Lucene search
+L

1560 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/21 6:25 p.m.10 views

Malicious code in 1q847 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fe398aee3ca61989d1610e4b2edae183ef70d5fabc08709875ca9ef8725d82c5 Package contains two DLL libraries, one of them packed. Both are widely recognized as malware. The exact behavior is not known --- Category: MALICIOUS - The...

5.5AI score
SaveExploits0References4
OSV
OSV
added 2026/01/21 6:25 p.m.15 views

MAL-2026-443 Malicious code in 1q847 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fe398aee3ca61989d1610e4b2edae183ef70d5fabc08709875ca9ef8725d82c5 Package contains two DLL libraries, one of them packed. Both are widely recognized as malware. The exact behavior is not known --- Category: MALICIOUS - The...

5.5AI score
SaveExploits0References4
EUVD
EUVD
added 2026/01/21 6:2 p.m.9 views

EUVD-2026-3606

D-Link D-View 8 versions 2.0.1.107 and below contain an uncontrolled search path vulnerability in the installer. When executed with elevated privileges via UAC, the installer attempts to load version.dll from its execution directory, allowing DLL preloading. An attacker can supply a malicious...

8.4CVSS5.8AI score0.00141EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/01/21 6:2 p.m.2 views

CVE-2026-23755 D-Link D-View 8 Installer DLL Preloading via Uncontrolled Search Path

D-Link D-View 8 versions 2.0.1.107 and below contain an uncontrolled search path vulnerability in the installer. When executed with elevated privileges via UAC, the installer attempts to load version.dll from its execution directory, allowing DLL preloading. An attacker can supply a malicious...

8.4CVSS5.8AI score0.00141EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/01/21 7:19 a.m.5 views

CVE-2026-24016

The installer of ServerView Agents for Windows provided by Fsas Technologies Inc. may insecurely load Dynamic Link Libraries. Arbitrary code may be executed with the administrator privilege when the installer is executed...

8.4CVSS5.5AI score0.00143EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/21 7:19 a.m.7 views

CVE-2026-24016

The installer of ServerView Agents for Windows provided by Fsas Technologies Inc. may insecurely load Dynamic Link Libraries. Arbitrary code may be executed with the administrator privilege when the installer is executed...

8.4CVSS5.5AI score0.00143EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2026/01/21 7:19 a.m.7 views

EUVD-2026-3687

The installer of ServerView Agents for Windows provided by Fsas Technologies Inc. may insecurely load Dynamic Link Libraries. Arbitrary code may be executed with the administrator privilege when the installer is executed...

8.4CVSS5.5AI score0.00143EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/01/21 12:0 a.m.12 views

Fsas ServerView Agents code-related vulnerabilities

Fsas ServerView Agents is a server monitoring and management software developed by the Japanese company Fsas. Fsas ServerView Agents has a code vulnerability that stems from the installer potentially loading dynamic link libraries in an insecure manner, which may allow arbitrary code to be execut...

8.4CVSS7.3AI score0.00143EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/01/21 12:0 a.m.8 views

D-Link D-View 8 code issues and vulnerabilities

D-Link D-View 8 is a comprehensive network management software developed by D-Link Corporation. Versions of D-Link D-View 8 2.0.1.107 and earlier contained a code vulnerability. This vulnerability stemmed from an uncontrolled search path within the installer, which could lead to DLL preloading an...

8.4CVSS6.1AI score0.00141EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/21 12:0 a.m.11 views

PT-2026-3757

Name of the Vulnerable Software and Affected Versions ServerView Agents for Windows affected versions not specified Description The installer for ServerView Agents for Windows, provided by Fsas Technologies Inc., may load Dynamic Link Libraries insecurely. This could allow for the execution of...

8.4CVSS7.4AI score0.00143EPSS
SaveExploits0References8
OSV
OSV
added 2026/01/20 10:15 p.m.7 views

CVE-2025-58743

Use of a Broken or Risky Cryptographic Algorithm DES vulnerability in the Password class in C2SConnections.dll in Milner ImageDirector Capture on Windows allows Encryption Brute Forcing to obtain database credentials.This issue affects ImageDirector Capture: from 7.0.9.0 before 7.6.3.25808...

7.5CVSS5.8AI score
SaveExploits0References1
OSV
OSV
added 2026/01/20 6:16 p.m.5 views

UBUNTU-CVE-2025-33231

NVIDIA Nsight Systems for Windows contains a vulnerability in the application’s DLL loading mechanism where an attacker could cause an uncontrolled search path element by exploiting insecure DLL search paths. A successful exploit of this vulnerability might lead to code execution, escalation of...

6.7CVSS5.8AI score0.00156EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/01/16 3:28 p.m.9 views

CVE-2025-61973

A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store. A low-privilege user can replace a DLL file during the installation process, which may result in unintended elevation of privileges...

8.8CVSS6.9AI score0.00143EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/15 3:19 p.m.34 views

CVE-2025-61973

A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store. A low-privilege user can replace a DLL file during the installation process, which may result in unintended elevation of privileges...

8.8CVSS0.00143EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/15 3:19 p.m.8 views

CVE-2025-61973

A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store. A low-privilege user can replace a DLL file during the installation process, which may result in unintended elevation of privileges...

8.8CVSS5.5AI score0.00143EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2026/01/15 12:0 a.m.6 views

Epic Games Store security vulnerabilities

Epic Games Store is an online gaming platform operated by Epic Games, a company based in the United States. There is a security vulnerability in Epic Games Store, which stems from the ability for low-privilege users to replace DLL files during the installation process, potentially leading to an...

8.8CVSS5.8AI score0.00143EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.15 views

PT-2026-3020

A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store. A low-privilege user can replace a DLL file during the installation process, which may result in unintended elevation of privileges...

8.8CVSS6.9AI score0.00143EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/13 10:51 p.m.20 views

CVE-2020-36911

CVE-2020-36911 affects Covenant versions 0.1.3 through 0.5, described as a remote code execution vulnerability where an attacker can forge JWT tokens with administrative privileges and upload DLL payloads to execute arbitrary commands on the target system. The threat relies on forging tokens to g...

9.8CVSS8.5AI score0.10447EPSS
SaveExploits1References7Affected Software1
Cvelist
Cvelist
added 2026/01/13 10:51 p.m.138 views

CVE-2020-36911 Covenant 0.5 - Remote Code Execution (RCE)

Covenant 0.1.3 - 0.5 contains a remote code execution vulnerability that allows attackers to craft malicious JWT tokens with administrative privileges. Attackers can generate forged tokens with admin roles and upload custom DLL payloads to execute arbitrary commands on the target system...

9.8CVSS0.10447EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2026/01/13 12:0 a.m.10 views

PT-2026-2356

Name of the Vulnerable Software and Affected Versions Covenant versions 0.1.3 through 0.5 Description The software contains a remote code execution issue that allows attackers to create malicious JWT tokens with administrative privileges. Attackers can generate forged tokens with admin roles and...

9.8CVSS6.6AI score0.10447EPSS
SaveExploits1References10
Rows per page
Query Builder