Lucene search
+L

618 matches found

Kitploit
Kitploit
•added 2026/10/14 8:53 a.m.•53 views

elevationstation

Elevation Station Stealing and Duplicating SYSTEM tokens for fun & profit! We duplicate things, make twin copies, and then ride away. You have used Metasploit's getsystem and SysInternals PSEXEC for getting system privs, correct? Well, here's a similar standalone version of that...but without the...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/14 4:15 a.m.•21 views

informer

Informer - Telegram Mass Surveillance Update 10-20-2025 Security : Fixed high-severity vulnerability CVE-2022-1941 in mysql-connector-python Security : Migrated from deprecated oauth2client to google-auth Updated all dependencies to latest secure versions Fixed quickstart.sh script bugs venv...

7.5CVSS6.8AI score0.01512EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/10/11 4:14 p.m.•22 views

systeminformer

System Informer Una herramienta gratuita, potente y multipropósito que te ayuda a monitorear los recursos del sistema, depurar software y detectar malware. Traído a ti por Winsider Seminars & Solutions, Inc...

5.9AI score
SaveExploits0References5
NVD
NVD
•added 2026/10/08 9:17 p.m.•10 views

CVE-2026-107782

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

8.5CVSS0.00115EPSS
SaveExploits0References5
OSV
OSV
•added 2026/10/08 8:15 p.m.•8 views

CVE-2026-107782 System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Port

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

8.5CVSS6.2AI score
SaveExploits0References7
CVE
CVE
•added 2026/10/08 8:15 p.m.•13 views

CVE-2026-107782

System Informer versions prior to 4.0.26241.138 are vulnerable to an incorrect authorization vulnerability in the phsvc helper. This flaw allows local attackers to access privileged APIs by connecting via any Authenticode-signed process. Specifically, an attacker can load code into a Microsoft-si...

8.5CVSS6.2AI score0.00115EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/08 8:15 p.m.•40 views

CVE-2026-107782 System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Port

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

8.5CVSS0.00115EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/08 8:15 p.m.•11 views

EUVD-2026-95260

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

8.5CVSS6.2AI score0.00115EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•3 views

CVE-2026-107782: Incorrect Authorization

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

8.5CVSS6.2AI score0.00115EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/08/29 4:32 a.m.•20 views

systeminformer v4.0.26241.138

System Informer A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc...

5.9AI score
SaveExploits0References6
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/05 8:46 a.m.•19 views

Malicious code in bigops-informer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 324bb851ecf14c623080e07471bd23a7ea505bc6db244c654895a1cce71bf7e8 On require, index.js loads bootstrap.js which reconstructs a set of destination hostnames from string-array joins resolving to...

5.5AI score
SaveExploits0References1
OSV
OSV
•added 2026/08/05 8:46 a.m.•18 views

MAL-2026-12171 Malicious code in bigops-informer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 324bb851ecf14c623080e07471bd23a7ea505bc6db244c654895a1cce71bf7e8 On require, index.js loads bootstrap.js which reconstructs a set of destination hostnames from string-array joins resolving to...

5.5AI score
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/07/30 4:54 p.m.•16 views

SUSE CVE-2026-40886

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From 3.6.5 to 4.0.4, an unchecked array index in the pod informer's podGCFromPod function causes a controller-wide panic when a workflow pod carries a malformed...

7.7CVSS8AI score0.00592EPSS
SaveExploits1References2
Circl
Circl
•added 2026/07/07 6:06 p.m.•21 views

CVE-2026-48062

creationtimestamp| type| source ---|---|--- 2026-07-07 18:06:56+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/116880021750277483 2026-07-17 21:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mquojfihof2j 2026-07-18 09:00:47+00:00| seen|...

9.8CVSS5.8AI score0.00775EPSS
SaveExploits0References5
OSV
OSV
•added 2026/06/25 6:26 p.m.•23 views

GO-2026-5148 Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller in github.com/argoproj/argo-workflows

Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller in github.com/argoproj/argo-workflows...

7.7CVSS8AI score0.00592EPSS
SaveExploits1References2
OSV
OSV
•added 2026/04/25 8:35 a.m.•13 views

BIT-ARGO-WORKFLOWS-2026-40886 Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows controller

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From 3.6.5 to 4.0.4, an unchecked array index in the pod informer's podGCFromPod function causes a controller-wide panic when a workflow pod carries a malformed...

7.7CVSS8AI score0.00592EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2026/04/23 9:39 p.m.•25 views

Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller

Summary An unchecked array index in the pod informer's podGCFromPod function causes a controller-wide panic when a workflow pod carries a malformed workflows.argoproj.io/pod-gc-strategy annotation. Because the panic occurs inside an informer goroutine outside the controller's recover scope, it...

7.7CVSS7.8AI score0.00592EPSS
SaveExploits1References3Affected Software2
OSV
OSV
•added 2026/04/23 9:39 p.m.•32 views

GHSA-5JV8-H7QH-RF5P Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller

Summary An unchecked array index in the pod informer's podGCFromPod function causes a controller-wide panic when a workflow pod carries a malformed workflows.argoproj.io/pod-gc-strategy annotation. Because the panic occurs inside an informer goroutine outside the controller's recover scope, it...

7.7CVSS7.8AI score0.00592EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2026/04/23 6:12 p.m.•16 views

CVE-2026-40886 Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows controller

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From 3.6.5 to 4.0.4, an unchecked array index in the pod informer's podGCFromPod function causes a controller-wide panic when a workflow pod carries a malformed...

7.7CVSS8AI score0.00592EPSS
SaveExploits1References1
CVE
CVE
•added 2026/04/23 6:12 p.m.•76 views

CVE-2026-40886

The CVE describes an unchecked array index in Argo Workflows’ pod informer, specifically in podGCFromPod(), which can cause a controller-wide panic when a workflow pod has a malformed workflows.argoproj.io/pod-gc-strategy annotation. Affected versions span 3.6.5 through 4.0.4, with the panic occu...

7.7CVSS8AI score0.00592EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder