Lucene search
+L

14230 matches found

GithubExploit
GithubExploit
added 2025/07/13 10:43 a.m.559 views

Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure

CVE-2025-22457: Critical Ivanti Connect Secure Vulnerability ⚡...

9.8CVSS7.6AI score0.99981EPSS
SaveExploits8
RedhatCVE
RedhatCVE
added 2025/07/12 11:22 p.m.19 views

CVE-2025-31267

An authentication issue was addressed with improved state management. This issue is fixed in App Store Connect 3.0. An attacker with physical access to an unlocked device may be able to view sensitive user information...

4.6CVSS5.2AI score0.00186EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/11 4:15 p.m.14 views

CVE-2025-6549

An Incorrect Authorization vulnerability in the web server of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to reach the Juniper Web Device Manager J-Web. When Juniper Secure connect JSC is enabled on specific interfaces, or multiple interfaces are...

6.9CVSS5.8AI score0.00208EPSS
SaveExploits0References1
SUSE Linux
SUSE Linux
added 2025/07/11 11:13 a.m.7 views

Security update for docker

This update for docker fixes the following issues: Update to Docker 28.2.2-ce bsc1243833, bsc1242114: CVE-2025-0495: Fixed credential leakage to telemetry endpoints when credentials allowed to be set as attribute values in cache-to/cache-from configuration.bsc1239765 CVE-2025-22872:...

6.5CVSS6.4AI score0.00535EPSS
SaveExploits0References20
Tenable Nessus
Tenable Nessus
added 2025/07/11 12:00 a.m.15 views

Adobe Connect <= 24 Arbitrary Code Execution Vulnerability (APSB25-61)

The version of Adobe Connect installed on the remote host is prior to 25.1. It is, therefore, affected by a vulnerability as referenced in the apsb25-61 advisory. - Adobe Connect versions 24.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitra...

9.6CVSS6.4AI score0.00992EPSS
SaveExploits0References2
NVD
NVD
added 2025/07/10 11:15 p.m.12 views

CVE-2025-31267

An authentication issue was addressed with improved state management. This issue is fixed in App Store Connect 3.0. An attacker with physical access to an unlocked device may be able to view sensitive user information...

4.6CVSS0.00186EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/10 11:15 p.m.11 views

CVE-2025-31267

An authentication issue was addressed with improved state management. This issue is fixed in App Store Connect 3.0. An attacker with physical access to an unlocked device may be able to view sensitive user information...

4.6CVSS5.8AI score0.00186EPSS
SaveExploits0References1
CVE
CVE
added 2025/07/10 10:23 p.m.44 views

CVE-2025-31267

CVE-2025-31267 : Apple App Store Connect had an authentication issue caused by problematic state management. It could allow an attacker with physical access to an unlocked device to view sensitive user information. The issue is fixed in App Store Connect 3.0. Affected version: App Store Connect p...

4.6CVSS5.8AI score0.00186EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/07/10 10:23 p.m.19 views

CVE-2025-31267

An authentication issue was addressed with improved state management. This issue is fixed in App Store Connect 3.0. An attacker with physical access to an unlocked device may be able to view sensitive user information...

0.00186EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/07/10 10:23 p.m.7 views

CVE-2025-31267

An authentication issue was addressed with improved state management. This issue is fixed in App Store Connect 3.0. An attacker with physical access to an unlocked device may be able to view sensitive user information...

5.8AI score0.00186EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/10 10:13 p.m.8 views

CVE-2025-27203

Adobe Connect versions 24.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does require user interaction and scope is changed...

9.6CVSS7.9AI score0.00992EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/10 4:28 p.m.14 views

CVE-2025-5464

Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 allows a local authenticated attacker to obtain that information...

6.5CVSS6.3AI score0.00312EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/10 4:28 p.m.13 views

CVE-2025-0293

CLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to write to a protected configuration file on disk...

6.6CVSS7.2AI score0.00417EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/10 4:28 p.m.13 views

CVE-2025-0292

SSRF in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to access internal network services...

5.5CVSS6.9AI score0.00576EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/10 3:27 p.m.24 views

CVE-2025-5450

Improper access control in the certificate management component of Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated admin with read-only rights to modify settings that should be restricted...

6.3CVSS6.9AI score0.0026EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/10 3:27 p.m.22 views

CVE-2025-5463

Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a local authenticated attacker to obtain that information...

5.5CVSS6.3AI score0.00312EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/10 3:27 p.m.22 views

CVE-2025-5451

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to trigger a denial of service...

4.9CVSS7.4AI score0.00682EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/07/10 12:00 a.m.9 views

PT-2025-29173 · Apple · App Store Connect

Name of the Vulnerable Software and Affected Versions: App Store Connect versions prior to 3.0 Description: An authentication issue existed due to improved state management. An attacker with physical access to an unlocked device may be able to view sensitive user information. Recommendations:...

4.6CVSS6AI score0.00186EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2025/07/10 12:00 a.m.12 views

The vulnerability of the software for remote IT support and monitoring of Dell Secure Connect Gateway (SCG) arises from the lack of proper input validation when requesting external server authentication. This allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of software for remote IT support and monitoring of Dell Secure Connect Gateway SCG lies in the lack of proper input validation when requesting external server authentication. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected informatio...

5.5CVSS5.5AI score0.00201EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2025/07/10 12:00 a.m.13 views

Apple App Store Connect 安全漏洞

Apple App Store Connect is an Apple platform for developers to manage and distribute applications. A security vulnerability exists in Apple App Store Connect version 3.0, which stems from an authentication issue that could lead to the disclosure of sensitive user information...

4.6CVSS6.3AI score0.00186EPSS
SaveExploits0References3
Rows per page
Query Builder