Lucene search
+L

7544 matches found

Cvelist
Cvelist
•added 2026/01/13 10:51 p.m.•75 views

CVE-2022-50914 EaseUS Data Recovery - 'ensserver.exe' Unquoted Service Path

EaseUS Data Recovery 15.1.0.0 contains an unquoted service path vulnerability in the EaseUS UPDATE SERVICE executable. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges...

8.5CVSS0.00208EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/01/13 10:51 p.m.•8 views

CVE-2022-50903 Wondershare MobileTrans 3.5.9 - 'ElevationService' Unquoted Service Path

Wondershare MobileTrans 3.5.9 contains an unquoted service path vulnerability in the ElevationService that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted path by placing malicious executables in specific filesystem locations that...

8.5CVSS6.6AI score0.00262EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/01/13 10:51 p.m.•33 views

CVE-2022-50808 CoolerMaster MasterPlus 1.8.5 - 'MPService' Unquoted Service Path

CoolerMaster MasterPlus 1.8.5 contains an unquoted service path vulnerability in the MPService that allows local attackers to execute code with elevated system privileges. Attackers can drop a malicious executable in the service path and trigger code execution during service startup or system...

8.5CVSS0.00153EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/01/13 12:00 a.m.•15 views

TeamSpeak 安全漏洞

TeamSpeak is a voice software from the American company TeamSpeak. A security vulnerability exists in TeamSpeak version 3.5.6, which stems from insecure file permissions and could lead to a local attacker replacing executable files...

8.5CVSS5.8AI score0.00226EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•9 views

PT-2026-2365

CoolerMaster MasterPlus 1.8.5 contains an unquoted service path vulnerability in the MPService that allows local attackers to execute code with elevated system privileges. Attackers can drop a malicious executable in the service path and trigger code execution during service startup or system...

8.5CVSS7.6AI score0.00153EPSS
SaveExploits0References4
OSV
OSV
•added 2026/01/12 5:15 p.m.•12 views

CVE-2025-46070

An issue in Automai BotManager v.25.2.0 allows a remote attacker to execute arbitrary code via the BotManager.exe component...

9.8CVSS6.2AI score0.00512EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/12 12:00 a.m.•10 views

EUVD-2026-1924

An issue in Automai BotManager v.25.2.0 allows a remote attacker to execute arbitrary code via the BotManager.exe component...

9.8CVSS7.5AI score0.00512EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/01/12 12:00 a.m.•12 views

PT-2026-2276

Name of the Vulnerable Software and Affected Versions Automai BotManager version 25.2.0 Description An issue allows a remote attacker to execute arbitrary code via the BotManager.exe component. Recommendations At the moment, there is no information about a newer version that contains a fix for th...

9.8CVSS7.5AI score0.00512EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/01/12 12:00 a.m.•6 views

CVE-2025-46070

An issue in Automai BotManager v.25.2.0 allows a remote attacker to execute arbitrary code via the BotManager.exe component...

7.6AI score0.00512EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/01/12 12:00 a.m.•10 views

Automai BotManager 安全漏洞

Automai BotManager is an execution level management component in an automation platform from Automai, Inc. A security vulnerability exists in Automai BotManager version 25.2.0, which can be exploited by a remote attacker to execute arbitrary code via the BotManager.exe component...

9.8CVSS7.8AI score0.00512EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/01/12 12:00 a.m.•38 views

CVE-2025-46070

An issue in Automai BotManager v.25.2.0 allows a remote attacker to execute arbitrary code via the BotManager.exe component...

0.00512EPSS
SaveExploits0References2
OSV
OSV
•added 2026/01/10 1:00 p.m.•11 views

MAL-2026-189 Malicious code in oncecall (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 30fc3993415d365e03d500864542d91d6c6d87af8b6125765af3ba4a5ee059f6 Package silently downloads and executes an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

7AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/10 1:00 p.m.•12 views

Malicious code in oncecall (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 30fc3993415d365e03d500864542d91d6c6d87af8b6125765af3ba4a5ee059f6 Package silently downloads and executes an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

7.1AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/01/10 12:30 a.m.•15 views

Salesforce Uni2TS has a Code Injection vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0...

5.5AI score0.00426EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
•added 2026/01/10 12:30 a.m.•15 views

EUVD-2026-1841

Improper Control of Generation of Code 'Code Injection' vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0...

6.5AI score0.00426EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/01/10 12:00 a.m.•16 views

LIEF 代码问题漏洞

LIEF is a cross-platform library from the individual developer Romain Thomas. It is used to parse, modify and abstract Elf, Pe and MachO formats. A code issue vulnerability exists in LIEF 0.17.1 and earlier versions, which stems from a null pointer dereference in the file src/ELF/Parser.tcc in th...

5.5CVSS4.4AI score0.00269EPSS
SaveExploits1References9
OSV
OSV
•added 2026/01/09 10:16 p.m.•21 views

CVE-2026-22584

Improper Control of Generation of Code 'Code Injection' vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0...

9.8CVSS5.8AI score0.00426EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/09 10:10 p.m.•9 views

CVE-2026-22584

Improper Control of Generation of Code 'Code Injection' vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0...

6.6AI score0.00426EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:41 p.m.•21 views

CVE-2023-25718

In ConnectWise Control through 22.9.10032 formerly known as ScreenConnect, after an executable file is signed, additional instructions can be added without invalidating the signature, such as instructions that result in offering the end user a different attacker-controlled executable file. It is...

9.8CVSS9.4AI score0.00685EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:33 p.m.•15 views

CVE-2023-31748

Insecure permissions in MobileTrans v4.0.11 allows attackers to escalate privileges to local admin via replacing the executable file...

7.8CVSS6.8AI score0.00835EPSS
SaveExploits4References1
Rows per page
Query Builder