Lucene search
+L

18121 matches found

Packet Storm News
Packet Storm News
โ€ขadded 2025/01/16 12:00 a.m.โ€ข12 views

Ivanti Connect Secure IFT TLS Stack Overflow / Remote Code Execution

This is an Ivanti Connect Secure IFT TLS stack overflow pre-authentication remote code execution proof of concept exploit. It is crippled by default...

9CVSS8AI score0.99981EPSS
SaveExploits15
zdt
zdt
โ€ขadded 2025/01/16 12:00 a.m.โ€ข332 views

Ivanti Buffer Overflow Proof of Concept Exploit

Proof of concept exploit for CVE-2025-0282, a remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA gateways. PoC for CVE-2025-0282, a remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure,...

9CVSS7.9AI score0.99981EPSS
SaveExploits15
GithubExploit
GithubExploit
โ€ขadded 2025/01/15 6:27 p.m.โ€ข276 views

Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure

CVE-2025-0282 Ivanti Connect Secure IFT TLS Stack Overflow pre...

9CVSS8AI score0.99981EPSS
SaveExploits15
osv_mal
osv_mal
โ€ขadded 2025/01/14 12:15 a.m.โ€ข18 views

MAL-2025-83 Malicious code in ebay-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d19ac42f1b12b95f81ed89c55872795f9fceb4ea498c981624eb1eb04828bcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
โ€ขadded 2025/01/14 12:15 a.m.โ€ข3 views

Malware in 000webhost-connect

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
โ€ขadded 2025/01/14 12:15 a.m.โ€ข3 views

Malware in uber-connect

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
โ€ขadded 2025/01/14 12:15 a.m.โ€ข3 views

Malware in ebay-connect

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
โ€ขadded 2025/01/14 12:15 a.m.โ€ข13 views

Malicious code in ebay-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d19ac42f1b12b95f81ed89c55872795f9fceb4ea498c981624eb1eb04828bcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
โ€ขadded 2025/01/14 12:15 a.m.โ€ข11 views

Malicious code in uber-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b42422c68e4256dc883e7d5e02350870cab3c0068d92985ffa4c4bc4ab43df8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
osv_mal
osv_mal
โ€ขadded 2025/01/14 12:15 a.m.โ€ข9 views

MAL-2025-107 Malicious code in uber-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b42422c68e4256dc883e7d5e02350870cab3c0068d92985ffa4c4bc4ab43df8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
โ€ขadded 2025/01/14 12:00 a.m.โ€ข33 views

App Connect Enterprise Certified Container Unlimited Resource Distribution DoS

The vulnerability of the App Connect Enterprise Certified Container management tool is related to the unlimited distribution of resources during the process of writing files to the local file system. Exploiting this vulnerability can allow a attacker to cause service failures...

5.5CVSS6.5AI score0.00161EPSS
SaveExploits0References3Affected Software1
Packet Storm News
Packet Storm News
โ€ขadded 2025/01/14 12:00 a.m.โ€ข21 views

Ivanti CVE-2025-0282 Checker

This script allows you to safely scan and test to see if you are vulnerable to CVE-2025-0282, a stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 that allows a...

9CVSS8.3AI score0.99981EPSS
SaveExploits15
BDU FSTEC
BDU FSTEC
โ€ขadded 2025/01/13 12:00 a.m.โ€ข35 views

OpenVPN Connect Privilege Escalation

The vulnerability of the OpenVPN Connect software is related to improper cross-border deletion of critical data. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

7.8CVSS8.9AI score0.00534EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
โ€ขadded 2025/01/13 12:00 a.m.โ€ข33 views

Ivanti Connect Secure Buffer Overflow Privilege Escalation

The vulnerability of Ivanti Connect Secure formerly Pulse Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA, which are tools for managing IT services, is related to a buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS7.7AI score0.17456EPSS
SaveExploits0References4Affected Software3
GithubExploit
GithubExploit
โ€ขadded 2025/01/12 11:58 a.m.โ€ข242 views

Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure

Storks: Remote Code Execution Vulnerability Exploitation Tool...

9CVSS8.9AI score0.99981EPSS
SaveExploits15
GithubExploit
GithubExploit
โ€ขadded 2025/01/11 2:06 a.m.โ€ข355 views

Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure

CVE-2025-0282-Ivanti-exploit CVE-2025-0282 is a critical vulne...

9CVSS8.2AI score0.99981EPSS
SaveExploits15
HackRead
HackRead
โ€ขadded 2025/01/10 9:21 p.m.โ€ข23 views

Ivanti Urges Patch for Flaws in Connect Secure, Policy Secure and ZTA Gateways

Ivanti has issued a critical security advisory addressing two vulnerabilities in its Connect Secure, Policy Secure, and ZTA Gateway products...

7.6AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
โ€ขadded 2025/01/10 8:20 a.m.โ€ข26 views

Security Bulletin: Vulnerability in XStream library affects App Connect Professional

Summary There is vulnerability in the XStream library used by App Connect Professional. App Connect Professional has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2024-47072 DESCRIPTION: XStream is vulnerable to a denial of service, caused by a stack-based buffer overflow in...

7.5CVSS7AI score0.02001EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
โ€ขadded 2025/01/10 8:18 a.m.โ€ข18 views

Security Bulletin: Due to the use of Eclipse Jetty, IBM App Connect Professional is vulnerable to bypass security restrictions

Summary Eclipse Jetty is used within IBM App Connect Professional Vulnerability Details CVEID:CVE-2024-6763 DESCRIPTION: Eclipse Jetty could allow a remote attacker to bypass security restrictions, caused by improper validation on the authority segment of a URI in the HttpURI class. By sending a...

6.5CVSS6.6AI score0.0103EPSS
SaveExploits1Affected Software1
Positive Technologies
Positive Technologies
โ€ขadded 2025/01/10 12:00 a.m.โ€ข38 views

PT-2025-3699 ยท Undefined ยท Undefined

๐Ÿ”— DarkWebInformer.com - Cyber Threat Intelligence ๐Ÿ“Œ CVE ID: GHSA-qcg2-98h8-485j ๐Ÿ”— Aliases: CVE-2024-8474 ๐Ÿ”น Details: OpenVPN Connect before version 3.5.0 can contain the configuration profile's clear-text private key which is logged in the application log, which an unauthorized actor can use to...

7.5CVSS7.9AI score0.00534EPSS
SaveExploits0References1
Rows per page
Query Builder