Lucene search
K

173 matches found

CNNVD
CNNVD
added 2026/04/28 12:0 a.m.5 views

ERCOM Cryptobox 安全漏洞

ERCOM Cryptobox is a file encryption and security storage tool developed by the French company ERCOM. ERCOM Cryptobox has a security vulnerability that stems from issues with the account locking mechanism. This vulnerability could allow legitimate users to prevent other users from logging in by...

7.1CVSS5.8AI score0.00057EPSS
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/03/10 5:57 p.m.3 views

Malicious code in synapseml-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4ddf16f7a9941918ea74e21a3742e8f03d7b5c6f5720d7d031d2c69f8d6495c3 Installing the package starts encrypting the user's file and demanding ransom for the decryption. --- Category: MALICIOUS - The campaign has clearly malicious...

5.8AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/10 10:24 a.m.0 views

CVE-2026-22614

The encryption mechanism used in Eaton's EasySoft project file was insecure and susceptible to brute force attacks, an attacker with access to this file and the local host machine could potentially read the sensitive information stored and tamper with the project file. This security issue has bee...

6.1CVSS5.8AI score0.0001EPSS
Exploits0References2
OSV
OSV
added 2026/03/10 8:29 a.m.0 views

MAL-2026-1319 Malicious code in alinet-w (npm)

Package is malware due to ransomware-like behavior: file encryption, key exfiltration, terminal locking, ransom note, and persistence attempts. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c18fd7e3ffa16f370fa25fcc489c381958d8200bf01cd8bf3627c91301eb397 The...

5.7AI score
Exploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/03/10 8:29 a.m.3 views

Malicious code in alinet-w (npm)

Package is malware due to ransomware-like behavior: file encryption, key exfiltration, terminal locking, ransom note, and persistence attempts. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c18fd7e3ffa16f370fa25fcc489c381958d8200bf01cd8bf3627c91301eb397 The...

5.7AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/03/10 12:0 a.m.1 views

PT-2026-24202

The encryption mechanism used in Eaton's EasySoft project file was insecure and susceptible to brute force attacks, an attacker with access to this file and the local host machine could potentially read the sensitive information stored and tamper with the project file. This security issue has bee...

6.1CVSS5.8AI score0.0001EPSS
Exploits0References1
OSV
OSV
added 2026/03/04 4:16 p.m.0 views

CVE-2025-59785

Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption. This vulnerability can only be exploited after authenticating with administrator privileges...

7.2CVSS5.8AI score0.00055EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/04 12:0 a.m.2 views

PT-2026-22932

Name of the Vulnerable Software and Affected Versions 2N Access Commander versions prior to 3.4.3 Description A flaw exists in the validation of an API endpoint in 2N Access Commander that could allow an attacker to bypass the password policy for backup file encryption. Successful exploitation...

7.2CVSS5.9AI score0.00055EPSS
Exploits0References7
CNNVD
CNNVD
added 2026/03/04 12:0 a.m.4 views

2N Access Commander 安全漏洞

2N Access Commander is an access control solution provided by 2N Corporation. Versions of 2N Access Commander prior to 3.4.2 contained security vulnerabilities. These vulnerabilities were due to improper validation of API endpoints, which could allow bypassing password policies that rely on backu...

7.2CVSS5.8AI score0.00055EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2026/01/21 7:51 a.m.122 views

Exploit for Out-of-bounds Write in Msi Afterburner

VortexCry-Ransomware VortexCry is an advanced ransomware that...

7.8CVSS5.5AI score0.77333EPSS
Exploits5
OSV
OSV
added 2025/12/18 9:15 p.m.3 views

CVE-2025-62002

BullWall Ransomware Containment considers the number of files modified to trigger detection. An authenticated attacker could encrypt a single possibly large file without triggering detection if thresholds are configured to require multiple file changes. The number of files to trigger detection ca...

8.1CVSS5.8AI score0.00016EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2025/12/18 8:33 p.m.2 views

CVE-2025-62002

BullWall Ransomware Containment considers the number of files modified to trigger detection. An authenticated attacker could encrypt a single possibly large file without triggering detection if thresholds are configured to require multiple file changes. The number of files to trigger detection ca...

8.1CVSS5.5AI score0.00016EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/18 8:33 p.m.1 views

CVE-2025-62002 BullWall Ransomware Containment file count detection bypass

BullWall Ransomware Containment considers the number of files modified to trigger detection. An authenticated attacker could encrypt a single possibly large file without triggering detection if thresholds are configured to require multiple file changes. The number of files to trigger detection ca...

5.3CVSS6.2AI score0.00016EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/18 8:33 p.m.19 views

CVE-2025-62002 BullWall Ransomware Containment file count detection bypass

BullWall Ransomware Containment considers the number of files modified to trigger detection. An authenticated attacker could encrypt a single possibly large file without triggering detection if thresholds are configured to require multiple file changes. The number of files to trigger detection ca...

5.3CVSS0.00016EPSS
Exploits0References2
CVE
CVE
added 2025/12/18 8:33 p.m.5 views

CVE-2025-62002

BullWall Ransomware Containment has a file-modification-based detection mechanism that can be bypassed. An authenticated attacker could encrypt a single large file without triggering alerts when thresholds are configured to require multiple file changes. Affected versions include 4.6.0.0, 4.6.0.6...

8.1CVSS6.2AI score0.00016EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2025/12/09 1:16 a.m.1 views

CVE-2023-53810

In the Linux kernel, the following vulnerability has been resolved: blk-mq: release crypto keyslot before reporting I/O complete Once all I/O using a blkcryptokey has completed, filesystems can call blkcryptoevictkey. However, the block layer currently doesn't call blkcryptoputkeyslot until the...

0.0004EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-2704

Malware in sbrugna...

6.5CVSS6.5AI score0.00214EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2006-3453

Malware in sbrugna...

2.1CVSS6.4AI score0.00054EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2025-13215

Malicious code in bioql PyPI...

5.6AI score0.00065EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-25346

Malicious code in bioql PyPI...

4.1CVSS5AI score0.0002EPSS
Exploits0References1
Rows per page
Query Builder