Lucene search
+L

377 matches found

Positive Technologies
Positive Technologies
•added 2026/02/03 12:00 a.m.•19 views

PT-2026-6464

Due to a Bash command validation flaw in parsing ZSH clobber syntax, it was possible to bypass directory restrictions and write files outside the current working directory without user permission prompts. Exploiting this required the user to use ZSH and the ability to add untrusted content into a...

7.7CVSS5.7AI score0.00522EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/01/29 3:26 a.m.•25 views

CVE-2022-40620

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading update packages through its auto-update mechanism. An attacker suitably positioned on the network could intercept the update request and deliver a...

7.7CVSS6.4AI score0.00305EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/28 12:00 a.m.•1 views

CVE-2022-40620: Improper Certificate Validation

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading update packages through its auto-update mechanism. An attacker suitably positioned on the network could intercept the update request and deliver a...

7.7CVSS6.3AI score0.00305EPSS
SaveExploits1References1
OSV
OSV
•added 2026/01/21 1:00 a.m.•40 views

GHSA-JH7P-QR78-84P7 Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation

A vulnerability in Claude Code's project-load flow allowed malicious repositories to exfiltrate data including Anthropic API keys before users confirmed trust. If a user started Claude Code in an attacker-controller repository, and the repository included a settings file that set ANTHROPICBASEURL...

5.3CVSS6AI score0.27868EPSS
SaveExploits2References3
EUVD
EUVD
•added 2025/10/29 9:30 p.m.•20 views

EUVD-2025-36719

memoQ 10.1.13.ef1b2b52aae and earlier contains an unquoted service path vulnerability in the memoQ Auto Update Service memoQauhlp101. The affected service is installed with a path containing spaces and without surrounding quotes. This misconfiguration allows local users to escalate privileges to...

6.1AI score0.00141EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/10/29 12:00 a.m.•15 views

PT-2025-44347

Name of the Vulnerable Software and Affected Versions memoQ versions 10.1.13.ef1b2b52aae and earlier Description memoQ versions 10.1.13.ef1b2b52aae and earlier contain an unquoted service path vulnerability in the memoQ Auto Update Service memoQauhlp101. The service is installed with a path...

6.7CVSS6.4AI score0.00141EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2025/10/29 12:00 a.m.•19 views

CVE-2025-60320

memoQ 10.1.13.ef1b2b52aae and earlier contains an unquoted service path vulnerability in the memoQ Auto Update Service memoQauhlp101. The affected service is installed with a path containing spaces and without surrounding quotes. This misconfiguration allows local users to escalate privileges to...

0.00141EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/29 12:00 a.m.•33 views

CVE-2025-60320

memoQ versions 10.1.13.ef1b2b52aae and earlier are vulnerable to an unquoted service path vulnerability in the memoQ Auto Update Service (memoQauhlp101). The service is installed with a path containing spaces but lacks surrounding quotes, a misconfiguration that allows local users to escalate pri...

6.7CVSS5.9AI score0.00141EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/29 12:00 a.m.•3 views

CVE-2025-60320: Unquoted Search Path or Element

memoQ 10.1.13.ef1b2b52aae and earlier contains an unquoted service path vulnerability in the memoQ Auto Update Service memoQauhlp101. The affected service is installed with a path containing spaces and without surrounding quotes. This misconfiguration allows local users to escalate privileges to...

6.7CVSS5.9AI score0.00141EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2019-2739

Malware in sbrugna...

10CVSS8.2AI score0.01858EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2021-16067

Malware in sbrugna...

6.5CVSS5.5AI score0.02093EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2015-3654

Malware in sbrugna...

5.4CVSS5.6AI score0.00792EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•9 views

EUVD-2018-13509

Malware in sbrugna...

8.8CVSS7.8AI score0.00649EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2017-15502

Malware in sbrugna...

8.1CVSS7.5AI score0.00995EPSS
SaveExploits3References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-1999-1507

Malware in sbrugna...

5CVSS6.4AI score0.01096EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2019-7826

Malware in sbrugna...

5.5CVSS5.4AI score0.00294EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2010-4551

Malware in sbrugna...

5CVSS6.1AI score0.02262EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2013-5408

Malware in sbrugna...

7.1CVSS6.4AI score0.01173EPSS
SaveExploits0References3
Packet Storm News
Packet Storm News
•added 2025/10/07 12:00 a.m.•14 views

Clam AntiVirus Toolkit 1.5.0

Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command-line scanner, and a tool for automatic updating via Internet. The programs ar...

7.1AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-28585

Malicious code in bioql PyPI...

7.1CVSS6.3AI score0.00478EPSS
SaveExploits0References2
Rows per page
Query Builder