1821 matches found
ZimaOS <= v1.2.4 - Sensitive Information Disclosure
ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all prior versions, the API endpoints in ZimaOS, such as http:///v1/users/image?path=/var/lib/casaos/1/apporder.json and http:///v1/users/image?path=/var/lib/casaos/1/system.json,...
aura-botnet
Aura Botnet C2 Server The botnet's C2 server utilizes the Django framework as the backend. It is far from the most efficient web server, but this is offset by the following: Django is extremely portable and therefore good for testing/educational purposes. The server and database are contained...
Astra Linux – Vulnerability in Zabbix
Users who do not have permission for any host can access and view the number of hosts along with other statistics through the System Information Widget in the Global View Dashboard...
CVE-2026-70157
Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network...
CVE-2026-70157
A Heap-based buffer overflow vulnerability exists in the Windows System Information Console . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified as CRITICAL with a CVSS score of 9.8, impacting confidentiality, integrity, and ...
Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
Windows Cryptographic Services Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally...
Windows Hello Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally...
Windows System Information Console Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network...
Windows Clipboard User Service Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally...
Microsoft Trace Data Helper Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally...
PT-2026-112184
Name of the Vulnerable Software and Affected Versions Windows Cryptographic Services affected versions not specified Description Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information...
CVE-2026-70157: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-70157: Windows System Information Console Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network...
MAL-2026-17453 Malicious code in gocommunity.io/orderedbtree (Go)
Part of the Graphalgo campaign. The module, first published around 2026-08-11, contains a second-stage remote access trojan in plaintext that runs automatically. The RAT collects system information, executes decrypted Go or JavaScript payloads, and polls two command-and-control channels every 3-1...
PT-2026-95672
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A hardcoded credentials issue exists within the hardware assess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, which may lead to...
CVE-2026-80239: Exposure of Sensitive System Information Due to Uncleared Debug Information
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Exposure of Sensitive System Information Due to Uncleared Debug Information vulnerability. An unauthenticated attacker with physical access could potentially exploit this...
CVE-2026-81394
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...