156 matches found
cve-2023-50164
CVE-2023-50164 影響を受けるバージョン Struts 2.0.0 - Struts 2.3.37 EOL Struts 2.5.0 - Struts 2.5.32 Struts 6.0.0 - Struts 6.3.0 脆弱性が修正されたバージョン Struts 2.5.33 Struts 6.3.0.2 検索用スクリプト Windows/PowerShell PowerShell 5.1以降向け。作成者: Kjetil Sigvartsen（Norsk helsenett SF） String$Extensions = @'.jar', '.war', '.ear'...
PSTrojanFile
PSTrojanFile Windows PowerShell Nombre de Archivo y API Anti-Malware de Defender - POC de Ejecución de Código Descubrimiento: John Page alias hyp3rlinx 2019 y revisado 2023 Actualizado 24 de diciembre de 2023 Evadiendo el obstáculo de las comillas simples en PowerShell para ejecución de código y,...
Microsoft-2024-December-Update-Control
Windows 2024年12月 セキュリティパッチ監査スクリプト このPowerShellスクリプトは、2024年12月のMicrosoftセキュリティ情報で発表された特定の脆弱性（CVE-2024-49124、CVE-2024-49117、CVE-2024-49118、CVE-2024-49122）に必要なKB更新プログラムがシステムにインストールされているかどうかを確認します。スクリプトはオペレーティングシステムのバージョンを検出して、どのパッチを適用する必要があるかを判断し、まず検出したオペレーティングシステムを画面に表示します。 特徴 CVEチェック:...
CVE-2026-69807
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an authorized attacker to elevate privileges over a network...
CVE-2026-62801
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network...
EUVD-2026-73625
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an authorized attacker to elevate privileges over a network...
CVE-2026-69807
Windows PowerShell is affected by a path traversal vulnerability (improper limitation of a pathname to a restricted directory) that allows an authorized attacker to elevate privileges over a network . The vulnerability carries a CVSS 3.1 score of 8.0 (HIGH) , with a vector of AV:N/AC:L/PR:L/UI:R/...
CVE-2026-62801
CVE-2026-62801 is a path traversal vulnerability in Windows PowerShell that allows an unauthorized, remote attacker to bypass a security feature. The improper limitation of a pathname to a restricted directory means an attacker can reference files or resources outside the intended directory. The ...
EUVD-2026-73177
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network...
PowerShell Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an authorized attacker to elevate privileges over a network...
Microsoft PowerShell Security Feature Bypass Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-87733
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an authorized attacker to elevate privileges over a network...
CVE-2026-62801: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-69807: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an authorized attacker to elevate privileges over a network...
PT-2026-87209
Name of the Vulnerable Software and Affected Versions Windows PowerShell versions prior to September 2026 Patch Tuesday Description An improper limitation of a pathname to a restricted directory, known as path traversal, allows an unauthorized attacker to bypass a security feature over a network....
Malicious code in @opezneppelin/contracts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe04ec28ed56cb0a253131129df8078d425f8a0c579c439ced9c75b6977a6ab @opezneppelin/contracts is a typosquat of @openzeppelin/contracts. Its postinstall lifecycle script scripts/postinstall.js hex-escapes all module...
Malicious code in faust-cont (npm)
The npm package faust-cont is a supply-chain dropper disguised as a benign CLI tool index.js is a decoy that only logs "cli tool install package loaded". The real behaviour is placed in an install script. An install lifecycle hook install: node install.js executes automatically on npm install,...
MAL-2026-11044 Malicious code in tailwind-gutenberg-block-zero (npm)
The npm package tailwind-gutenberg-block-zero is a supply-chain dropper disguised as a WordPress / Gutenberg block plugin. The published tarball carries the trappings of a real plugin a my-tailwind-blocks.php, a wp-scripts build configuration, a README and a screenshot, but its real behaviour liv...