7980 matches found
CVE-2025-50986
diskover-web v2.3.0 Community Edition is vulnerable to multiple stored cross-site scripting (XSS) vulnerabilities within its administrative settings interface. The root cause is the failure to properly sanitize user-supplied input in several configuration fields, including ES_HOST , ES_INDEXREFRE...
Linux Distros Unpatched Vulnerability : CVE-2020-13304
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Same 2 factor Authentication secret code was generated which resulted an...
Exploit for Path Traversal in Rarlab Winrar
CVE-2025-8088 WinRAR Startup Folder Exploit Proof of Concept...
Malicious Package
Overview colorinal is a malicious package. This package is part of a multi-stage attack and its content was removed from the official package manager. The attack utilizes a seemingly harmless package to introduce a malicious dependency. The goal of this attack is to gain remote code execution on...
Malicious Package
Overview termncolor is a malicious package. This package is part of a multi-stage attack and its content was removed from the official package manager. The attack utilizes a seemingly harmless package to introduce a malicious dependency. The goal of this attack is to gain remote code execution on...
CVE-2025-5191
An Unquoted Search Path vulnerability has been identified in the utility for Moxa’s industrial computers Windows. Due to the unquoted path configuration in the SerialInterfaceService.exe utility, a local attacker with limited privileges could place a malicious executable in a higher-priority...
CVE-2025-5191
CVE-2025-5191 describes an Unquoted Search Path vulnerability in Moxa’s Windows SerialInterfaceService.exe used by industrial computers. The unquoted path could allow a local, low-privilege attacker to place a malicious executable in a higher-priority search directory, and when the Serial Interfa...
CVE-2025-5191 Unquoted Search Path Vulnerability in the Utility for Industrial Computers (Windows)
An Unquoted Search Path vulnerability has been identified in the utility for Moxa’s industrial computers Windows. Due to the unquoted path configuration in the SerialInterfaceService.exe utility, a local attacker with limited privileges could place a malicious executable in a higher-priority...
PT-2025-34600 · Moxa · Moxa Industrial Computers
Name of the Vulnerable Software and Affected Versions: Moxa industrial computers Windows affected versions not specified Description: An unquoted search path vulnerability exists in the SerialInterfaceService.exe utility. This allows a local attacker with limited privileges to place a malicious...
CVE-2025-5191: Unquoted Search Path or Element
An Unquoted Search Path vulnerability has been identified in the utility for Moxa’s industrial computers Windows. Due to the unquoted path configuration in the SerialInterfaceService.exe utility, a local attacker with limited privileges could place a malicious executable in a higher-priority...
Exploit for Use After Free in Apple Ipados
Glass Cage: Zero-Click PNG Exploit Chain for iOS 18.2.1 CVE...
Exploit for Path Traversal in Rarlab Winrar
🚨 CVE-2025-8088 WinRAR Exploit Tool !Pythonhttps://img.s...
Malicious PyPI and npm Packages Discovered Exploiting Dependencies in Supply Chain Attacks
Cybersecurity researchers have discovered a malicious package in the Python Package Index PyPI repository that introduces malicious behavior through a dependency that allows it to establish persistence and achieve code execution. The package, named termncolor , realizes its nefarious functionalit...
Malicious PyPI and npm Packages Discovered Exploiting Dependencies in Supply Chain Attacks
Cybersecurity researchers have discovered a malicious package in the Python Package Index PyPI repository that introduces malicious behavior through a dependency that allows it to establish persistence and achieve code execution. The package, named termncolor , realizes its nefarious functionalit...
Linux Distros Unpatched Vulnerability : CVE-2020-1776
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When an agent user is renamed or set to invalid the session belonging to the user is keept active. The session can not be used to access ticket data in the case...
Exploit for Path Traversal in Rarlab Winrar
PoC for CVE-2025-8088: Path Traversal in WinRAR Vulnerabil...
Exploit for Path Traversal in Rarlab Winrar
WinRAR Path Traversal Exploit CVE-2025-8088 - Multi-Depth Pa...
Taiwan Web Servers Breached by UAT-7237 Using Customized Open-Source Hacking Tools
A Chinese-speaking advanced persistent threat APT actor has been observed targeting web infrastructure entities in Taiwan using customized versions of open-sourced tools with an aim to establish long-term access within high-value victim environments. The activity has been attributed by Cisco Talo...
Linux Distros Unpatched Vulnerability : CVE-2023-28161
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If temporary one-time permissions, such as the ability to use the Camera, were granted to a document loaded using a file: URL, that permission persisted in that...
