CVE-2025-69599

CVE-2025-69599 作者: Rafael José Núñez Gulías 公司: Iberian Var Group 受影响产品: RayVentory Scan Engine 12.6 Update 8 及更早版本 Raynet 安全公告: RSEC200965 Raynet 中的 rvia 存在一个 不受控制的搜索路径元素 问题。在加载共享对象和调用系统二进制文件（例如 .so 和辅助二进制文件）时，它们都使用相对路径进行调用，这使得用户可以通过 PATH 环境变量操作来篡改最终执行的二进制文件或 .so 对象。 在以下证据中，在 /tmp 目录下创建了一个名为 cur...

CVE-2026-0776

CVE-2026-0776 - Discord Client における非制御の検索パス要素 概要 このリポジトリは、Windows 上の Discord Desktop Client に影響するローカルコード実行の問題である CVE-2026-0776 を文書化したものです。 この脆弱性は、Node.js ベースのコンポーネントにおける安全でないモジュール解決動作に関連しており、特定の条件下で意図しないファイルシステム上の場所から JavaScript コードが読み込まれる可能性があります。 詳細 CWE-427: 非制御の検索パス要素 CVSS: 7.3（高） 影響: ローカルコード実...

CVE-2025-27237

CVE-2025-27237 通过 OpenSSL 配置文件劫持实现 Zabbix Agent/Agent2 for Windows 的本地权限提升漏洞。 概述...

CVE-2024-0670

CVE-2024-0670 – CheckMK 에이전트의 로컬 권한 상승 PowerShell PoC 요약 이 저장소는 CheckMK 에이전트의 Windows 로컬 권한 상승 취약점인 CVE-2024-0670 에 대한 독립적인 PowerShell 개념 증명 을 제시합니다. 이 취약점으로 인해 낮은 권한의 로컬 사용자가 MSI 복구 프로세스 중 예측 가능한 명령 파일 실행을 악용하여 NT AUTHORITY\SYSTEM 으로 권한을 상승시킬 수 있습니다. 이 구현은 elsevar11이...

EUVD-2026-63696

Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...

EUVD-2026-63697

Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally...

CVE-2026-55015

Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...

CVE-2026-55015

CVE-2026-55015 is an uncontrolled search path element vulnerability in Windows Remote Help that allows an authorized local attacker to cause a denial of service . The attack requires local access with low privileges and no user interaction (CVSS 3.1: 5.5 MEDIUM ). CISA's SSVC assessment indicates...

Windows Remote Help Defense Spoofing Vulnerability

Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally...

Microsoft Remote Help Denial of Service Vulnerability

Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...

PT-2026-79190

Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...

CVE-2026-56090

Dell ObjectScale, versions prior to 4.3.0.1, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

EUVD-2026-60201

Dell ObjectScale, versions prior to 4.3.0.1, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-56090

Dell ObjectScale, versions prior to 4.3.0.1, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-56090

Dell ObjectScale versions before 4.3.0.1 have an Uncontrolled Search Path Element flaw exploitable by a low-privileged local attacker to elevate privileges; no exploitation or in-the-wild activity is documented in the provided documents.

PT-2026-76656

Name of the Vulnerable Software and Affected Versions Dell ObjectScale versions prior to 4.3.0.1 Description An Uncontrolled Search Path Element issue exists where a low privileged attacker with local access could potentially exploit the flaw to achieve elevation of privileges. An uncontrolled...

CVE-2026-16860

CVE-2026-16860 affects IBM i releases 7.3–7.6 (5770-SS1). A remote authenticated attacker can execute arbitrary code due to an uncontrolled search path element. The vulnerability, tracked by IBM with a base CVSS v3.1 score of 9.9 (CRITICAL), is triggered by improper handling of search paths in th...

CVE-2026-16860 IBM i is Affected By Remote Code Execution Vulnerability []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolled search path element...

EUVD-2026-57379

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolled search path element...

Security Bulletin: IBM i is Affected By Remote Code Execution Vulnerability [CVE-2026-16860]

Summary IBM i is vulnerable to a remote code execution vulnerability due to an uncontrolled search path element CVE-2026-16860 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16860 DESCRIPTION: IBM i could allow a remote authenticated attacker to execute...