Lucene search
K

6692 matches found

Vulnrichment
Vulnrichment
added 2025/09/23 1:11 p.m.1 views

CVE-2025-9844

Uncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows Replace Trusted Executable.This issue affects Salesforce CLI: before 2.106.6...

6.6AI score0.00068EPSS
Exploits0References1
CVE
CVE
added 2025/09/23 1:11 p.m.11 views

CVE-2025-9844

CVE-2025-9844 (Salesforce CLI on Windows) Affected software: Salesforce CLI (Salesforce) on Windows.Root cause: Uncontrolled Search Path Element that can lead to replacement of a trusted executable.Impact: Potential code execution through replacing a trusted executable; CVSS v3.1 base score 8.8 (...

8.8CVSS6.6AI score0.00068EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/23 12:0 a.m.2 views

PT-2025-39170

Name of the Vulnerable Software and Affected Versions Salesforce CLI versions prior to 2.106.6 Description A flaw exists in the Salesforce CLI on Windows that allows for malicious DLL injection due to an uncontrolled search path element. This can lead to the replacement of trusted executables...

8.8CVSS6.8AI score0.00068EPSS
Exploits0References9
The Hacker News
The Hacker News
added 2025/09/22 3:40 p.m.3 views

ComicForm and SectorJ149 Hackers Deploy Formbook Malware in Eurasian Cyberattacks

Organizations in Belarus, Kazakhstan, and Russia have emerged as the target of a phishing campaign undertaken by a previously undocumented hacking group called ComicForm since at least April 2025. The activity primarily targeted industrial, financial, tourism, biotechnology, research, and trade...

6.7AI score
Exploits0
Gitee
Gitee
added 2025/09/22 1:44 a.m.142 views

nightmare

This repository is an introduction to binary exploitation and reverse engineering course based on CTF challenges, called "Nightmare". It contains a large amount of content, with over 90 challenges, laid out in a linear fashion, and well-documented write-ups explaining how to go from being handed...

6.9AI score
Exploits0
Gitee
Gitee
added 2025/09/22 1:17 a.m.96 views

dostackbufferoverflowgood

This is a Windows executable file .exe named "dostackbufferoverflowgood.exe" that is intentionally vulnerable to a stack buffer overflow attack. The file is part of a repository on GitHub, which is a collection of resources for a talk on vulnerability exploitation. The file is a 32-bit executable...

8AI score
Exploits0
Positive Technologies
Positive Technologies
added 2025/09/22 12:0 a.m.2 views

PT-2025-39256

Name of the Vulnerable Software and Affected Versions NVIDIA CUDA Toolkit affected versions not specified Description The NVIDIA CUDA Toolkit contains an issue in the nvdisasm component. A user could trigger an out-of-bounds write by running nvdisasm on a specially crafted ELF file. Exploitation...

3.3CVSS6.6AI score0.00032EPSS
Exploits0References11
Positive Technologies
Positive Technologies
added 2025/09/22 12:0 a.m.2 views

PT-2025-39257

Name of the Vulnerable Software and Affected Versions NVIDIA CUDA Toolkit affected versions not specified Description The NVIDIA CUDA Toolkit contains an issue in the cuobjdump utility. An attacker can trigger a stack-based buffer overflow by causing a user to run cuobjdump on a specially crafted...

7.8CVSS7.8AI score0.00026EPSS
Exploits1References20
Positive Technologies
Positive Technologies
added 2025/09/22 12:0 a.m.2 views

PT-2025-39258

Name of the Vulnerable Software and Affected Versions NVIDIA CUDA Toolkit affected versions not specified Description The NVIDIA CUDA Toolkit contains an issue within the nvdisasm binary. A user can potentially trigger an out-of-bounds read by providing a specially crafted ELF file to nvdisasm...

3.3CVSS6.1AI score0.00032EPSS
Exploits0References10
OSV
OSV
added 2025/09/20 8:25 a.m.1 views

MAL-2025-191852 Malicious code in readosso (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 67ade73536cb4834ba05b33797c1cadcddbf7d90fc099bd6e53f94b9deec4f66 Package automatically starts a Discord bot waiting for instructions to download and start a remote executable --- Category: MALICIOUS - The campaign has clearl...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/20 8:25 a.m.4 views

Malicious code in readosso (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 67ade73536cb4834ba05b33797c1cadcddbf7d90fc099bd6e53f94b9deec4f66 Package automatically starts a Discord bot waiting for instructions to download and start a remote executable --- Category: MALICIOUS - The campaign has clearl...

7AI score
Exploits0References1
SUSE CVE
SUSE CVE
added 2025/09/18 11:38 p.m.2 views

SUSE CVE-2023-53397

In the Linux kernel, the following vulnerability has been resolved: modpost: fix off by one in isexecutablesection The comparison should be = to prevent an out of bounds array access...

5.5CVSS6.5AI score0.00021EPSS
Exploits0References16
OSV
OSV
added 2025/09/18 7:15 p.m.2 views

AZL-66131 CVE-2025-47906 affecting package golang for versions less than 1.24.6-1

If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath "", ".", and "..", can result in the binaries listed in the PATH being unexpectedly returned...

6.5CVSS6.8AI score0.00044EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2025/09/18 6:41 p.m.3 views

CVE-2025-47906

If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath "", ".", and "..", can result in the binaries listed in the PATH being unexpectedly returned...

6.5CVSS6.5AI score0.00044EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/09/18 5:29 p.m.2 views

CVE-2023-53397

In the Linux kernel, the following vulnerability has been resolved: modpost: fix off by one in isexecutablesection The comparison should be = to prevent an out of bounds array access...

7CVSS5.8AI score0.00021EPSS
Exploits0References4
NVD
NVD
added 2025/09/18 2:15 p.m.5 views

CVE-2023-53397

In the Linux kernel, the following vulnerability has been resolved: modpost: fix off by one in isexecutablesection The comparison should be = to prevent an out of bounds array access...

5.5CVSS0.00021EPSS
Exploits0References8
OSV
OSV
added 2025/09/18 2:15 p.m.1 views

DEBIAN-CVE-2023-53397

In the Linux kernel, the following vulnerability has been resolved: modpost: fix off by one in isexecutablesection The comparison should be = to prevent an out of bounds array access...

5.5CVSS5.3AI score0.00021EPSS
Exploits0References1
OSV
OSV
added 2025/09/18 2:15 p.m.0 views

UBUNTU-CVE-2023-53397

In the Linux kernel, the following vulnerability has been resolved: modpost: fix off by one in isexecutablesection The comparison should be = to prevent an out of bounds array access...

5.5CVSS5.8AI score0.00021EPSS
Exploits0References11
CVE
CVE
added 2025/09/18 1:33 p.m.23 views

CVE-2023-53397

Technical details about CVE-2023-53397 (Linux kernel modpost off-by-one in is_executable_section) are not publicly available in the provided connected documents. Monitor for updates from vendors/security advisories.

5.5CVSS6.1AI score0.00021EPSS
Exploits0References8Affected Software1
Debian CVE
Debian CVE
added 2025/09/18 1:33 p.m.7 views

CVE-2023-53397

In the Linux kernel, the following vulnerability has been resolved: modpost: fix off by one in isexecutablesection The comparison should be = to prevent an out of bounds array access...

5.5CVSS5.3AI score0.00021EPSS
Exploits0
Rows per page
Query Builder