381 matches found
CVE-2021-47868 WIN-PACK PRO 4.8 - 'WPCommandFileService' Unquoted Service Path
WIN-PACK PRO 4.8 contains an unquoted service path vulnerability in the WPCommandFileService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files \WINPAKPRO\WPCommandFileService Service.exe to inject malicious co...
CVE-2026-20092
CVE-2026-20092 affects Cisco Intersight Virtual Appliance. A read-only maintenance shell exposes a privilege-escalation path: improper file permissions on system-account configuration files allow an authenticated local admin to elevate to root, potentially gaining full control over the appliance ...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001070)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001070 advisory. nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, an...
Directory Traversal
Overview @react-router/node is a Node.js platform abstractions for React Router Affected versions of this package are vulnerable to Directory Traversal via the createFileSessionStorage function. An attacker can access or modify files outside the intended session file directory by crafting a...
CVE-1999-0581
The HKEYCLASSESROOT key in a Windows NT system has inappropriate, system-critical permissions...
CVE-2025-13911
The vulnerability affects Ignition SCADA applications where Python scripting is utilized for automation purposes. The vulnerability arises from the absence of proper security controls that restrict which Python libraries can be imported and executed within the scripting environment. The core issu...
CVE-2025-34323
Nagios Log Server versions prior to 2026R1.0.1 are vulnerable to local privilege escalation due to a combination of sudo misconfiguration and group-writable application directories. The 'www-data' user is a member of the 'nagios' group, which has write access to...
CVE-2025-59171
Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote code execution with system-level permissions...
CVE-2025-59171 Advantech DeviceOn/iEdge Path Traversal
Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote code execution with system-level permissions...
EUVD-2020-30451
Malware in sbrugna...
EUVD-2020-5796
Malware in sbrugna...
EUVD-2020-5787
Malware in sbrugna...
EUVD-2020-4207
Malware in sbrugna...
EUVD-2018-15835
Malware in sbrugna...
EUVD-2020-5783
Malware in sbrugna...
EUVD-2019-13203
Malware in sbrugna...
EUVD-2019-10157
Malware in sbrugna...
EUVD-2020-14290
Malware in sbrugna...