Lucene search
K

2671 matches found

Kitploit
Kitploit
added 2024/01/31 11:30 a.m.12 views

Stompy - Timestomp Tool To Flatten MAC Times With A Specific Timestamp

A PowerShell function to perform timestomping on specified files and directories. The function can modify timestamps recursively for all files in a directory. Change timestamps for individual files or directories. Recursively apply timestamps to all files in a directory. Option to use specific...

7.4AI score
Exploits0References6
Prion
Prion
added 2024/01/30 8:15 p.m.18 views

Design/Logic Flaw

An attacker could potentially exploit this vulnerability, leading to the ability to modify files on Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC . This exploit could be used to write a file that may result in unexpected behavior based on configuration changes or updating of files...

5CVSS7.2AI score0.00134EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/01/30 8:0 p.m.1 views

CVE-2023-5389

An attacker could potentially exploit this vulnerability, leading to the ability to modify files on Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC . This exploit could be used to write a file that may result in unexpected behavior based on configuration changes or updating of files...

9.1CVSS7.2AI score0.00134EPSS
Exploits0References2
CVE
CVE
added 2024/01/30 8:0 p.m.65 views

CVE-2023-5389

Honeywell CVE-2023-5389 affects Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC. The vulnerability involves use of a dangerous method/function in the Configuration Handler that could allow an attacker to modify files, potentially causing configuration changes or malicious code execu...

9.1CVSS7.5AI score0.00134EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/01/30 8:0 p.m.15 views

CVE-2023-5389

An attacker could potentially exploit this vulnerability, leading to the ability to modify files on Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC . This exploit could be used to write a file that may result in unexpected behavior based on configuration changes or updating of files...

9.1CVSS9.3AI score0.00134EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/01/30 12:0 a.m.3 views

PT-2024-1408 · Honeywell · Honeywell Experion Controledge Virtualuoc +1

Name of the Vulnerable Software and Affected Versions: Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC affected versions not specified Description: The issue is related to the use of dangerous methods or functions in the Configuration Handler component of the Honeywell Experion...

9.1CVSS7AI score0.00134EPSS
Exploits0References11
GithubExploit
GithubExploit
added 2024/01/27 7:4 p.m.51 views

Exploit for Code Injection in Ispyconnect Agent_Dvr

CVE-2024-22514: Remote Code Execution in Agent DVR Informa...

8.8CVSS9.5AI score0.17641EPSS
Exploits1
NVD
NVD
added 2024/01/24 6:15 p.m.21 views

CVE-2024-23900

Jenkins Matrix Project Plugin 822.v01b8c85d16d2 and earlier does not sanitize user-defined axis names of multi-configuration projects, allowing attackers with Item/Configure permission to create or replace any config.xml files on the Jenkins controller file system with content not controllable by...

4.3CVSS4.8AI score0.00079EPSS
Exploits0References2
NVD
NVD
added 2024/01/19 4:15 a.m.18 views

CVE-2023-5716

ASUS Armoury Crate has a vulnerability in arbitrary file write and allows remote attackers to access or modify arbitrary files by sending specific HTTP requests without permission...

9.8CVSS9.6AI score0.00886EPSS
Exploits0References1
Gentoo Linux
Gentoo Linux
added 2024/01/15 12:0 a.m.24 views

KTextEditor: Arbitrary Local Code Execution

Background Framework providing a full text editor component for KDE. Description A vulnerability has been discovered in KTextEditor. Please review the CVE identifiers referenced below for details. Impact KTextEditor executes binaries without user interaction in a few cases, e.g. KTextEditor will...

7.8CVSS7.2AI score0.00161EPSS
Exploits0
CVE
CVE
added 2023/12/13 12:0 a.m.34 views

CVE-2023-50442

The CVE-2023-50442 entry concerns PRIMX ZONECENTRAL (through version 2023.5) where a local attacker with sufficient privileges can modify encrypted folders to temporarily exclude specific file types from encryption. The underlying issue is a local-privilege scenario that enables altering encrypti...

5.5CVSS5.4AI score0.00069EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2023/11/23 7:15 a.m.2 views

CVE-2023-43086

Dell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability. A local malicious user could potentially modify files inside installation folder during application upgrade, leading to privilege escalation...

7.8CVSS5.8AI score
Exploits0References1
Prion
Prion
added 2023/11/23 7:15 a.m.11 views

Improper access control

Dell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability. A local malicious user could potentially modify files inside installation folder during application upgrade, leading to privilege escalation...

4.3CVSS7.1AI score0.0003EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/23 6:27 a.m.13 views

CVE-2023-43086

Dell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability. A local malicious user could potentially modify files inside installation folder during application upgrade, leading to privilege escalation...

7.3CVSS7.8AI score0.0003EPSS
Exploits0References1
CVE
CVE
added 2023/11/21 12:0 a.m.121 views

CVE-2023-49105

CVE-2023-49105 — ownCloud core vulnerability (pre-signed URLs) highly critical . In ownCloud core prior to 10.13.1, an attacker who knows a victim’s username and if the victim has no signing-key configured can access, modify, or delete any file without authentication because pre-signed URLs are a...

9.8CVSS9.4AI score0.89605EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/21 12:0 a.m.16 views

CVE-2023-49105

An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file without authentication if the username of a victim is known, and the victim has no signing-key configured. This occurs because pre-signed URLs can be accepted even when no...

9.8CVSS7AI score0.89605EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/11/21 12:0 a.m.17 views

CVE-2023-49105

An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file without authentication if the username of a victim is known, and the victim has no signing-key configured. This occurs because pre-signed URLs can be accepted even when no...

9.8CVSS9.8AI score0.89605EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/11/20 12:0 a.m.1 views

OpenHarmony 安全漏洞

OpenHarmony is China's OpenAtom Foundation OpenAtom Foundation Foundation of a kind of Hongmeng operating system of open source projects. A security vulnerability exists in OpenHarmony prior to version v3.2.2, which can be exploited by an attacker to obtain confidential information or rewrite...

7.3CVSS6.4AI score0.00021EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/11/17 12:0 a.m.4 views

The vulnerability of the Apache Airflow network software, related to incorrect authorization, allows a hacker to modify any files they desire.

The vulnerability of the Apache Airflow network software is related to improper authorization. Exploiting this vulnerability allows a malicious actor to remotely modify arbitrary files...

4.3CVSS5.5AI score0.00084EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2023/11/15 12:15 a.m.0 views

CVE-2023-38544

A logged in user can modify specific files that may lead to unauthorized changes in system-wide configuration settings. This vulnerability could be exploited to compromise the integrity and security of the network on the affected system...

5.5CVSS5.8AI score
Exploits0References1
Rows per page
Query Builder