Lucene search
+L

149 matches found

BDU FSTEC
BDU FSTEC
•added 2026/10/03 11:55 p.m.•29 views

The vulnerability of the Enlogic SCADA system “ENTEK” virtual controller, related to the use of a dangerous method or function that allows a intruder to execute arbitrary code in the operating system.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the use of a dangerous method or function. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the operating system remotely...

9.9CVSS7.3AI score
SaveExploits0Affected Software1
Kitploit
Kitploit
•added 2026/10/03 11:19 a.m.•15 views

printix-CVE-2022-29551

CVE-2022-29551 Простая версия | Версия для печати Уязвимость "Exposed Dangerous Method or Function" в PrintixService.exe, в "Printix Secure Cloud Print Management" от Kofax Printix, версии 1.3.1156.0 и ниже позволяет локальному или удаленному злоумышленнику устанавливать вредоносные драйверы...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/02 11:03 p.m.•12 views

CVE-2025-53964

CVE-2025-53964 Оценка риска CVSS v3: AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L - 9.6/10 Описание GoldenDict 1.5.0 и 1.5.1 имеет открытый опасный метод, позволяющий читать и изменять файлы, когда пользователь добавляет подготовленный словарь, а затем ищет любой термин, включённый в этот словарь...

9.6CVSS6.2AI score0.00427EPSS
SaveExploits1References1
NVD
NVD
•added 2026/09/08 3:17 a.m.•9 views

CVE-2026-75810

Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing driver authentication and sending requests to trigger system management interrupts SMIs. Repeatedly triggering SMI may lead to a denial-of-service DoS condition.Refer to the '...

5.7CVSS0.00145EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•2 views

CVE-2026-86711: Exposed Dangerous Method or Function

electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sender validation. Renderer-side script execution can invoke openFileWithEditor and other functions with arbitrary arguments to execute system commands in the...

7.5CVSS6.2AI score0.00215EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/07 12:31 a.m.•19 views

EUVD-2026-54319

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...

9.1CVSS8.2AI score0.00932EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/07 12:16 a.m.•13 views

CVE-2026-68823

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...

9.1CVSS0.00932EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2026/08/06 2:00 p.m.•16 views

Azure Confidential Ledger Remote Code Execution Vulnerability

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...

9.1CVSS8.2AI score0.00932EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/03 12:00 a.m.•0 views

CVE-2026-45489: Exposed Dangerous Method or Function

Microsoft Edge Chromium-based Spoofing Vulnerability...

6.5CVSS5.7AI score0.00876EPSS
SaveExploits0References4
NVD
NVD
•added 2026/06/12 7:16 a.m.•35 views

CVE-2026-12060

Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...

6.9CVSS0.00313EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/06/12 6:43 a.m.•51 views

CVE-2026-12060 Hepta Platforms|Heptabase - Exposed Dangerous

Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...

6.9CVSS0.00313EPSS
SaveExploits0References2
CVE
CVE
•added 2026/06/12 6:43 a.m.•48 views

CVE-2026-12060

CVE-2026-12060 concerns Heptabase (Hepta Platforms) with an Exposed Dangerous Method or Function vulnerability. The description indicates unauthenticated remote attackers can leverage social engineering to persuade a victim to open or load a malicious webpage inside the Heptabase application, res...

6.9CVSS5.9AI score0.00313EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/12 12:00 a.m.•32 views

PT-2026-48831

Name of the Vulnerable Software and Affected Versions Heptabase affected versions not specified Description An exposed dangerous method or function allows unauthenticated remote attackers to use social engineering to trick a victim into loading a malicious webpage within the application. This can...

6.9CVSS5.8AI score0.00313EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
•added 2026/06/05 7:41 p.m.•31 views

CVE-2025-14713

An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials from the edge server...

7.5CVSS5.5AI score0.00475EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/06/04 12:00 a.m.•16 views

Exposed Dangerous Method or Function

Overview mistral is a Mistral Project Affected versions of this package are vulnerable to Exposed Dangerous Method or Function in the exposed API endpoints. An attacker can execute arbitrary code and potentially access sensitive service credentials by sending crafted requests to the affected...

9.9CVSS6.5AI score0.00915EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/27 12:00 a.m.•29 views

PT-2026-43586

An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials from the edge server...

7.5CVSS5.8AI score0.00475EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/27 12:00 a.m.•2 views

CVE-2025-14713: Exposed Dangerous Method or Function

An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials from the edge server...

7.5CVSS5.9AI score0.00475EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/05/19 7:57 p.m.•36 views

Exposed Dangerous Method or Function

Overview @penpot/mcp is a MCP server for Penpot integration Affected versions of this package are vulnerable to Exposed Dangerous Method or Function via MCP module's ReplServer that binds to all interfaces 0.0.0.0:4403 and exposes a /execute endpoint that runs arbitrary code with zero...

8.8CVSS6.2AI score0.00379EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/05/19 3:51 p.m.•13 views

Exposed Dangerous Method or Function

Overview @nuxt/webpack-builder is a Webpack bundler for Nuxt Affected versions of this package are vulnerable to Exposed Dangerous Method or Function when using webpack or rspack builder and navigating to a malicious website. An attacker can inject a script tag to request a classic script, which ...

5.9CVSS5.6AI score0.00368EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/05/13 3:31 p.m.•19 views

Exposed Dangerous Method or Function

Overview nautobot is a Source of truth and network automation platform. Affected versions of this package are vulnerable to Exposed Dangerous Method or Function via the currenthead field in the REST API. An attacker can manipulate the state of local repository clones or render them unusable by...

7.1CVSS5.9AI score0.00498EPSS
SaveExploits0References3
Rows per page
Query Builder