70 matches found
The vulnerability of the ModernExecServer.dll library of the Modern Execution Server operating system allows a hacker to exploit their elevated privileges.
The vulnerability of the ModernExecServer.dll library of the Modern Execution Server operating system is related to the use of memory after release. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2026-72963
Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally...
CVE-2026-72963
CVE-2026-72963 is a use-after-free vulnerability in Windows Modern Execution Server that allows an authorized attacker to achieve local privilege escalation . The CVSS v3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, low privileges required, and high impact on confidentiali...
EUVD-2026-73117
Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally...
Windows Modern Execution Server Elevation of Privilege Vulnerability
Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally...
PT-2026-87878
Name of the Vulnerable Software and Affected Versions Windows Modern Execution Server affected versions not specified Description A use-after-free issue exists in the Windows Modern Execution Server. This allows an authorized local attacker to perform a privilege escalation, enabling them to gain...
CVE-2026-72963: Use After Free
Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally...
Improper Authorization
OpenClaw is vulnerable to Improper Authorization. The vulnerability is due to insufficient enforcement of network access policies in the sandbox exec-server, allowing lower-trust callers to bypass configured restrictions and send HTTP requests to internal network resources that should be...
PT-2026-3542
Name of the Vulnerable Software and Affected Versions PrismX MX100 AP controller affected versions not specified Description The PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has an arbitrary file upload issue. This allows remote attackers with sufficient privileges to upload and...
AndSoft e-TMS OS Command Injection Vulnerability (CNVD-2025-23544)
AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from an operating system command injection vulnerability that originates from a misuse of the parameter m in the file /clt/LOGINFRMCAT.ASP, which can be exploited by an attacker to execute operating system...
EUVD-2013-0409
Malware in sbrugna...
EUVD-2018-3360
Malware in sbrugna...
EUVD-2023-57711
Malicious code in bioql PyPI...
EUVD-2022-41799
Malicious code in bioql PyPI...
EUVD-2025-6829
Malicious code in bioql PyPI...
EUVD-2024-32360
Malicious code in bioql PyPI...
EUVD-2025-13514
Malicious code in bioql PyPI...
EUVD-2024-32358
Malicious code in bioql PyPI...
JVN#72111431: Multiple vulnerabilities in Group-Office
Group-Office provided by Intermesh BV contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N Base Score 4.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Base Score 5.4 CVE-2025-53504 Path traversal CWE-22...
CVE-2025-8145
The Redirection for Contact Form 7 plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.2.4 via deserialization of untrusted input in the getleadfields function. This makes it possible for unauthenticated attackers to inject a PHP Object. The addition...