Lucene search
+L

8112 matches found

Vulnrichment
Vulnrichment
•added 2026/01/12 12:00 a.m.•10 views

CVE-2025-46070

An issue in Automai BotManager v.25.2.0 allows a remote attacker to execute arbitrary code via the BotManager.exe component...

6.8AI score0.00523EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/01/12 12:00 a.m.•15 views

Automai BotManager 安全漏洞

Automai BotManager is an execution level management component in an automation platform from Automai, Inc. A security vulnerability exists in Automai BotManager version 25.2.0, which can be exploited by a remote attacker to execute arbitrary code via the BotManager.exe component...

9.8CVSS7.8AI score0.00523EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/01/12 12:00 a.m.•45 views

CVE-2025-46070

An issue in Automai BotManager v.25.2.0 allows a remote attacker to execute arbitrary code via the BotManager.exe component...

0.00523EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/12 12:00 a.m.•19 views

PT-2026-2276

Name of the Vulnerable Software and Affected Versions Automai BotManager version 25.2.0 Description An issue allows a remote attacker to execute arbitrary code via the BotManager.exe component. Recommendations At the moment, there is no information about a newer version that contains a fix for th...

9.8CVSS7.5AI score0.00523EPSS
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/10 1:00 p.m.•14 views

Malicious code in oncecall (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 30fc3993415d365e03d500864542d91d6c6d87af8b6125765af3ba4a5ee059f6 Package silently downloads and executes an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

7.1AI score
SaveExploits0References3
osv-mal
osv-mal
•added 2026/01/10 1:00 p.m.•18 views

MAL-2026-189 Malicious code in oncecall (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 30fc3993415d365e03d500864542d91d6c6d87af8b6125765af3ba4a5ee059f6 Package silently downloads and executes an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

7AI score
SaveExploits0References3
EUVD
EUVD
•added 2026/01/10 12:30 a.m.•22 views

EUVD-2026-1841

Improper Control of Generation of Code 'Code Injection' vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0...

6.5AI score0.00436EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/01/10 12:30 a.m.•20 views

Salesforce Uni2TS has a Code Injection vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0...

9.8CVSS6AI score0.00436EPSS
SaveExploits0References6Affected Software1
CNNVD
CNNVD
•added 2026/01/10 12:00 a.m.•23 views

LIEF 代码问题漏洞

LIEF is a cross-platform library from the individual developer Romain Thomas. It is used to parse, modify and abstract Elf, Pe and MachO formats. A code issue vulnerability exists in LIEF 0.17.1 and earlier versions, which stems from a null pointer dereference in the file src/ELF/Parser.tcc in th...

5.5CVSS5AI score0.00265EPSS
SaveExploits1References9
OSV
OSV
•added 2026/01/09 10:16 p.m.•27 views

CVE-2026-22584

Improper Control of Generation of Code 'Code Injection' vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0...

9.8CVSS5.8AI score0.00436EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/09 10:10 p.m.•10 views

CVE-2026-22584

Improper Control of Generation of Code 'Code Injection' vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0...

6AI score0.00436EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:41 p.m.•26 views

CVE-2023-25718

In ConnectWise Control through 22.9.10032 formerly known as ScreenConnect, after an executable file is signed, additional instructions can be added without invalidating the signature, such as instructions that result in offering the end user a different attacker-controlled executable file. It is...

9.8CVSS9.4AI score0.00685EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:33 p.m.•20 views

CVE-2023-31748

Insecure permissions in MobileTrans v4.0.11 allows attackers to escalate privileges to local admin via replacing the executable file...

7.8CVSS7.3AI score0.00835EPSS
SaveExploits4References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:17 p.m.•19 views

CVE-2018-10190

A vulnerability in London Trust Media Private Internet Access PIA VPN Client v77 for Windows could allow an unauthenticated, local attacker to run executable files with elevated privileges. The vulnerability is due to insufficient implementation of access controls. The "Changelog" and "Help"...

7.8CVSS7.4AI score0.00334EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:10 p.m.•18 views

CVE-2018-18931

An issue was discovered in the Tightrope Media Carousel digital signage product 7.0.4.104. Due to insecure default permissions on the C:\TRMS\Services directory, an attacker who has gained access to the system can elevate their privileges from a restricted account to full SYSTEM by replacing the...

9CVSS7.8AI score0.01631EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 11:48 a.m.•18 views

CVE-2009-4373

Unrestricted file upload vulnerability in repository/repositoryattachment.php in AlienVault Open Source Security Information Management OSSIM 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then...

7.5CVSS8.2AI score0.02984EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 11:28 a.m.•23 views

CVE-2021-33879

Tencent GameLoop before 4.1.21.90 downloaded updates over an insecure HTTP connection. A malicious attacker in an MITM position could spoof the contents of an XML document describing an update package, replacing a download URL with one pointing to an arbitrary Windows executable. Because the only...

8.1CVSS7.5AI score0.012EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2026/01/09 11:25 a.m.•13 views

CVE-2021-28271

Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulnerability is due to improper permissions with the 'F' flag Full for 'Everyone'and 'Authenticated...

8.8CVSS7.8AI score0.01866EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2026/01/09 11:24 a.m.•30 views

CVE-2021-31703

Frontier ichris through 5.18 allows users to upload malicious executable files that might later be downloaded and run by any client user...

9.8CVSS8.1AI score0.01228EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 11:22 a.m.•21 views

CVE-2021-22756

A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of user-supplied data validation, when a malicious CGF file is imported to IGSS Definition...

7.8CVSS7.7AI score0.01265EPSS
SaveExploits0References1
Rows per page
Query Builder