Lucene search
K

31208 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:1 a.m.5 views

CVE-2023-25095

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

7.2CVSS8AI score0.01318EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:50 a.m.10 views

CVE-2021-31516

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vector 35 Binary Ninja 2.3.2660 Build ID 88f343c3. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla...

7.8CVSS6.8AI score0.02384EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/09 12:0 a.m.2 views

Trend Micro Apex Central MsgReceiver Detection

Binary data trendmicroapexcentralmsgreceiverdetect.nbin...

7AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/09 12:0 a.m.3 views

IBM QRadar Installed

Binary data ibmqradarnixinstalled.nbin...

7AI score
Exploits0References1
Veracode
Veracode
added 2026/01/08 3:58 a.m.6 views

Use Of Hard-coded Cryptographic Key

github.com/neuvector/neuvector is vulnerable to use of hard-coded cryptographic key. The vulnerability is due to a cryptographic key being hard-coded and embedded in the source code at compilation time, which allows an attacker with access to the code or binaries to recover the key and decrypt...

6.5CVSS7AI score0.00221EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/01/08 12:0 a.m.3 views

Microsoft Entra Cloud Sync Installed (Windows)

Binary data microsoftentracloudsyncwininstalled.nbin...

7AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:49 a.m.6 views

CVE-2022-27963

Xftp 7.0.0088p and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file...

6.9CVSS7.8AI score0.00421EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:48 a.m.4 views

CVE-2022-27964

Xmanager v7.0.0096 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file...

6.9CVSS7.8AI score0.00454EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2026/01/05 12:0 a.m.3 views

Nginx Sites Enumeration

Binary data nginxenumsites.nbin...

7AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/01/05 12:0 a.m.3 views

IGEL OS Detection

Binary data igelosdetect.nbin...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/04 6:49 p.m.5 views

Malicious code in aoohttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9d3438b2d065c0535b5ac80ce789201be4f8095642d0f10a20a7da13d46152f8 Obfuscated code downloads an encrypted binary blob, which is malware finally starting cryptomining. After starting the malware, the Python package uninstall...

7.2AI score
Exploits0References4
OSV
OSV
added 2026/01/04 6:49 p.m.11 views

MAL-2026-37 Malicious code in aoohttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9d3438b2d065c0535b5ac80ce789201be4f8095642d0f10a20a7da13d46152f8 Obfuscated code downloads an encrypted binary blob, which is malware finally starting cryptomining. After starting the malware, the Python package uninstall...

7.2AI score
Exploits0References4
OSV
OSV
added 2026/01/04 6:49 p.m.14 views

MAL-2026-38 Malicious code in auohttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f4b76a407d91e23cb990d6ed08e3c0e81898f2b97d690db76b4e3b547fda5fab Obfuscated code downloads an encrypted binary blob, which is malware finally starting cryptomining. After starting the malware, the Python package uninstall...

7.2AI score
Exploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/04 6:48 p.m.5 views

Malicious code in aiohtto (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9338a4f3f167cf0ba279696ac9ae9bae26219391e2a87a805cc8bb92b4cddd6e Obfuscated code downloads an encrypted binary blob, which is malware finally starting cryptomining. After starting the malware, the Python package uninstall...

7.2AI score
Exploits0References4
OSV
OSV
added 2026/01/04 6:48 p.m.15 views

MAL-2026-36 Malicious code in aiohtto (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9338a4f3f167cf0ba279696ac9ae9bae26219391e2a87a805cc8bb92b4cddd6e Obfuscated code downloads an encrypted binary blob, which is malware finally starting cryptomining. After starting the malware, the Python package uninstall...

7.2AI score
Exploits0References4
Packet Storm News
Packet Storm News
added 2026/01/04 12:0 a.m.3 views

Exposing Hidden Interfaces: LLM-Guided Type Inference for Reverse Engineering MacOS Private Frameworks

Private macOS frameworks underpin critical services and daemons but remain undocumented and distributed only as stripped binaries, complicating security analysis. We present MOTIF, an agentic framework that integrates tool-augmented analysis with a finetuned large language model specialized for...

6.8AI score
Exploits0
GithubExploit
GithubExploit
added 2026/01/02 5:21 p.m.195 views

Exploit for Deserialization of Untrusted Data in Microsoft

CVE-2025-59287 ⚠ This tool is created solely for educatio...

9.8CVSS8.6AI score0.99962EPSS
Exploits24
SUSE CVE
SUSE CVE
added 2026/01/01 12:24 a.m.3 views

SUSE CVE-2025-68131

cbor2 provides encoding and decoding for the Concise Binary Object Representation CBOR serialization format. Starting in version 3.0.0 and prior to version 5.8.0, whhen a CBORDecoder instance is reused across multiple decode operations, values marked with the shareable tag 28 persist in memory an...

5.5CVSS6.8AI score0.00423EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.5 views

PT-2026-20429

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock situation can occur in the Linux kernel related to tracing and System Call Interface SBI Extended Call ECALL functionality on RISC-V systems. Specifically, if functions within...

5.5CVSS6.1AI score0.0008EPSS
Exploits0References20
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.3 views

PT-2026-28661

Name of the Vulnerable Software and Affected Versions polkit affected versions not specified Description A flaw exists in polkit where a local user can trigger a denial of service. This occurs by providing a specially crafted, excessively long input to the polkit-agent-helper-1 setuid binary via...

5.5CVSS5.9AI score0.00131EPSS
Exploits0References32
Rows per page
Query Builder