Lucene search
+L

620 matches found

Kitploit
Kitploit
•added 2026/10/26 3:45 p.m.•58 views

elevationstation

Elevation Station Stealing and Duplicating SYSTEM tokens for fun & profit! We duplicate things, make twin copies, and then ride away. You have used Metasploit's getsystem and SysInternals PSEXEC for getting system privs, correct? Well, here's a similar standalone version of that...but without the...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/25 9:05 p.m.•25 views

informer

Informer - Telegram Mass Surveillance Update 10-20-2025 Security : Fixed high-severity vulnerability CVE-2022-1941 in mysql-connector-python Security : Migrated from deprecated oauth2client to google-auth Updated all dependencies to latest secure versions Fixed quickstart.sh script bugs venv...

7.5CVSS7AI score0.01512EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/10/11 4:14 p.m.•27 views

systeminformer

System Informer Una herramienta gratuita, potente y multipropósito que te ayuda a monitorear los recursos del sistema, depurar software y detectar malware. Traído a ti por Winsider Seminars & Solutions, Inc...

5.9AI score
SaveExploits0References5
NVD
NVD
•added 2026/10/08 9:17 p.m.•12 views

CVE-2026-107782

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

8.5CVSS0.00115EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/10/08 8:15 p.m.•17 views

CVE-2026-107782 System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Port

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

8.5CVSS6.2AI score0.00115EPSS
SaveExploits0References7
CVE
CVE
•added 2026/10/08 8:15 p.m.•20 views

CVE-2026-107782

System Informer versions prior to 4.0.26241.138 are vulnerable to an incorrect authorization vulnerability in the phsvc helper. This flaw allows local attackers to access privileged APIs by connecting via any Authenticode-signed process. Specifically, an attacker can load code into a Microsoft-si...

8.5CVSS6.2AI score0.00115EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/08 8:15 p.m.•45 views

CVE-2026-107782 System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Port

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

8.5CVSS0.00115EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/08 8:15 p.m.•14 views

EUVD-2026-95260

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

8.5CVSS6.2AI score0.00115EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•11 views

PT-2026-108205

Name of the Vulnerable Software and Affected Versions System Informer versions prior to 4.0.26241.138 Description An incorrect authorization issue exists in the phsvc helper. Local attackers can access privileged APIs by connecting from any Authenticode-signed process. By loading code into a...

8.5CVSS6.2AI score0.00115EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•12 views

CVE-2026-107782: Incorrect Authorization

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

8.5CVSS6.3AI score0.00115EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/08/29 4:32 a.m.•21 views

systeminformer v4.0.26241.138

System Informer A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc...

5.9AI score
SaveExploits0References6
osv_mal
osv_mal
•added 2026/08/05 8:46 a.m.•31 views

MAL-2026-12171 Malicious code in bigops-informer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 324bb851ecf14c623080e07471bd23a7ea505bc6db244c654895a1cce71bf7e8 On require, index.js loads bootstrap.js which reconstructs a set of destination hostnames from string-array joins resolving to...

5.5AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/05 8:46 a.m.•23 views

Malicious code in bigops-informer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 324bb851ecf14c623080e07471bd23a7ea505bc6db244c654895a1cce71bf7e8 On require, index.js loads bootstrap.js which reconstructs a set of destination hostnames from string-array joins resolving to...

5.5AI score
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/07/30 4:54 p.m.•17 views

SUSE CVE-2026-40886

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From 3.6.5 to 4.0.4, an unchecked array index in the pod informer's podGCFromPod function causes a controller-wide panic when a workflow pod carries a malformed...

7.7CVSS8.2AI score0.00377EPSS
SaveExploits1References2
Circl
Circl
•added 2026/07/07 6:06 p.m.•25 views

CVE-2026-48062

creationtimestamp| type| source ---|---|--- 2026-07-07 18:06:56+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/116880021750277483 2026-07-17 21:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mquojfihof2j 2026-07-18 09:00:47+00:00| seen|...

9.8CVSS5.7AI score0.00775EPSS
SaveExploits0References5
osv_go
osv_go
•added 2026/06/25 6:26 p.m.•31 views

GO-2026-5148 Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller in github.com/argoproj/argo-workflows

Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller in github.com/argoproj/argo-workflows...

7.7CVSS8.2AI score0.00377EPSS
SaveExploits1References2
osv_bit
osv_bit
•added 2026/04/25 8:35 a.m.•25 views

BIT-ARGO-WORKFLOWS-2026-40886 Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows controller

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From 3.6.5 to 4.0.4, an unchecked array index in the pod informer's podGCFromPod function causes a controller-wide panic when a workflow pod carries a malformed...

7.7CVSS8.2AI score0.00377EPSS
SaveExploits1References5
osv_ghsa
osv_ghsa
•added 2026/04/23 9:39 p.m.•35 views

GHSA-5JV8-H7QH-RF5P Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller

Summary An unchecked array index in the pod informer's podGCFromPod function causes a controller-wide panic when a workflow pod carries a malformed workflows.argoproj.io/pod-gc-strategy annotation. Because the panic occurs inside an informer goroutine outside the controller's recover scope, it...

7.7CVSS8.1AI score0.00377EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2026/04/23 9:39 p.m.•27 views

Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller

Summary An unchecked array index in the pod informer's podGCFromPod function causes a controller-wide panic when a workflow pod carries a malformed workflows.argoproj.io/pod-gc-strategy annotation. Because the panic occurs inside an informer goroutine outside the controller's recover scope, it...

7.7CVSS8.1AI score0.00377EPSS
SaveExploits1References3Affected Software2
attackerkb
attackerkb
•added 2026/04/23 6:12 p.m.•16 views

CVE-2026-40886

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From 3.6.5 to 4.0.4, an unchecked array index in the pod informer's podGCFromPod function causes a controller-wide panic when a workflow pod carries a malformed...

7.7CVSS8.3AI score0.00377EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder