Lucene search
+L

8108 matches found

Positive Technologies
Positive Technologies
•added 2025/09/23 12:00 a.m.•18 views

PT-2025-39170

Name of the Vulnerable Software and Affected Versions Salesforce CLI versions prior to 2.106.6 Description A flaw exists in the Salesforce CLI on Windows that allows for malicious DLL injection due to an uncontrolled search path element. This can lead to the replacement of trusted executables...

8.8CVSS6.8AI score0.00453EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/23 12:00 a.m.•7 views

CVE-2025-9844: Uncontrolled Search Path Element

Uncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows Replace Trusted Executable.This issue affects Salesforce CLI: before 2.106.6...

8.8CVSS8.4AI score0.00453EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2025/09/22 3:40 p.m.•30 views

ComicForm and SectorJ149 Hackers Deploy Formbook Malware in Eurasian Cyberattacks

Organizations in Belarus, Kazakhstan, and Russia have emerged as the target of a phishing campaign undertaken by a previously undocumented hacking group called ComicForm since at least April 2025. The activity primarily targeted industrial, financial, tourism, biotechnology, research, and trade...

6.7AI score
SaveExploits0
Gitee
Gitee
•added 2025/09/22 1:44 a.m.•188 views

nightmare

This repository is an introduction to binary exploitation and reverse engineering course based on CTF challenges, called "Nightmare". It contains a large amount of content, with over 90 challenges, laid out in a linear fashion, and well-documented write-ups explaining how to go from being handed...

6.9AI score
SaveExploits0
Gitee
Gitee
•added 2025/09/22 1:17 a.m.•129 views

dostackbufferoverflowgood

This is a Windows executable file .exe named "dostackbufferoverflowgood.exe" that is intentionally vulnerable to a stack buffer overflow attack. The file is part of a repository on GitHub, which is a collection of resources for a talk on vulnerability exploitation. The file is a 32-bit executable...

8AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/09/22 12:00 a.m.•12 views

PT-2025-39257

Name of the Vulnerable Software and Affected Versions NVIDIA CUDA Toolkit affected versions not specified Description The NVIDIA CUDA Toolkit contains an issue in the cuobjdump utility. An attacker can trigger a stack-based buffer overflow by causing a user to run cuobjdump on a specially crafted...

7.8CVSS6.5AI score0.00363EPSS
SaveExploits1References20
Positive Technologies
Positive Technologies
•added 2025/09/22 12:00 a.m.•16 views

PT-2025-39256

Name of the Vulnerable Software and Affected Versions NVIDIA CUDA Toolkit affected versions not specified Description The NVIDIA CUDA Toolkit contains an issue in the nvdisasm component. A user could trigger an out-of-bounds write by running nvdisasm on a specially crafted ELF file. Exploitation...

5.5CVSS5.5AI score0.00203EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
•added 2025/09/22 12:00 a.m.•10 views

PT-2025-39255

Name of the Vulnerable Software and Affected Versions NVIDIA CUDA Toolkit affected versions not specified Description The NVIDIA CUDA Toolkit contains an issue in the nvdisasm component. An attacker can trigger a heap-based buffer overflow by providing a malicious ELF file to nvdisasm. Successful...

7.8CVSS6.3AI score0.00245EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
•added 2025/09/22 12:00 a.m.•13 views

PT-2025-39258

Name of the Vulnerable Software and Affected Versions NVIDIA CUDA Toolkit affected versions not specified Description The NVIDIA CUDA Toolkit contains an issue within the nvdisasm binary. A user can potentially trigger an out-of-bounds read by providing a specially crafted ELF file to nvdisasm...

3.3CVSS5.5AI score0.00198EPSS
SaveExploits0References15
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/09/20 8:25 a.m.•12 views

Malicious code in readosso (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 67ade73536cb4834ba05b33797c1cadcddbf7d90fc099bd6e53f94b9deec4f66 Package automatically starts a Discord bot waiting for instructions to download and start a remote executable --- Category: MALICIOUS - The campaign has clearl...

7AI score
SaveExploits0References1
OSV
OSV
•added 2025/09/20 8:25 a.m.•9 views

MAL-2025-191852 Malicious code in readosso (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 67ade73536cb4834ba05b33797c1cadcddbf7d90fc099bd6e53f94b9deec4f66 Package automatically starts a Discord bot waiting for instructions to download and start a remote executable --- Category: MALICIOUS - The campaign has clearl...

6.9AI score
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/09/18 11:38 p.m.•14 views

SUSE CVE-2023-53397

In the Linux kernel, the following vulnerability has been resolved: modpost: fix off by one in isexecutablesection The comparison should be = to prevent an out of bounds array access...

5.5CVSS6AI score0.00149EPSS
SaveExploits0References16
OSV
OSV
•added 2025/09/18 7:15 p.m.•18 views

AZL-66131 CVE-2025-47906 affecting package golang for versions less than 1.24.6-1

If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath "", ".", and "..", can result in the binaries listed in the PATH being unexpectedly returned...

6.5CVSS6.5AI score0.0055EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2025/09/18 6:41 p.m.•16 views

CVE-2025-47906

If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath "", ".", and "..", can result in the binaries listed in the PATH being unexpectedly returned...

6.5CVSS6.5AI score0.0055EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/09/18 5:29 p.m.•25 views

CVE-2023-53397

In the Linux kernel, the following vulnerability has been resolved: modpost: fix off by one in isexecutablesection The comparison should be = to prevent an out of bounds array access...

7CVSS6.3AI score0.00149EPSS
SaveExploits0References4
NVD
NVD
•added 2025/09/18 2:15 p.m.•16 views

CVE-2023-53397

In the Linux kernel, the following vulnerability has been resolved: modpost: fix off by one in isexecutablesection The comparison should be = to prevent an out of bounds array access...

5.5CVSS0.00149EPSS
SaveExploits0References8
OSV
OSV
•added 2025/09/18 2:15 p.m.•8 views

DEBIAN-CVE-2023-53397

In the Linux kernel, the following vulnerability has been resolved: modpost: fix off by one in isexecutablesection The comparison should be = to prevent an out of bounds array access...

5.5CVSS6.3AI score0.00149EPSS
SaveExploits0References1
OSV
OSV
•added 2025/09/18 2:15 p.m.•15 views

UBUNTU-CVE-2023-53397

In the Linux kernel, the following vulnerability has been resolved: modpost: fix off by one in isexecutablesection The comparison should be = to prevent an out of bounds array access...

5.5CVSS6.3AI score0.00149EPSS
SaveExploits0References11
Cvelist
Cvelist
•added 2025/09/18 1:33 p.m.•35 views

CVE-2023-53397 modpost: fix off by one in is_executable_section()

In the Linux kernel, the following vulnerability has been resolved: modpost: fix off by one in isexecutablesection The comparison should be = to prevent an out of bounds array access...

0.00149EPSS
SaveExploits0References8
Debian CVE
Debian CVE
•added 2025/09/18 1:33 p.m.•25 views

CVE-2023-53397

In the Linux kernel, the following vulnerability has been resolved: modpost: fix off by one in isexecutablesection The comparison should be = to prevent an out of bounds array access...

5.5CVSS6.3AI score0.00149EPSS
SaveExploits0
Rows per page
Query Builder