Lucene search
+L

654 matches found

OSV
OSV
added 2025/06/23 9:25 a.m.8 views

CVE-2025-52936 Improper Link Resolution Before File Access vulnerability in yrutschle/sslh

Improper Link Resolution Before File Access 'Link Following' vulnerability in yrutschle sslh.This issue affects sslh: before 2.2.2...

9.3CVSS5.9AI score
SaveExploits0References6
CVE
CVE
added 2025/06/23 9:25 a.m.49 views

CVE-2025-52936

CVE-2025-52936 affects the sslh package (yrutschle sslh) prior to 2.2.2. Debian’s DLA-4238-1 and related advisories disclose a link-following vulnerability and fix it in Debian 11 bullseye with package version 1.20-1+deb11u1 . The vulnerability is described as an “Improp­er Link Resolution Before...

9.3CVSS6.7AI score0.00164EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/06/23 9:25 a.m.3 views

CVE-2025-52936 Improper Link Resolution Before File Access vulnerability in yrutschle/sslh

Improper Link Resolution Before File Access 'Link Following' vulnerability in yrutschle sslh.This issue affects sslh: before 2.2.2...

9.3CVSS6.6AI score0.00164EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/23 12:00 a.m.14 views

sslh 后置链接漏洞

sslh is an application protocol multiplexer by the individual developer Yves Rutschle. A backlink vulnerability exists in versions prior to sslh 2.2.2, which stems from improper link resolution before file access...

9.3CVSS6.4AI score0.00164EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/06/23 12:00 a.m.6 views

PT-2025-26586

Name of the Vulnerable Software and Affected Versions sslh versions prior to 2.2.2 Description An improper link resolution issue, known as link following, exists in sslh, a protocol multiplexor used to share SSH and HTTPS on the same port. The software fails to properly handle symbolic links when...

9.3CVSS5.6AI score0.00164EPSS
SaveExploits0References20
RedhatCVE
RedhatCVE
added 2025/06/12 5:05 p.m.6 views

CVE-2025-32721

Improper link resolution before file access 'link following' in Windows Recovery Driver allows an authorized attacker to elevate privileges locally...

7.3CVSS7.6AI score0.00591EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/06/12 5:05 p.m.6 views

CVE-2025-33075

Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to elevate privileges locally...

7.8CVSS7.9AI score0.00527EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/10 5:22 p.m.8 views

CVE-2025-32721

Improper link resolution before file access 'link following' in Windows Recovery Driver allows an authorized attacker to elevate privileges locally...

7.3CVSS0.00591EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2025/06/10 7:00 a.m.25 views

Windows Installer Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to elevate privileges locally...

7.8CVSS7.2AI score0.00527EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/06/10 12:00 a.m.16 views

PT-2025-24858 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', which allows an authorized attacker to elevate privileges locally. There is no...

7.8CVSS5.8AI score0.00527EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/06/10 12:00 a.m.6 views

PT-2025-24834 · Microsoft · Windows Recovery Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Recovery Driver affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', which allows an authorized attacker to elevate privileges locally. There...

7.3CVSS5.9AI score0.00591EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2025/06/05 3:26 p.m.8 views

CVE-2025-36564

Dell Encryption Admin Utilities versions prior to 11.10.2 contain an Improper Link Resolution vulnerability. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation...

7.8CVSS7.5AI score0.00113EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/03 3:15 p.m.9 views

CVE-2025-36564

Dell Encryption Admin Utilities versions prior to 11.10.2 contain an Improper Link Resolution vulnerability. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation...

7.8CVSS5.8AI score0.00113EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/03 3:15 p.m.13 views

CVE-2025-36564

Dell Encryption Admin Utilities versions prior to 11.10.2 contain an Improper Link Resolution vulnerability. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation...

7.8CVSS0.00113EPSS
SaveExploits0References1
CVE
CVE
added 2025/06/03 2:41 p.m.56 views

CVE-2025-36564

Dell Encryption Admin Utilities (Dell) versions prior to 11.10.2 are affected by an Improper Link Resolution vulnerability that can be exploited locally by a user with low privileges to achieve privilege escalation. The root cause is an incorrect link resolution in the utility. The issue is docum...

7.8CVSS7.5AI score0.00113EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/06/03 2:41 p.m.16 views

CVE-2025-36564

Dell Encryption Admin Utilities versions prior to 11.10.2 contain an Improper Link Resolution vulnerability. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation...

7.8CVSS0.00113EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/06/03 2:41 p.m.11 views

CVE-2025-36564

Dell Encryption Admin Utilities versions prior to 11.10.2 contain an Improper Link Resolution vulnerability. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation...

7.8CVSS7.5AI score0.00113EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/06/03 12:00 a.m.10 views

Microsoft Edge (Chromium-based) Update elevation of privilege vulnerability (CNVD-2025-23057)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. An elevation of privilege vulnerability exists in Microsoft Edge Chromium-based Update, which is caused by improper link resolution before file access. An attacker could exploit the...

8.8CVSS7AI score0.00518EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/06/03 12:00 a.m.9 views

Dell Encryption Admin Utilities 安全漏洞

Dell Encryption Admin Utilities is a software for data encryption management and troubleshooting from Dell, USA. An incorrect link resolution vulnerability exists in Dell Encryption Admin Utilities versions prior to 11.10.2, which can be exploited by an attacker to elevate privileges...

7.8CVSS6.7AI score0.00113EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/05/23 5:46 p.m.583 views

Exploit for Link Following in Microsoft

CVE-2025-47181 Concept: Microsoft Edge Link Following Privileg...

8.8CVSS6.9AI score0.00518EPSS
SaveExploits1
Rows per page
Query Builder