149 matches found
The vulnerability of the Enlogic SCADA system “ENTEK” virtual controller, related to the use of a dangerous method or function that allows a intruder to execute arbitrary code in the operating system.
The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the use of a dangerous method or function. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the operating system remotely...
printix-CVE-2022-29551
CVE-2022-29551 간편 릴리스 | 인쇄 친화적 PrintixService.exe, Kofax Printix의 "Printix Secure Cloud Print Management" 버전 1.3.1156.0 이하에서 "노출된 위험한 메서드 또는 함수" 취약점이 발견되었습니다. 이 취약점으로 인해 로컬 또는 원격 공격자가 악성 프린터 드라이버를 설치하고 Printix 서비스를 통해 실행할 수 있습니다. 공격자는 이를 사용하여 원격으로 악성 드라이버 코드를 실행하고 시스템 권한으로 상승시킬 수 있습니다...
CVE-2025-53964
CVE-2025-53964 Risk assessment CVSS v3: AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L - 9.6/10 Description GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term included in that dictionary...
CVE-2026-75810
Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing driver authentication and sending requests to trigger system management interrupts SMIs. Repeatedly triggering SMI may lead to a denial-of-service DoS condition.Refer to the '...
CVE-2026-86711: Exposed Dangerous Method or Function
electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sender validation. Renderer-side script execution can invoke openFileWithEditor and other functions with arbitrary arguments to execute system commands in the...
EUVD-2026-54319
Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...
CVE-2026-68823
Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...
Azure Confidential Ledger Remote Code Execution Vulnerability
Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...
CVE-2026-45489: Exposed Dangerous Method or Function
Microsoft Edge Chromium-based Spoofing Vulnerability...
CVE-2026-12060
Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...
CVE-2026-12060 Hepta Platforms|Heptabase - Exposed Dangerous
Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...
CVE-2026-12060
CVE-2026-12060 concerns Heptabase (Hepta Platforms) with an Exposed Dangerous Method or Function vulnerability. The description indicates unauthenticated remote attackers can leverage social engineering to persuade a victim to open or load a malicious webpage inside the Heptabase application, res...
PT-2026-48831
Name of the Vulnerable Software and Affected Versions Heptabase affected versions not specified Description An exposed dangerous method or function allows unauthenticated remote attackers to use social engineering to trick a victim into loading a malicious webpage within the application. This can...
CVE-2025-14713
An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials from the edge server...
Exposed Dangerous Method or Function
Overview mistral is a Mistral Project Affected versions of this package are vulnerable to Exposed Dangerous Method or Function in the exposed API endpoints. An attacker can execute arbitrary code and potentially access sensitive service credentials by sending crafted requests to the affected...
PT-2026-43586
An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials from the edge server...
CVE-2025-14713: Exposed Dangerous Method or Function
An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials from the edge server...
Exposed Dangerous Method or Function
Overview @penpot/mcp is a MCP server for Penpot integration Affected versions of this package are vulnerable to Exposed Dangerous Method or Function via MCP module's ReplServer that binds to all interfaces 0.0.0.0:4403 and exposes a /execute endpoint that runs arbitrary code with zero...
Exposed Dangerous Method or Function
Overview @nuxt/webpack-builder is a Webpack bundler for Nuxt Affected versions of this package are vulnerable to Exposed Dangerous Method or Function when using webpack or rspack builder and navigating to a malicious website. An attacker can inject a script tag to request a classic script, which ...
Exposed Dangerous Method or Function
Overview nautobot is a Source of truth and network automation platform. Affected versions of this package are vulnerable to Exposed Dangerous Method or Function via the currenthead field in the REST API. An attacker can manipulate the state of local repository clones or render them unusable by...