Lucene search
+L

5857 matches found

EUVD
EUVD
added 2026/01/01 3:30 a.m.8 views

EUVD-2025-206122

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

6.5AI score
SaveExploits0References1
EUVD
EUVD
added 2026/01/01 3:30 a.m.7 views

EUVD-2025-206123

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

6.5AI score
SaveExploits0References1
EUVD
EUVD
added 2026/01/01 3:30 a.m.4 views

EUVD-2025-206130

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

6.5AI score
SaveExploits0References1
EUVD
EUVD
added 2026/01/01 3:30 a.m.6 views

EUVD-2025-206120

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

6.5AI score
SaveExploits0References1
EUVD
EUVD
added 2026/01/01 3:30 a.m.6 views

EUVD-2025-206125

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

6.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.9 views

PT-2026-1156

CVE-2025-22190 - Cisco WebEx Remote Code Execution Vulnerability CVE ID : CVE-2025-22190 Published : Jan. 1, 2026, 1:15 a.m. | 3 hours, 5 minutes ago Description : Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. Severity: 0.0 ...

7.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.7 views

PT-2026-29241

Name of the Vulnerable Software and Affected Versions DNSdist affected versions not specified Description An attacker may be able to inject HTML content into the internal web dashboard by sending specially crafted DNS queries to a DNSdist instance. This is possible when domain-based dynamic rules...

9.1CVSS5.8AI score0.01073EPSS
SaveExploits0References56
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.7 views

PT-2026-1158

CVE-2025-22192 - Adobe Acrobat Untrusted Search Path Vulnerability CVE ID : CVE-2025-22192 Published : Jan. 1, 2026, 1:15 a.m. | 3 hours, 5 minutes ago Description : Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. Severity: 0....

6.9AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.7 views

PT-2026-1165

CVE-2025-22199 - Apache Struts Remote Code Execution Vulnerability CVE ID : CVE-2025-22199 Published : Jan. 1, 2026, 1:15 a.m. | 3 hours, 5 minutes ago Description : Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. Severity: 0....

7.5AI score
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/12/31 12:27 a.m.7 views

SUSE CVE-2023-54240

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtkethsoc: fix possible NULL pointer dereference in mtkhwlrogetfdirall rulelocs is allocated in ethtoolgetrxnfc and the size is determined by rulecnt from user space. So rulecnt needs to be check before using...

5.5CVSS6.5AI score0.00184EPSS
SaveExploits0References17
OSV
OSV
added 2025/12/30 11:45 p.m.9 views

GHSA-95QG-89C2-W5HJ theshit vulnerable to unsafe loading of user-owned Python rules when running as root

Impact Vulnerability Type: Local Privilege Escalation LPE / Arbitrary Code Execution. The application loads custom Python rules and configuration files from user-writable locations e.g., /.config/theshit/ without validating ownership or permissions when executed with elevated privileges. If the...

7.3CVSS7.3AI score0.00122EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2025/12/30 11:45 p.m.12 views

theshit vulnerable to unsafe loading of user-owned Python rules when running as root

Impact Vulnerability Type: Local Privilege Escalation LPE / Arbitrary Code Execution. The application loads custom Python rules and configuration files from user-writable locations e.g., /.config/theshit/ without validating ownership or permissions when executed with elevated privileges. If the...

6.7CVSS7.4AI score0.00122EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2025/12/30 7:15 p.m.40 views

CVE-2025-69257

CVE-2025-69257 (theshit) is a local privilege escalation vulnerability in the command-line tool that loads Python rules/configs from user-writable locations (e.g., ~/.config/theshit/) without validating ownership/permissions when executed with elevated privileges. If invoked with sudo or EUID=0, ...

6.7CVSS7.2AI score0.00122EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/30 7:15 p.m.11 views

CVE-2025-69257 theshit vulnerable to unsafe loading of user-owned Python rules when running as root.

theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.1.1, the application loads custom Python rules and configuration files from user-writable locations e.g., /.config/theshit/ without validating ownership or permissions when...

6.7CVSS7.5AI score
SaveExploits0References4
Cvelist
Cvelist
added 2025/12/30 7:15 p.m.33 views

CVE-2025-69257 theshit vulnerable to unsafe loading of user-owned Python rules when running as root.

theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.1.1, the application loads custom Python rules and configuration files from user-writable locations e.g., /.config/theshit/ without validating ownership or permissions when...

6.7CVSS0.00122EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/30 7:15 p.m.4 views

CVE-2025-69257 theshit vulnerable to unsafe loading of user-owned Python rules when running as root.

theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.1.1, the application loads custom Python rules and configuration files from user-writable locations e.g., /.config/theshit/ without validating ownership or permissions when...

6.7CVSS7.2AI score0.00122EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2025/12/30 5:49 p.m.336 views

Exploit for OS Command Injection in Php

CVE-2024-4577 - PHP CGI Argument Injection Detection Lab A co...

9.8CVSS5.9AI score0.99998EPSS
SaveExploits106
OSV
OSV
added 2025/12/30 5:5 p.m.6 views

OPENSUSE-SU-2025:20121-1 Security update for redis

This update for redis fixes the following issues: - Updated to 8.2.3 boo1252996 CVE-2025-62507 https://github.com/redis/redis/releases/tag/8.2.3 - Security fixes - CVE-2025-62507 Bug in XACKDEL may lead to stack overflow and potential RCE - Bug fixes - HGETEX: A missing numfields argument when...

9.9CVSS6.6AI score0.86767EPSS
SaveExploits16References7
GithubExploit
GithubExploit
added 2025/12/30 3:14 p.m.235 views

Exploit for CVE-2025-14847

CVE-2025-14847-MongoBleed - Scanner+Detection+Exploit+Remediat...

8.7CVSS7.2AI score0.83218EPSS
SaveExploits39
OSV
OSV
added 2025/12/30 1:16 p.m.15 views

UBUNTU-CVE-2023-54216

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Fix using eswitch mapping in nic mode Cited patch is using the eswitch object mapping pool while in nic mode where it isn't initialized. This results in the trace below 0. Fix that by using either nic or eswitch...

7.8CVSS5.7AI score0.00125EPSS
SaveExploits0References5
Rows per page
Query Builder