Lucene search
K

6687 matches found

Vulnrichment
Vulnrichment
added 2026/01/13 10:51 p.m.5 views

CVE-2022-50903 Wondershare MobileTrans 3.5.9 - 'ElevationService' Unquoted Service Path

Wondershare MobileTrans 3.5.9 contains an unquoted service path vulnerability in the ElevationService that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted path by placing malicious executables in specific filesystem locations that...

8.5CVSS6.6AI score0.00023EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/01/13 10:51 p.m.19 views

CVE-2022-50808 CoolerMaster MasterPlus 1.8.5 - 'MPService' Unquoted Service Path

CoolerMaster MasterPlus 1.8.5 contains an unquoted service path vulnerability in the MPService that allows local attackers to execute code with elevated system privileges. Attackers can drop a malicious executable in the service path and trigger code execution during service startup or system...

8.5CVSS0.00023EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/13 12:0 a.m.2 views

PT-2026-2365

CoolerMaster MasterPlus 1.8.5 contains an unquoted service path vulnerability in the MPService that allows local attackers to execute code with elevated system privileges. Attackers can drop a malicious executable in the service path and trigger code execution during service startup or system...

8.5CVSS7.6AI score0.00023EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/01/13 12:0 a.m.2 views

TeamSpeak 安全漏洞

TeamSpeak is a voice software from the American company TeamSpeak. A security vulnerability exists in TeamSpeak version 3.5.6, which stems from insecure file permissions and could lead to a local attacker replacing executable files...

8.5CVSS5.8AI score0.00022EPSS
Exploits1References4
OSV
OSV
added 2026/01/12 5:15 p.m.0 views

CVE-2025-46070

An issue in Automai BotManager v.25.2.0 allows a remote attacker to execute arbitrary code via the BotManager.exe component...

9.8CVSS6.2AI score
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/01/12 12:0 a.m.2 views

CVE-2025-46070

An issue in Automai BotManager v.25.2.0 allows a remote attacker to execute arbitrary code via the BotManager.exe component...

7.6AI score0.00483EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/12 12:0 a.m.18 views

CVE-2025-46070

An issue in Automai BotManager v.25.2.0 allows a remote attacker to execute arbitrary code via the BotManager.exe component...

0.00483EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/12 12:0 a.m.1 views

Automai BotManager 安全漏洞

Automai BotManager is an execution level management component in an automation platform from Automai, Inc. A security vulnerability exists in Automai BotManager version 25.2.0, which can be exploited by a remote attacker to execute arbitrary code via the BotManager.exe component...

9.8CVSS7.8AI score0.00483EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/12 12:0 a.m.2 views

PT-2026-2276

Name of the Vulnerable Software and Affected Versions Automai BotManager version 25.2.0 Description An issue allows a remote attacker to execute arbitrary code via the BotManager.exe component. Recommendations At the moment, there is no information about a newer version that contains a fix for th...

9.8CVSS7.5AI score0.00483EPSS
Exploits0References5
EUVD
EUVD
added 2026/01/12 12:0 a.m.1 views

EUVD-2026-1924

An issue in Automai BotManager v.25.2.0 allows a remote attacker to execute arbitrary code via the BotManager.exe component...

9.8CVSS7.5AI score0.00483EPSS
Exploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/10 1:0 p.m.5 views

Malicious code in oncecall (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 30fc3993415d365e03d500864542d91d6c6d87af8b6125765af3ba4a5ee059f6 Package silently downloads and executes an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

7.1AI score
Exploits0References3
OSV
OSV
added 2026/01/10 1:0 p.m.2 views

MAL-2026-189 Malicious code in oncecall (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 30fc3993415d365e03d500864542d91d6c6d87af8b6125765af3ba4a5ee059f6 Package silently downloads and executes an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

7AI score
Exploits0References3
Github Security Blog
Github Security Blog
added 2026/01/10 12:30 a.m.3 views

Salesforce Uni2TS has a Code Injection vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0...

9.8CVSS5.5AI score0.00096EPSS
Exploits0References6Affected Software1
EUVD
EUVD
added 2026/01/10 12:30 a.m.2 views

EUVD-2026-1841

Improper Control of Generation of Code 'Code Injection' vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0...

6.5AI score0.00096EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/10 12:0 a.m.3 views

LIEF 代码问题漏洞

LIEF is a cross-platform library from the individual developer Romain Thomas. It is used to parse, modify and abstract Elf, Pe and MachO formats. A code issue vulnerability exists in LIEF 0.17.1 and earlier versions, which stems from a null pointer dereference in the file src/ELF/Parser.tcc in th...

5.5CVSS4.4AI score0.00011EPSS
Exploits1References9
OSV
OSV
added 2026/01/09 10:16 p.m.0 views

CVE-2026-22584

Improper Control of Generation of Code 'Code Injection' vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0...

9.8CVSS5.8AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/09 10:10 p.m.1 views

CVE-2026-22584

Improper Control of Generation of Code 'Code Injection' vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0...

6.6AI score0.00096EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:41 p.m.6 views

CVE-2023-25718

In ConnectWise Control through 22.9.10032 formerly known as ScreenConnect, after an executable file is signed, additional instructions can be added without invalidating the signature, such as instructions that result in offering the end user a different attacker-controlled executable file. It is...

9.8CVSS9.4AI score0.00405EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:33 p.m.3 views

CVE-2023-31748

Insecure permissions in MobileTrans v4.0.11 allows attackers to escalate privileges to local admin via replacing the executable file...

7.8CVSS6.8AI score0.00325EPSS
Exploits4References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:17 p.m.3 views

CVE-2018-10190

A vulnerability in London Trust Media Private Internet Access PIA VPN Client v77 for Windows could allow an unauthenticated, local attacker to run executable files with elevated privileges. The vulnerability is due to insufficient implementation of access controls. The "Changelog" and "Help"...

7.8CVSS7.1AI score0.00122EPSS
Exploits0References1
Rows per page
Query Builder