESET’s command-line scanner for anti-virus protection is related to an uncontrolled element in the loading process of the version.dll library. Exploiting this vulnerability can allow a hacker to execute arbitrary code...

6.6CVSS8.3AI score0.02056EPSS
SaveExploits0References3Affected Software11
attackerkb
attackerkb
•added 2025/04/08 4:15 p.m.•7 views

CVE-2025-27079

A vulnerability in the file creation process on the command line interface of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to perform remote code execution RCE. Successful exploitation could allow an attacker to execute arbitrary operating system commands on the...

6CVSS6.6AI score0.00247EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder