Lucene search
K

5043 matches found

CNNVD
CNNVD
added 2025/08/28 12:0 a.m.1 views

Acronis Cyber Protect Cloud Agent 安全漏洞

Acronis Cyber Protect Cloud Agent is a cloud agent from Acronis Switzerland. A security vulnerability exists in versions prior to Acronis Cyber Protect Cloud Agent build 40734, which stems from insecure folder permissions that could lead to local elevation of privileges...

7.8CVSS7.4AI score0.00113EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/08/28 12:0 a.m.2 views

PT-2025-35090

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent Windows versions prior to build 40734 Description: The issue involves local privilege escalation due to insecure folder permissions. Recommendations: Update Acronis Cyber Protect Cloud Agent Windows to build...

7.8CVSS7.5AI score0.00113EPSS
Exploits0References4
GithubExploit
GithubExploit
added 2025/08/27 6:32 a.m.152 views

Exploit for Path Traversal in Rarlab Winrar

CVE-2025-8088 WinRAR Exploit 🔓 A proof-of-concept exploit for...

8.8CVSS7.9AI score0.81348EPSS
Exploits34
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2020-16094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In imapscantreerecursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories...

7.5CVSS7.2AI score0.01781EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-29488

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SABnzbd is an open source binary newsreader. A vulnerability was discovered in SABnzbd that could trick the filesystem.renamer function into writing downloaded...

5.3CVSS6AI score0.00919EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2025/08/26 1:43 a.m.447 views

Exploit for Path Traversal in Rarlab Winrar

CVE-2025-8088 WinRAR Startup Folder Exploit Proof of Concept...

8.8CVSS7.5AI score0.81348EPSS
Exploits34
Tenable Nessus
Tenable Nessus
added 2025/08/26 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2023-31493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RCE Remote Code Execution exists in ZoneMinder through 1.36.33 as an attacker can create a new .php log file in language folder, while executing a crafted paylo...

6.6CVSS6AI score0.00732EPSS
Exploits1References3
NVD
NVD
added 2025/08/25 3:15 a.m.7 views

CVE-2025-9404

A vulnerability was identified in Scada-LTS up to 2.7.8.1. The affected element is an unknown function of the file /pointHierarchySLTS of the component Folder Handler. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

5.4CVSS0.0026EPSS
Exploits1References5
OSV
OSV
added 2025/08/25 3:15 a.m.3 views

CVE-2025-9404

A vulnerability was identified in Scada-LTS up to 2.7.8.1. The affected element is an unknown function of the file /pointHierarchySLTS of the component Folder Handler. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

5.4CVSS3.1AI score
Exploits0References5
CVE
CVE
added 2025/08/25 2:32 a.m.17 views

CVE-2025-9404

CVE-2025-9404 concerns Scada-LTS versions up to 2.7.8.1. The vulnerability is a stored/remote cross-site scripting flaw in an unknown function within the /pointHierarchySLTS file of the Folder Handler component. The attack is triggered by manipulating the Title argument, and the exploit is public...

5.4CVSS6.5AI score0.0026EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/08/25 2:32 a.m.10 views

CVE-2025-9404 Scada-LTS Folder pointHierarchySLTS cross site scripting

A vulnerability was identified in Scada-LTS up to 2.7.8.1. The affected element is an unknown function of the file /pointHierarchySLTS of the component Folder Handler. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

4.8CVSS0.0026EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/08/25 2:32 a.m.3 views

CVE-2025-9404 Scada-LTS Folder pointHierarchySLTS cross site scripting

A vulnerability was identified in Scada-LTS up to 2.7.8.1. The affected element is an unknown function of the file /pointHierarchySLTS of the component Folder Handler. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

4.8CVSS3.3AI score0.0026EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/08/25 12:0 a.m.4 views

PT-2025-34590 · Scada-Lts · Scada-Lts

Name of the Vulnerable Software and Affected Versions: Scada-LTS versions prior to 2.7.8.2 Description: A vulnerability was identified in Scada-LTS up to version 2.7.8.1. The affected element is an unknown function within the /pointHierarchySLTS file of the Folder Handler component. Manipulation ...

4.8CVSS3.6AI score0.0026EPSS
Exploits1References10
NVD
NVD
added 2025/08/20 4:15 p.m.4 views

CVE-2010-20045

FileWrangler = 5.30 suffers from a stack-based buffer overflow vulnerability when parsing directory listings from an FTP server. A malicious server can send an overlong folder name in response to a LIST command, triggering memory corruption during client-side rendering. Exploitation requires...

8.5CVSS0.0032EPSS
Exploits0References5
CVE
CVE
added 2025/08/20 3:32 p.m.10 views

CVE-2010-20045

FileWrangler

8.5CVSS7.8AI score0.0032EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/08/20 3:32 p.m.8 views

CVE-2010-20045 FileWrangler <= 5.30 Stack Buffer Overflow

FileWrangler = 5.30 suffers from a stack-based buffer overflow vulnerability when parsing directory listings from an FTP server. A malicious server can send an overlong folder name in response to a LIST command, triggering memory corruption during client-side rendering. Exploitation requires...

8.5CVSS0.0032EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/08/20 7:38 a.m.2 views

CVE-2025-5296

CWE-59: Improper Link Resolution Before File Access 'Link Following' vulnerability exists that could cause arbitrary data to be written to protected locations, potentially leading to escalation of privilege, arbitrary file corruption, exposure of application and system information or persistent...

7.3CVSS7.5AI score0.00198EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/08/20 12:0 a.m.3 views

PT-2025-34097 · Undefined · Undefined

FileWrangler = 5.30 suffers from a stack-based buffer overflow vulnerability when parsing directory listings from an FTP server. A malicious server can send an overlong folder name in response to a LIST command, triggering memory corruption during client-side rendering. Exploitation requires...

8.5CVSS8.2AI score0.0032EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/08/18 8:25 a.m.4 views

CVE-2025-8464

The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.9.0 via the wpcf7guestuserid cookie. This makes it possible for unauthenticated attackers to upload and delete files outside of the...

5.3CVSS7.2AI score0.00662EPSS
Exploits0References1
NVD
NVD
added 2025/08/18 8:15 a.m.2 views

CVE-2025-5296

CWE-59: Improper Link Resolution Before File Access 'Link Following' vulnerability exists that could cause arbitrary data to be written to protected locations, potentially leading to escalation of privilege, arbitrary file corruption, exposure of application and system information or persistent...

7.3CVSS0.00198EPSS
Exploits0References1
Rows per page
Query Builder