Lucene search
+L

7 matches found

KittySploit
KittySploit
•added 2026/07/31 7:47 a.m.•8 views

Fake Session Expired

Show a session-expired / re-auth modal to harvest credentials and optional MFA from kittysploit import import json import uuid class ModuleBrowserAuxiliary: info = "name": "Fake Session Expired", "description": "Show a session-expired / re-auth modal to harvest credentials and optional MFA",...

5.8AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/15 10:14 p.m.•25 views

CVE-2025-25215

An arbitrary free vulnerability exists in the cvclose functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted ControlVault API call can lead to an arbitrary free. An attacker can forge a fake session to trigger this vulnerability...

8.8CVSS7.2AI score0.02709EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/13 10:15 p.m.•40 views

CVE-2025-25215

An arbitrary free vulnerability exists in the cvclose functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted ControlVault API call can lead to an arbitrary free. An attacker can forge a fake session to trigger this vulnerability...

8.8CVSS0.02709EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/06/13 9:26 p.m.•20 views

CVE-2025-25215 Dell ControlVault3/ControlVault3 Plus cv_close arbitrary free vulnerability

An arbitrary free vulnerability exists in the cvclose functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted ControlVault API call can lead to an arbitrary free. An attacker can forge a fake session to trigger this vulnerability...

8.8CVSS8.1AI score0.02709EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/13 9:26 p.m.•49 views

CVE-2025-25215 Dell ControlVault3/ControlVault3 Plus cv_close arbitrary free vulnerability

An arbitrary free vulnerability exists in the cvclose functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted ControlVault API call can lead to an arbitrary free. An attacker can forge a fake session to trigger this vulnerability...

8.8CVSS0.02709EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/13 12:00 a.m.•10 views

CVE-2025-25215: Release of Invalid Pointer or Reference

An arbitrary free vulnerability exists in the cvclose functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted ControlVault API call can lead to an arbitrary free. An attacker can forge a fake session to trigger this vulnerability...

8.8CVSS8.2AI score0.02709EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/13 12:00 a.m.•25 views

PT-2025-25450 · Dell · Dell Controlvault3 +1

Name of the Vulnerable Software and Affected Versions: Dell ControlVault3 versions prior to 5.15.10.14 Dell ControlVault3 Plus versions prior to 6.2.26.36 Description: An arbitrary free vulnerability exists in the cv close functionality of Dell ControlVault3 and Dell ControlVault3 Plus. A special...

8.8CVSS8AI score0.02709EPSS
SaveExploits0References11
Rows per page
Query Builder