Lucene search
+L

38 matches found

Cvelist
Cvelist
•added 2024/07/04 12:00 a.m.•32 views

CVE-2024-39934

Robotmk before 2.0.1 allows a local user to escalate privileges e.g., to SYSTEM if automated Python environment setup is enabled, because the "shared holotree usage" feature allows any user to edit any Python environment...

7.8CVSS0.0018EPSS
SaveExploits0References4
OSV
OSV
•added 2024/07/04 12:00 a.m.•22 views

CVE-2024-39934

Robotmk before 2.0.1 allows a local user to escalate privileges e.g., to SYSTEM if automated Python environment setup is enabled, because the "shared holotree usage" feature allows any user to edit any Python environment...

7.8CVSS6.8AI score
SaveExploits0References6
CVE
CVE
•added 2024/07/04 12:00 a.m.•60 views

CVE-2024-39934

Robotmk prior to 2.0.1 is vulnerable to local privilege escalation. The issue stems from the "+shared holotree usage+" feature, which allows any user to edit any Python environment, enabling a local user to escalate to SYSTEM. Affected software: Robotmk

7.8CVSS7.1AI score0.0018EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/07/04 12:00 a.m.•10 views

CVE-2024-39934

Robotmk before 2.0.1 allows a local user to escalate privileges e.g., to SYSTEM if automated Python environment setup is enabled, because the "shared holotree usage" feature allows any user to edit any Python environment...

7.8CVSS6.9AI score0.0018EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2022/06/23 5:15 p.m.•8 views

CVE-2022-32552

Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FA releases, and Pure Storage FlashBlade products running Purity//FB 3.3.0, 3.2.0 - 3.2.4, 3.1.0 - 3.1.12, 3.0.x and prior Purity//FB releases are vulnerable t...

9CVSS7.2AI score0.01158EPSS
SaveExploits0References2
NVD
NVD
•added 2022/06/23 5:15 p.m.•15 views

CVE-2022-32552

Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FA releases, and Pure Storage FlashBlade products running Purity//FB 3.3.0, 3.2.0 - 3.2.4, 3.1.0 - 3.1.12, 3.0.x and prior Purity//FB releases are vulnerable t...

9CVSS0.01158EPSS
SaveExploits0References1
OSV
OSV
•added 2022/06/23 5:15 p.m.•14 views

CVE-2022-32552

Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FA releases, and Pure Storage FlashBlade products running Purity//FB 3.3.0, 3.2.0 - 3.2.4, 3.1.0 - 3.1.12, 3.0.x and prior Purity//FB releases are vulnerable t...

8.8CVSS5.8AI score0.01158EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/06/23 12:00 a.m.•9 views

Pure Storage FlashBlade 和 FlashArray 安全漏洞

Pure Storage FlashArray and Pure Storage FlashBlade are both products of Pure Storage, Inc. the Pure Storage FlashArray is an all QLC flash storage array. the Pure Storage FlashBlade is a consolidated storage platform for file and object Pure Storage FlashBlade is a consolidated storage platform...

9CVSS7.9AI score0.01158EPSS
SaveExploits0References2
OSV
OSV
•added 2020/03/23 11:15 p.m.•19 views

CVE-2020-5252

The command-line "safety" package for Python has a potential security issue. There are two Python characteristics that allow malicious code to “poison-pill” command-line Safety package detection routines by disguising, or obfuscating, other malicious or non-secure packages. This vulnerability is...

4.1CVSS6.9AI score
SaveExploits0References3
Prion
Prion
•added 2020/03/23 11:15 p.m.•21 views

Design/Logic Flaw

The command-line "safety" package for Python has a potential security issue. There are two Python characteristics that allow malicious code to “poison-pill” command-line Safety package detection routines by disguising, or obfuscating, other malicious or non-secure packages. This vulnerability is...

1.9CVSS4.6AI score0.00366EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
•added 2020/03/23 11:15 p.m.•22 views

PYSEC-2020-101

The command-line "safety" package for Python has a potential security issue. There are two Python characteristics that allow malicious code to “poison-pill” command-line Safety package detection routines by disguising, or obfuscating, other malicious or non-secure packages. This vulnerability is...

5CVSS7AI score0.00366EPSS
SaveExploits0References3Affected Software1
Kitploit
Kitploit
•added 2019/11/13 8:30 p.m.•96 views

Asset Discover - Burp Suite Extension To Discover Assets From HTTP Response

Burp Suite extension to discover assets from HTTP response using passive scanning. Refer our blog Asset Discovery using Burp Suite for more details. The extension is now part of the BApp store and can be installed directly from the Burp Suite...

7.5AI score
SaveExploits0References4
OSV
OSV
•added 2019/09/24 5:15 a.m.•12 views

CVE-2019-16729

pam-python before 1.0.7-1 has an issue in regard to the default environment variable handling of Python, which could allow for local root escalation in certain PAM setups...

7.8CVSS7.6AI score
SaveExploits0References7
OSV
OSV
•added 2019/09/24 5:15 a.m.•10 views

DEBIAN-CVE-2019-16729

pam-python before 1.0.7-1 has an issue in regard to the default environment variable handling of Python, which could allow for local root escalation in certain PAM setups...

7.8CVSS7.3AI score0.00356EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/09/24 4:07 a.m.•34 views

CVE-2019-16729

pam-python before 1.0.7-1 has an issue in regard to the default environment variable handling of Python, which could allow for local root escalation in certain PAM setups...

7.6AI score0.00356EPSS
SaveExploits0References7
GithubExploit
GithubExploit
•added 2019/05/21 5:38 a.m.•116 views

Exploit for Use After Free in Microsoft

CVE-2019-0708-poc CVE-2019-0708 remote code execution vulnerab...

10CVSS7.7AI score0.99999EPSS
SaveExploits126
exploitpack
exploitpack
•added 2017/12/07 12:00 a.m.•23 views

Claymore Dual ETH + DCRSCLBCPASC GPU Miner - Stack Buffer Overflow Path Traversal

Claymore Dual ETH + DCRSCLBCPASC GPU Miner - Stack Buffer Overflow Path Traversal !/usr/bin/env python -- coding: UTF-8 -- github.com/tintinweb optional: pip install pysocks https://pypi.python.org/pypi/PySocks ''' API overview: nc -L -p 3333 "id":0,"jsonrpc":"2.0","method":"minergetstat1"...

0.1AI score
SaveExploits0
Fedora
Fedora
•added 2013/05/23 12:42 p.m.•44 views

[SECURITY] Fedora 17 Update: python-virtualenv-1.9.1-1.fc17

virtualenv is a tool to create isolated Python environments. virtualenv is a successor to workingenv, and an extension of virtual-python. It is written by Ian Bicking, and sponsored by the Open Planning Project. It is licensed under an MIT-style permissive license...

2.1CVSS2.5AI score0.00367EPSS
SaveExploits0
Rows per page
Query Builder