Lucene search
+L

200891 matches found

Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.5 views

PT-2026-70288

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows affected versions not specified Description An improper conditions check within Ring 2: Device Drivers may allow a network adversary to cause a denial of service. This issue can be triggered by ...

7.1CVSS5.2AI score0.00172EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.6 views

PT-2026-70586

Name of the Vulnerable Software and Affected Versions Capability Access Management Service camsvc affected versions not specified Description A use-after-free condition in the Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally. Use-after-free i...

7CVSS5.3AI score0.00199EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.6 views

PT-2026-70710

Improper neutralization of special elements used in a command 'command injection' in Microsoft Office allows an authorized attacker to elevate privileges locally...

7.8CVSS5.1AI score0.00249EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/11 12:00 a.m.9 views

CVE-2026-51583

An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery SSRF via the Webhook validation mechanism in internal/webhook/validate.go, by setting a webhook target to an internal address...

5.3AI score0.00291EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.4 views

PT-2026-70489

Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A use-after-free condition in the Windows Telephony Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

7CVSS5.3AI score0.00246EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.2 views

PT-2026-70733

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

7.8CVSS6AI score0.00303EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.5 views

PT-2026-70333

Uncontrolled search path for some EquiTriton before version f5ddbb5 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially...

5.4CVSS5.2AI score0.00154EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.7 views

PT-2026-70528

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment...

7.8CVSS5.2AI score0.00271EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.6 views

PT-2026-70392

Name of the Vulnerable Software and Affected Versions Windows Narrator Braille affected versions not specified Description An untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about...

7.8CVSS5.2AI score0.00291EPSS
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/11 12:00 a.m.14 views

Malicious code in upshift-config (npm)

upshift-config is a malicious npm package — a renamed repack of a brand-hijack squat of the legitimate scoped package @augustdigital/sdk. The version 0.5.14 is fabricated to imply a release history the package does not have it is a first-ever publish. Its body is byte-identical to augustdigital-s...

5.3AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.2 views

PT-2026-70744

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A heap-based buffer overflow occurs in Windows DNS, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that happe...

6.7CVSS5.6AI score0.00316EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.4 views

PT-2026-70429

Name of the Vulnerable Software and Affected Versions Windows Accessibility Infrastructure ATBroker.exe affected versions not specified Description Improper link resolution before file access, also known as link following, in the Windows Accessibility Infrastructure ATBroker.exe allows an...

7.8CVSS5.2AI score0.0368EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.4 views

PT-2026-70445

Name of the Vulnerable Software and Affected Versions Windows USB Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows USB Driver, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruptio...

7.8CVSS5.6AI score0.00311EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.7 views

PT-2026-70486

Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A use-after-free condition in the Windows Telephony Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

7CVSS5.3AI score0.00246EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.5 views

PT-2026-70630

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

5.4CVSS4.8AI score0.00412EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.5 views

PT-2026-70617

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A stack-based buffer overflow allows an unauthorized attacker to execute arbitrary code locally and remotely, potentially affecting the entire system. A stack-based buffer overflow...

7.8CVSS6.4AI score0.0034EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.8 views

PT-2026-70541

Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description A heap-based buffer overflow occurs in the Windows SMB Server, which allows an authorized attacker to execute arbitrary code over a network and affect the system. A heap-based buff...

8.8CVSS6.2AI score0.00664EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.5 views

PT-2026-70427

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description Missing authentication for a critical function allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations A...

7.8CVSS5.3AI score0.00278EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.9 views

PT-2026-70358

Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /api/redirect OAuth callback endpoint embeds the user-supplied code query parameter directly into an inline script block without proper escaping. A crafted request to /api/redirect with a malicious code value can...

6.1CVSS5.7AI score0.00231EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.5 views

PT-2026-70687

Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description A buffer over-read in the Windows SMB Client allows an unauthorized attacker to disclose sensitive information over a network, which can subsequently affect the system. A buffer...

6.5CVSS5.4AI score0.00651EPSS
SaveExploits0References4
Rows per page
Query Builder