Lucene search
+L

276240 matches found

Github Security Blog
Github Security Blog
•added 2026/10/27 4:23 p.m.•13 views

Malware in adyen-web-v6

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.9AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/10/27 4:17 p.m.•6 views

Malware in buttoncontent

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.9AI score
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/10/27 4:17 p.m.•5 views

CVE-2026-92375

An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute scripts as SYSTEM/root...

7.8CVSS0.001EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/27 4:17 p.m.•5 views

CVE-2026-92372

An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited ...

8.8CVSS0.00426EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/27 4:17 p.m.•4 views

CVE-2026-111583

Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can pla...

7.3CVSS0.00193EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/27 4:17 p.m.•4 views

CVE-2026-111585

An integer overflow in the remote-control screen processing component of TeamViewer clients Full Client, Portable and Remote Control App prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the...

8.8CVSS0.00288EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/27 3:52 p.m.•4 views

EUVD-2026-111149

An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows a remote, authenticated attacker with at least read-only Device Monitor privileges and access to the management CLI to create, truncate, or overwrite arbitrary files and modify kernel...

7.2CVSS6.2AI score0.00364EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/27 3:51 p.m.•26 views

cve-2023-20198-poc-cisco

CVE-2023-20198-poc CVE-2023-20198 is a critical vulnerability in the Cisco IOS XE software Web UI feature that allows unauthenticated remote attackers to create accounts with privilege level 15 on affected systems, thereby gaining full control of the device. The vulnerability primarily stems from...

10CVSS8.8AI score0.99613EPSS
SaveExploits30
Github Security Blog
Github Security Blog
•added 2026/10/27 3:49 p.m.•4 views

Malware in @flexmr/utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.9AI score
SaveExploits0References1Affected Software1
Kitploit
Kitploit
•added 2026/10/27 3:32 p.m.•29 views

CVE-2021-42562

CVE-2021-42562: Improper Access Control in MITRE Caldera Caldera versions =2.8.1 does not properly segregate user privileges, resulting in non-admin users having access to read and modify configuration or other components which should only be accessible by admin users. Vendor Disclosure: The...

8.8CVSS8.1AI score0.01957EPSS
SaveExploits4References2
Kitploit
Kitploit
•added 2026/10/27 3:21 p.m.•29 views

Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914

Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914 Azure Networking Privilege Escalation Exploit CVE‑2025‑54914 September 4, 2025 By Mark Mallia 1. Executive Summary On September 4, 2025 Microsoft’s Azure Networking services received a critical security advisory that documents a...

10CVSS8.5AI score0.02508EPSS
SaveExploits2
Cvelist
Cvelist
•added 2026/10/27 3:19 p.m.•24 views

CVE-2026-111585 Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow

An integer overflow in the remote-control screen processing component of TeamViewer clients Full Client, Portable and Remote Control App prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the...

8.8CVSS0.00288EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/27 3:19 p.m.•11 views

CVE-2026-111585

TeamViewer clients (Full Client, Portable, and Remote Control App) prior to version 15.83 are vulnerable to an integer overflow within the remote-control screen processing component. This flaw can lead to a heap-based buffer overflow , potentially allowing a malicious remote host to cause a denia...

8.8CVSS6AI score0.00288EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/27 3:19 p.m.•3 views

EUVD-2026-111081

An integer overflow in the remote-control screen processing component of TeamViewer clients Full Client, Portable and Remote Control App prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the...

8.8CVSS6.1AI score0.00288EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/27 3:15 p.m.•5 views

EUVD-2026-111079

Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can pla...

7.3CVSS6.5AI score0.00193EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/27 3:15 p.m.•5 views

CVE-2026-111583

The TeamViewer Full Client and Host for Windows prior to version 15.82 is vulnerable to Local Privilege Escalation (CWE-269) due to improper access control in the installer staging directory. During the installation of Advanced Asset Management , a local authenticated user with low privileges can...

7.3CVSS6.5AI score0.00193EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2026/10/27 3:12 p.m.•4 views

Malware in paychex-pdftron

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.9AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/10/27 3:12 p.m.•3 views

Malware in sc-announcer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.9AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/10/27 3:12 p.m.•5 views

Malware in sc-hydrate-carousel-price

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.9AI score
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/10/27 3:11 p.m.•5 views

EUVD-2026-111077

Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a...

7.8CVSS6.6AI score0.00109EPSS
SaveExploits0References1
Rows per page
Query Builder