Lucene search
+L

1606 matches found

CNNVD
CNNVD
added 2025/12/23 12:0 a.m.7 views

Pdfforge Pdf Architect 安全漏洞

Pdfforge Pdf Architect is a solution for viewing and editing PDF documents from Pdfforge. A security vulnerability exists in Pdfforge Pdf Architect, which stems from an implementation of the Launch operation that allows dangerous scripts to be executed without user warning, potentially leading to...

7.8CVSS8AI score0.00171EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/23 12:0 a.m.9 views

PDFsam Enhanced 安全漏洞

PDFsam Enhanced is a PDF editing and management tool from PDFsam, Inc. A security vulnerability exists in PDFsam Enhanced that stems from the implementation of a Launch action that allows the execution of dangerous scripts without user warnings, which could lead to remote code execution...

7.8CVSS7.9AI score0.00267EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/23 12:0 a.m.5 views

Soda PDF Desktop 安全漏洞

Soda PDF Desktop is a professional PDF processing software that integrates reading, editing, creating, converting and managing PDF documents. A code execution vulnerability exists in Soda PDF Desktop, which stems from the implementation of a Launch action that allows the execution of dangerous...

7.8CVSS7.6AI score0.00217EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/22 7:21 a.m.7 views

CVE-2023-53959

FileZilla Client 3.63.1 contains a DLL hijacking vulnerability that allows attackers to execute malicious code by placing a crafted TextShaping.dll in the application directory. Attackers can generate a reverse shell payload using msfvenom and replace the missing DLL to achieve remote code...

9.8CVSS8.2AI score0.00746EPSS
SaveExploits1References1
Metasploit
Metasploit
added 2025/12/20 6:55 p.m.473 views

Assistive Technologies Persistence

This module achieves persistence by registering a custom Assistive Technology AT in the Windows registry. Then it configures the system to launch the AT executable during user logon or desktop switch such as with an admin prived program. Requires Windows 8 or higher and administrative privileges...

5.8AI score
SaveExploits0
CNNVD
CNNVD
added 2025/12/17 12:0 a.m.13 views

HCL Launch和HCL DevOps Deploy 安全漏洞

HCL Launch and HCL DevOps Deploy are both products of HCL India.HCL Launch is a multi-functional, enterprise-grade continuous delivery automation software. Used to handle the most complex deployment processes in DevOps.HCL DevOps Deploy is an application. Can be mapped to your organizational...

4.8CVSS6.8AI score0.00169EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/16 6:31 p.m.9 views

EUVD-2025-203771

HCL DevOps Deploy / HCL Launch is susceptible to a race condition in http-session client-IP binding enforcement which may allow a session to be briefly reused from a new IP address before it is invalidated. This could lead to unauthorized access under certain network conditions...

5CVSS6.1AI score0.00167EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/16 4:15 p.m.7 views

CVE-2025-62329

HCL DevOps Deploy / HCL Launch is susceptible to a race condition in http-session client-IP binding enforcement which may allow a session to be briefly reused from a new IP address before it is invalidated. This could lead to unauthorized access under certain network conditions...

5.6CVSS5.7AI score0.00167EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/16 4:15 p.m.14 views

CVE-2025-62329

HCL DevOps Deploy / HCL Launch is susceptible to a race condition in http-session client-IP binding enforcement which may allow a session to be briefly reused from a new IP address before it is invalidated. This could lead to unauthorized access under certain network conditions...

5.6CVSS0.00167EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/16 3:11 p.m.3 views

CVE-2025-62329 HCL DevOps Deploy / HCL Launch is susceptible to an insufficient session expiration vulnerability

HCL DevOps Deploy / HCL Launch is susceptible to a race condition in http-session client-IP binding enforcement which may allow a session to be briefly reused from a new IP address before it is invalidated. This could lead to unauthorized access under certain network conditions...

5CVSS6.2AI score0.00167EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/16 3:11 p.m.20 views

CVE-2025-62329

HCL DevOps Deploy / HCL Launch are affected by a race condition in the HTTP session client-IP binding enforcement, which may allow a session to be briefly reused from a new IP address before invalidation. This could lead to unauthorized access under certain network conditions. Affected products a...

5.6CVSS6.2AI score0.00167EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2025/12/16 3:11 p.m.31 views

CVE-2025-62329 HCL DevOps Deploy / HCL Launch is susceptible to an insufficient session expiration vulnerability

HCL DevOps Deploy / HCL Launch is susceptible to a race condition in http-session client-IP binding enforcement which may allow a session to be briefly reused from a new IP address before it is invalidated. This could lead to unauthorized access under certain network conditions...

5CVSS0.00167EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.6 views

HCL Launch和HCL DevOps Deploy 安全漏洞

HCL Launch and HCL DevOps Deploy are both products of HCL India.HCL Launch is a multi-functional, enterprise-grade continuous delivery automation software. Used to handle the most complex deployment processes in DevOps.HCL DevOps Deploy is an application. Can be mapped to your organizational...

5.6CVSS6.6AI score0.00167EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/13 10:0 p.m.7 views

CVE-2025-43320

The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe 26. An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges...

7.8CVSS5.9AI score0.00179EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/12 9:15 p.m.3 views

CVE-2025-43320

The issue was addressed by adding additional logic. This issue is fixed in macOS Tahoe 26, macOS Sequoia 15.7.3. An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges...

7.8CVSS5.9AI score0.00179EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/12 9:15 p.m.9 views

CVE-2025-43320

The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe 26. An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges...

7.8CVSS0.00179EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/12 8:56 p.m.26 views

CVE-2025-43320

The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe 26. An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges...

0.00179EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/12 8:56 p.m.6 views

EUVD-2025-203166

The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.7.3. An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges...

6.5AI score0.00179EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/12 8:56 p.m.19 views

CVE-2025-43320

CVE-2025-43320 affects Apple macOS Sequoia 15.7.3 and macOS Tahoe 26. The issue allows an app to bypass launch-constraint protections and execute malicious code with elevated privileges. The description indicates the fix involved adding additional logic. Apple security pages associate this CVE wi...

7.8CVSS5.9AI score0.00179EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/12 8:56 p.m.2 views

CVE-2025-43320

The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe 26. An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges...

6AI score0.00179EPSS
SaveExploits0References2
Rows per page
Query Builder