Lucene search
+L

11 matches found

Kitploit
Kitploit
added 2026/09/03 12:22 p.m.6 views

CVE-2026-38945

CVE-2026-38945 作者: Rafael José Núñez Gulías 公司: Iberian Var Group 受影响产品: RayVentory Scan Engine 12.6 Update 8 及更早版本 Raynet 公告: RSEC200967 rvia 在 Raynet 中执行一个 find 命令,该命令的搜索条件未正确终止,以定位 Java 安装。攻击者可以构造满足错误搜索条件的特定目录结构,导致代理程序在 Java 检测过程中执行恶意二进制文件。 root@kitploit: /bin/sh -c "find / -not \ -path '/dev'...

7.8CVSS5.2AI score0.00799EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 11:41 p.m.6 views

CVE-2025-69600

CVE-2025-69600 作者: Rafael José Núñez Gulías 企業: Iberian Var Group 影響を受ける製品: RayVentory Scan Engine 12.6 Update 8 およびそれ以前のバージョン Raynet セキュリティアドバイザリ: RSEC200966 Raynet の rvia におけるコマンドインジェクションにより、攻撃者は getconfig、upload、inventory、oracle の各オプションを介してコマンドを実行できます。 バリデーションは(設定プロパティ ForbiddenCurlChars が...

7.8CVSS5.2AI score0.00826EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/01 6:55 p.m.6 views

CVE-2025-69599

CVE-2025-69599 著者: Rafael José Núñez Gulías 会社: Iberian Var Group 影響を受ける製品: RayVentory Scan Engine 12.6 Update 8 およびそれ以前のバージョン Raynet 勧告: RSEC200965 Raynet の rvia は、制御されていない検索パス要素 の問題に対して脆弱です。共有オブジェクトをロードし、システムバイナリ(.so やヘルパーバイナリなど)を呼び出す際に相対パスが使用されるため、ユーザーが PATH 環境変数の操作を通じて実行される最終的なバイナリや .so...

9.8CVSS5.2AI score0.00389EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.18 views

RayVentory Scan Engine 安全漏洞

RayVentory Scan Engine is a network scanning engine developed by the German company RayVentory, designed for automatically discovering and collecting IT asset information. Version 12.6.4392.49 of the RayVentory Scan Engine contains a security vulnerability. This vulnerability stems from parameter...

7.8CVSS6.1AI score0.00826EPSS
SaveExploits2References4
EUVD
EUVD
added 2026/05/08 9:31 a.m.37 views

EUVD-2025-209737

RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable. NOTE: this is disputed because ability of an attacker to control the environment is a site-specific misconfiguration...

5.8AI score0.00389EPSS
SaveExploits0References3
NVD
NVD
added 2026/05/08 7:16 a.m.50 views

CVE-2025-69599

RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable. NOTE: this is disputed because ability of an attacker to control the environment is a site-specific misconfiguration...

9.8CVSS0.00389EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/08 12:00 a.m.10 views

CVE-2025-69599

RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable. NOTE: this is disputed because ability of an attacker to control the environment is a site-specific misconfiguration...

5.8AI score0.00389EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/08 12:00 a.m.10 views

CVE-2025-69599

RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable. NOTE: this is disputed because ability of an attacker to control the environment is a site-specific misconfiguration...

5.8AI score0.00389EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/08 12:00 a.m.17 views

RayVentory Scan Engine 安全漏洞

RayVentory Scan Engine is a network scanning engine developed by the German company RayVentory, designed for automatically discovering and collecting IT asset information. Versions of RayVentory Scan Engine 12.6 Update 8 and earlier contain security vulnerabilities. These vulnerabilities allow...

9.8CVSS5.8AI score0.00389EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/08 12:00 a.m.26 views

CVE-2025-69599

CVE-2025-69599 affects RayVentory Scan Engine (12.6 Update 8 and earlier). The root cause is privilege escalation when an attacker can influence the PATH environment variable, as described by multiple sources. Red Hat and related advisories corroborate that this condition enables elevated privile...

9.8CVSS5.8AI score0.00389EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/02/11 12:02 p.m.95 views

Exploit for CVE-2025-69600

CVE-2025-69600 - author: Rafael José Núñez Gulías - com...

5.9AI score0.00826EPSS
SaveExploits2
Rows per page
Query Builder