Lucene search
+L

260 matches found

Kitploit
Kitploit
added 2026/09/15 4:01 a.m.9 views

LiME

LiME Extractor de Memoria de Linux Un Módulo de Kernel Cargable LKM para la adquisición de memoria volátil desde Linux y dispositivos basados en Linux, como Android. LiME minimiza su interacción entre los procesos de espacio de usuario y de kernel durante la adquisición, produciendo capturas de...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 1:40 a.m.26 views

lmg

Linux Memory Grabber A script for dumping Linux memory and creating VolatilityTM profiles. Hal Pomeranz [email protected], 2020-02-01 THANKS! "If I have seen further it is by standing on the shoulders of giants." Issac Newton There are a lot of people who deserve thanks for making this simpl...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 1:40 a.m.10 views

lmg

Linux Memory Grabber 用于转储 Linux 内存并创建 VolatilityTM 配置文件的脚本。 Hal Pomeranz [email protected], 2020-02-01 致谢 “如果说我看得比别人更远,那是因为我站在巨人的肩膀上。” —— 艾萨克·牛顿 很多人应该为这个简单小工具的实现而获得感谢: —— 微软的优秀团队,感谢他们提供了 AVML —— Joe Sylve,感谢他在 LiME 上的工作 —— 整个 VolatilityTM 开发团队的持续付出。 我尤其要感谢 Andrew Case,他在我开发工具的过程中回答了许多烦人的问题。 ...

6.1AI score
SaveExploits0References1
NVD
NVD
added 2026/09/03 1:06 p.m.7 views

CVE-2026-85092

LiME through 1.12.0 fails to validate the disk acquisition output path and does not use ONOFOLLOW when opening the operator-supplied path parameter, allowing unprivileged local users to overwrite arbitrary root-owned files. An attacker who controls the output directory can create a symbolic link...

6.6CVSS0.00152EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/03 1:04 a.m.8 views

EUVD-2026-70302

LiME through 1.12.0 fails to validate the disk acquisition output path and does not use ONOFOLLOW when opening the operator-supplied path parameter, allowing unprivileged local users to overwrite arbitrary root-owned files. An attacker who controls the output directory can create a symbolic link...

6.6CVSS6AI score0.00152EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/03 1:04 a.m.11 views

CVE-2026-85092 LiME through 1.12.0 Arbitrary File Overwrite via Symlink Following

LiME through 1.12.0 fails to validate the disk acquisition output path and does not use ONOFOLLOW when opening the operator-supplied path parameter, allowing unprivileged local users to overwrite arbitrary root-owned files. An attacker who controls the output directory can create a symbolic link...

5.2CVSS6AI score
SaveExploits0References6
CVE
CVE
added 2026/09/03 1:04 a.m.14 views

CVE-2026-85092

LiME (Linux Memory Engine) through version 1.12.0 contains an arbitrary file overwrite vulnerability caused by a missing O_NOFOLLOW flag and insufficient validation of the operator-supplied disk acquisition output path. An unprivileged local attacker who controls the output directory can plant a ...

6.6CVSS5.5AI score0.00152EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/03 1:04 a.m.32 views

CVE-2026-85092 LiME through 1.12.0 Arbitrary File Overwrite via Symlink Following

LiME through 1.12.0 fails to validate the disk acquisition output path and does not use ONOFOLLOW when opening the operator-supplied path parameter, allowing unprivileged local users to overwrite arbitrary root-owned files. An attacker who controls the output directory can create a symbolic link...

6.6CVSS0.00152EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/31 12:00 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2025-56798

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-Site Request Forgery CSRF vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges vi...

8.8CVSS5.9AI score0.00203EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/26 6:16 p.m.14 views

CVE-2025-56798

Cross-Site Request Forgery CSRF vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges via the Unraid authentication cookie's lax same-site policy...

8.8CVSS0.00203EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/08/26 6:16 p.m.10 views

CVE-2025-56798

Cross-Site Request Forgery CSRF vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges via the Unraid authentication cookie's lax same-site policy...

8.8CVSS5.9AI score0.00203EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/26 6:16 p.m.8 views

UBUNTU-CVE-2025-56798

Cross-Site Request Forgery CSRF vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges via the Unraid authentication cookie's lax same-site policy...

8.8CVSS5.9AI score0.00203EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/26 12:00 a.m.35 views

CVE-2025-56798

Cross-Site Request Forgery CSRF vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges via the Unraid authentication cookie's lax same-site policy...

0.00203EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/20 6:14 p.m.45 views

CVE-2026-63107

LimeSurvey (versions up to 6.17.10 and 7.0.4) contains a server-side request forgery in the REST API survey template endpoint. The vulnerability arises from unsanitized use of the HTTP Host header in getTemplateData(), allowing authenticated users to cause the server to issue arbitrary HTTP reque...

7.7CVSS5.6AI score0.00354EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/06/10 9:02 p.m.20 views

CVE-2026-50635

LimeSurvey constructs account password-reset links from the client-supplied HTTP Host header without validating it. The optional allowedHosts allowlist that would constrain this is undefined in the default and documented configuration, so LSHttpRequest::checkIsAllowedHost results in no operation....

8.8CVSS5.5AI score0.00372EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2026/06/09 6:31 p.m.13 views

LimeSurvey constructs account password-reset links from the client-supplied HTTP Host header without validating it.

LimeSurvey constructs account password-reset links from the client-supplied HTTP Host header without validating it. The optional allowedHosts allowlist that would constrain this is undefined in the default and documented configuration, so LSHttpRequest::checkIsAllowedHost results in no operation....

8.8CVSS5.5AI score0.00372EPSS
SaveExploits0References7Affected Software1
NVD
NVD
added 2026/06/09 6:17 p.m.24 views

CVE-2026-50635

LimeSurvey constructs account password-reset links from the client-supplied HTTP Host header without validating it. The optional allowedHosts allowlist that would constrain this is undefined in the default and documented configuration, so LSHttpRequest::checkIsAllowedHost results in no operation....

8.8CVSS0.00372EPSS
SaveExploits0References3
Packet Storm News
Packet Storm News
added 2026/05/18 12:00 a.m.22 views

Explainable Machine Learning for Phishing Detection on Heterogeneous Datasets with MCP-Enabled Deployment

With the growth in digital transformation and Internet usage, the Social Engineering techniques such as Phishing have become a major concern for the users and the organizations. Phishing attacks involve deceptive techniques to trick users into revealing confidential information that causes...

5.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/04/10 7:23 p.m.9 views

CVE-2025-63238

A Reflected Cross-Site Scripting XSS affects LimeSurvey versions prior to 6.15.11+250909, due to the lack of validation of gid parameter in getInstance function in application/models/QuestionCreate.php. This allows an attacker to craft a malicious URL and compromise the logged in user...

6.1CVSS5.8AI score0.00227EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2026/04/09 12:00 a.m.5 views

CVE-2025-63238

A Reflected Cross-Site Scripting XSS affects LimeSurvey versions prior to 6.15.11+250909, due to the lack of validation of gid parameter in getInstance function in application/models/QuestionCreate.php. This allows an attacker to craft a malicious URL and compromise the logged in user...

5.8AI score0.00227EPSS
SaveExploits1References2
Rows per page
Query Builder