CVE-2026-42881: Improper Limitation of a Pathname to a Restricted Directory

STIGQter is an open-source reimplementation of DISA's STIG Viewer. From 0.1.2 to before 1.2.7, an attacker can achieve local code execution LCE with the privileges of the user running STIGQter. This requires user interaction: the victim must open the malicious .stigqter file and explicitly run th...

ufr-lce.parisnanterre.fr Cross Site Scripting vulnerability OBB-3123069

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-37184

The application managewebsite.php on Garage Management System 1.0 is vulnerable to Shell File Upload. The already authenticated malicious user, can upload a dangerous RCE or LCE exploit file...

Design/Logic Flaw

The application managewebsite.php on Garage Management System 1.0 is vulnerable to Shell File Upload. The already authenticated malicious user, can upload a dangerous RCE or LCE exploit file...

CVE-2022-37184

The CVE describes a vulnerability in Garage Management System 1.0 where the file upload handler manage_website.php allows an authenticated attacker to upload a shell file resulting in Remote Code Execution (RCE) or Local Code Execution (LCE). Multiple connected sources (Red Hat advisory, PT Secur...

CVE-2022-37184

The application managewebsite.php on Garage Management System 1.0 is vulnerable to Shell File Upload. The already authenticated malicious user, can upload a dangerous RCE or LCE exploit file...

Tenable Log Correlation Engine (LCE) < 5.1.1 (TNS-2018-13)

The version of Tenable Log Correlation Engine LCE installed on the remote host is a version prior to 5.1.1. It is, therefore, affected by multiple vulnerabilities: - A flaw exists in the bundled third-party component OpenSSL library's key handling during a TLS handshake that causes a denial of...

CVE-2016-9261

Tenable Log Correlation Engine (LCE) is affected in versions prior to 4.8.1 by cross-site scripting (XSS) vulnerabilities. The Nessus plugin aggregates multiple CVEs affecting LCE, including CVE-2016-9261, describing a vulnerability where an authenticated, remote attacker can inject arbitrary web...

Tenable Log Correlation Engine (LCE) Client Installed (macOS credentialed check)

Binary data lceclientinstalledmacosx.nbin...

Tenable Log Correlation Engine (LCE) Unix / Linux Client Installed (credentialed check)

Binary data lceclientinstalledunix.nbin...

Tenable Log Correlation Engine (LCE) Windows Client Installed (credentialed check)

Binary data lceclientinstalledwin.nbin...

Symantec End Point Protection 11.x & Symantec Network Access Control 11.x LCE PoC

No description provided by source. Symantec End Point Protection 11.x & Symantec Network Access Control 11.x Local Code Execution POC Date: 22/05/2012 Author: 41.w4r10r Software Link: Symantec.com Version: 11.x Tested on: Windows XP SP2 English Windows XP SP3 English Windows Vista 32Bit Windows 7...