4293 matches found
CVE-2025-57625
CYRISMA Sensor for Windows versions before 444 contains an insecure folder and file permissions flaw that lets a low-privilege user replace DataSpotliteAgent.exe (or other binaries invoked by the Cyrisma_Agent service at startup) and escalate to NT AUTHORITY\SYSTEM, enabling arbitrary code execut...
CVE-2025-57625
CYRISMA Sensor before 444 for Windows has an Insecure Folder and File Permissions vulnerability. A low-privileged user can abuse these issues to escalate privileges and execute arbitrary code in the context of NT AUTHORITY\SYSTEM by replacing DataSpotliteAgent.exe or any other binaries called by...
PT-2025-38068
Name of the Vulnerable Software and Affected Versions: CYRISMA Sensor versions prior to 444 Description: CYRISMA Sensor before version 444 for Windows contains an Insecure Folder and File Permissions vulnerability. A low-privileged user can exploit this issue to escalate privileges and execute...
CVE-2025-57625
CYRISMA Sensor before 444 for Windows has an Insecure Folder and File Permissions vulnerability. A low-privileged user can abuse these issues to escalate privileges and execute arbitrary code in the context of NT AUTHORITY\SYSTEM by replacing DataSpotliteAgent.exe or any other binaries called by...
CVE-2025-57392
BenimPOS Masaustu 3.0.x is affected by insecure file permissions. The application installation directory grants Everyone and BUILTIN\Users groups FILEALLACCESS, allowing local users to replace or modify .exe and .dll files. This may lead to privilege escalation or arbitrary code execution upon...
Linux Distros Unpatched Vulnerability : CVE-2023-35799
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stormshield Endpoint Security Evolution 2.0.0 through 2.3.2 has Insecure Permissions. An interactive user can use the SES Evolution agent to create arbitrary...
CVE-2025-57392
BenimPOS Masaustu 3.0.x is affected by insecure file permissions. The installation directory grants Everyone and BUILTIN\Users FILE_ALL_ACCESS, enabling local users to replace or modify .exe/.dll files. This can lead to privilege escalation or arbitrary code execution on launch by another user or...
BenimPOS Desktop 安全漏洞
BenimPOS Desktop is a cash register management software from the Turkish company BenimPOS. A security vulnerability exists in BenimPOS Desktop version 3.0.x, which stems from insecure file permissions and could lead to elevation of privilege or execution of arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2023-29657
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eXtplorer 2.1.15 is vulnerable to Insecure Permissions. File upload in file manager allows uploading zip file containing php pages with arbitrary code execution...
Creation of Temporary File With Insecure Permissions
Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Creation of Temporary File With Insecure Permissions in the...
CVE-2025-50722
Insecure Permissions vulnerability in sparkshop v.1.1.7 allows a remote attacker to execute arbitrary code via the Common.php component...
Linux Distros Unpatched Vulnerability : CVE-2020-29582
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and...
Linux Distros Unpatched Vulnerability : CVE-2019-18447
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GitLab Community and Enterprise Edition before 12.4. It has Insecure Permissions. CVE-2019-18447 Note that Nessus relies on the...
CVE-2025-50722
Insecure Permissions vulnerability in sparkshop v.1.1.7 allows a remote attacker to execute arbitrary code via the Common.php component...
CVE-2025-50722
Insecure Permissions vulnerability in sparkshop v.1.1.7 allows a remote attacker to execute arbitrary code via the Common.php component...
PT-2025-34685 · Sparkshop · Sparkshop
Name of the Vulnerable Software and Affected Versions: sparkshop version 1.1.7 Description: An insecure permissions issue exists in sparkshop version 1.1.7, potentially allowing a remote attacker to execute arbitrary code through the Common.php component. Recommendations: At the moment, there is ...
CVE-2025-50722
CVE-2025-50722 affects SparkShop v1.1.7. The vulnerability arises from insecure permissions on the Common.php component, enabling a remote attacker to execute arbitrary code. The CVSSv3.1 base score is 9.8 (CRITICAL) with network access, no authentication, and no user interaction required; impact...
CVE-2025-50722
Insecure Permissions vulnerability in sparkshop v.1.1.7 allows a remote attacker to execute arbitrary code via the Common.php component...