3837 matches found
CVE-2026-69807
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an authorized attacker to elevate privileges over a network...
CVE-2026-62801
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-69807
Windows PowerShell is affected by a path traversal vulnerability (improper limitation of a pathname to a restricted directory) that allows an authorized attacker to elevate privileges over a network . The vulnerability carries a CVSS 3.1 score of 8.0 (HIGH) , with a vector of AV:N/AC:L/PR:L/UI:R/...
EUVD-2026-73625
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an authorized attacker to elevate privileges over a network...
CVE-2026-62801
CVE-2026-62801 is a path traversal vulnerability in Windows PowerShell that allows an unauthorized, remote attacker to bypass a security feature. The improper limitation of a pathname to a restricted directory means an attacker can reference files or resources outside the intended directory. The ...
EUVD-2026-73177
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network...
PowerShell Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an authorized attacker to elevate privileges over a network...
Microsoft PowerShell Security Feature Bypass Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network...
log-horizon v0.9.0
Microsoft Sentinel SIEM Log Source Analyzer I've had to answer "what are we actually getting out of these logs?" or "what is the recommended logs for Microsoft Sentinel" more times than I can count. The answer always depend on so many things, but we can be generic. So I built this thingy right...
PT-2026-87733
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an authorized attacker to elevate privileges over a network...
PT-2026-87209
New original discovery vuln disclosure: CVE-2026-62801 A malicious PowerShell Remoting endpoint can write arbitrary files anywhere on a connecting user's machine — escalable to remote code execution. If an attacker can get you to Copy-Item from their endpoint, they own your file system. Affects a...
SUSE CVE-2026-71312
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to v1.75.0, rclone interpolates remote SFTP paths into PowerShell hash commands in backend/sftp/sftp.go, and quoteOrEscapeShellPath escapes only ASCII apostrophe even though...
ncentral-compromise-ioc-triage — Updated!
N-central Compromise IoC Triage Read-only defensive hunting toolkit for post-exploitation artifacts associated with N-able N-central authentication bypass vulnerabilities CVE-2026-18556 and CVE-2026-18577. The PowerShell endpoint scanner flags indicators published by N-able and Huntress; it never...
PrivescCheck v2026.09.02-1
PrivescCheck Quickly identify common Windows vulnerabilities and configuration issues that are not necessarily covered by public security standards, and collect useful information for exploitation and post-exploitation tasks. !IMPORTANT A major aspect to be aware of when using this tool is that a...
CVE-2026-19591
OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpreted PowerShell's stop-parsing token --% differently than PowerShell itself. If a user opens an attacker-prepared...
CVE-2026-19591
OpenAI Codex CLI (Windows, macOS, Linux) and Codex Desktop (Windows, macOS) are vulnerable to remote code execution due to insufficient neutralization of control sequences. A discrepancy in the command-safety parser causes it to misinterpret PowerShell's stop-parsing token (--%), allowing the app...
EUVD-2026-69394
OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpreted PowerShell's stop-parsing token --% differently than PowerShell itself. If a user opens an attacker-prepared...
CVE-2026-19591
OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpreted PowerShell's stop-parsing token --% differently than PowerShell itself. If a user opens an attacker-prepared...
PT-2026-84355
Name of the Vulnerable Software and Affected Versions OpenAI Codex CLI affected versions not specified OpenAI Codex Desktop affected versions not specified Description OpenAI Codex CLI and Codex Desktop misclassify certain PowerShell commands as safe due to a discrepancy in how the command-safety...
CVE-2026-47827 CVE-2026-47827 – BOSH CLI Powershell Injection
Command Injection in BOSH CLI tool on windows in Cloud Foundry allows a remote attacker to execute arbitrary shell commands via command injection vulnerabilities...