CVE-2026-0776

CVE-2026-0776 - Elemento de Caminho de Pesquisa Não Controlado no Cliente Discord Resumo Este repositório documenta a CVE-2026-0776, um problema de execução local de código que afeta o cliente desktop do Discord no Windows. A vulnerabilidade está relacionada a um comportamento inseguro de resoluç...

DLL_Injection_On_VLC

Iniezione di DLL e CVE-2010-3124 Panoramica 🌱 Questo progetto esplora il tema dell'iniezione di DLL Dynamic Link Library e si concentra in particolare sulla CVE-2010-3124. La CVE-2010-3124 si riferisce a una vulnerabilità di percorso di ricerca non attendibile trovata in VLC Media Player versione...

CVE-2025-27237

CVE-2025-27237 Vulnerabilidade de escalonamento local de privilégios no Zabbix Agent/Agent2 para Windows via sequestro de arquivo de configuração OpenSSL. Visão Geral Campo| Valor ---|--- ID CVE| CVE-2025-27237 CVSS v4.0| 7.3 ALTO CWE| CWE-427: Elemento de Caminho de Pesquisa Não Controlado Tipo|...

CVE-2024-0670

CVE-2024-0670 – Escalata dei Privilegi Locali nell'Agente CheckMK PowerShell PoC Abstract Questo repository presenta un proof of concept indipendente in PowerShell per CVE-2024-0670 , una vulnerabilità di escalation dei privilegi locali in Windows nell'Agente CheckMK. La vulnerabilità consente a ...

CVE-2024-6473-PoC

CVE-2024-6473 PoC Yandex Browser für den Desktop vor 24.7.1.380 hat eine DLL-Hijacking -Sicherheitslücke, da ein nicht vertrauenswürdiger Suchpfad verwendet wird. Anfällige Browserversion !IMPORTANT Das Internet muss während der Installation ausgeschaltet sein, da der Browser sonst aktualisiert...

CVE-2024-50986

CVE-2024-50986: Exploit di DLL Hijacking per Clementine Descrizione: Un problema in Clementine v.1.3.1 consente a un attaccante locale di eseguire codice arbitrario tramite un file DLL appositamente progettato. Versione interessata: Clementine v.1.3.1 Ricercatore: Utkarsh r1971d3 LinkedIn Link CV...

CVE-2010-5230

CVE-2010-5230 Multiple vulnerabilità di percorso di ricerca non attendibili in MicroStation 7.1 consentono a utenti locali di ottenere privilegi tramite un file trojan 1 mptools.dll, 2 baseman.dll, 3 wintab32.dll o 4 wintab.dll nella directory di lavoro corrente, come dimostrato da una directory...

cve-2026-25676

Ricerca su CVE-2026-25676 DLL Search Path Hijacking nell'Installer di M-Track Duo HD Panoramica Questo repository contiene la ricerca iniziale e una proof-of-concept relativa a CVE-2026-25676, una vulnerabilità di DLL search path hijacking che colpisce l'installer di M-Track Duo HD 1.0.0...

CVE-2024-32019-ndsudo

Die ndsudo-Schwachstelle ermöglicht es einem Angreifer, Root-Berechtigungen zu erlangen, indem er einen nicht vertrauenswürdigen Suchpfad im ndsudo-Tool ausnutzt, das Teil des Netdata-Agents ist. Dies kann die Ausführung beliebiger Programme mit erhöhten Rechten ermöglichen, wenn der Angreifer ei...

CVE-2018-1058

CVE-2018-1058 — PostgreSQL सर्च पथ प्रदर्शन यह रिपॉजिटरी अंतिम रिपोर्ट और निम्नलिखित के लिए पुनरुत्पादन कलाकृतियों को शामिल करती है: CVE-2018-1058: अनियंत्रित सर्च पथ के माध्यम से PostgreSQL में विशेषाधिकार वृद्धि उद्देश्य एक सुरक्षित स्थानीय Docker वातावरण का उपयोग करके CVE-2018-1058 के पीछे के...

CVE-2025-69599

CVE-2025-69599 लेखक: Rafael José Núñez Gulías कंपनी: Iberian Var Group प्रभावित उत्पाद: RayVentory Scan Engine 12.6 Update 8 और पिछले संस्करण Raynet सलाह: RSEC200965 rvia Raynet में अनियंत्रित खोज पथ तत्व Uncontrolled Search Path Element समस्या के लिए संवेदनशील है। जब साझा ऑब्जेक्ट लोड करते हैं औ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104761)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104761 advisory. Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary functions as the owners of expression indexes...

CVE-2026-75768

Substance3D - Painter is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a vict...

EUVD-2026-65687

Substance3D - Painter is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a vict...

CVE-2026-75768 Substance3D - Painter | Untrusted Search Path (CWE-426)

Substance3D - Painter is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a vict...

CVE-2026-75768 Substance3D - Painter | Untrusted Search Path (CWE-426)

Substance3D - Painter is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a vict...

CVE-2026-75768

Adobe Substance3D - Painter is affected by an Untrusted Search Path vulnerability (CWE-426) that can lead to arbitrary code execution in the context of the current user. An attacker must convince a victim to open a malicious file , which triggers the exploitation path. The CVSS v3.1 score is 7.8 ...

CVE-2026-78680 NLTK before 3.10.3 Arbitrary Code Execution via Graphviz dot Binary

NLTK versions before 3.10.3 fail to use validated absolute paths when invoking the Graphviz dot binary in dependencygraph.dot2img and AlignedSent.reprsvg, allowing attackers to execute arbitrary code by placing a malicious dot binary in the search path or current working directory. Attackers can...

CVE-2024-32019-POC

⚠️ CVE-2024-32019 - PoC 📌 Versioni Affette = v1.45.0, = v1.44.0-60, v1.45.0-169 🛠️ Prova di Concetto CVE-2024-32019 — escalation dei privilegi locale di ndsudo tramite percorso di ricerca non attendibile. 🔧 Compila l'exploit root@kitploit: x8664-linux-gnu-gcc -o nvme exploit.c -static 📤...

CVE-2026-78155

CVE-2026-78155 is a critical untrusted search path vulnerability in the StackGres operator that enables privilege escalation . A low-privilege tenant who owns a database can exploit this flaw to gain administrator privileges . The CVSS 3.1 score is 9.9 (Critical) with a network attack vector, low...