446 matches found
CVE-2025-4802-Proof-of-Concept
CVE-2025-4802 — 개념 증명 ⚠️ 면책 조항: 이 저장소는 교육 및 승인된 보안 연구 목적으로만 제공됩니다. 소유하지 않았거나 테스트에 대한 명시적 허가를 받지 않은 시스템에 이 익스플로잇을 사용하지 마십시오. 오용은 법률 및 규정을 위반할 수 있습니다. CVE 요약 필드| 세부 정보 ---|--- CVE ID| CVE-2025-4802 영향받는 소프트웨어| GNU C 라이브러리 glibc 영향받는 버전| 2.27 – 2.38 취약점 유형| 신뢰할 수 없는 LDLIBRARYPATH를 통한 권한 상승 공격 벡터| 로컬...
Rocky Linux 9 [CIQ] Security Update: glibc / glibc-all-langpacks / glibc-benchtests / etc (crlsa-2025_8655)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20258655 advisory. glibc: static setuid binary dlopen may incorrectly search LDLIBRARYPATH CVE-2025-4802 Tenable has extracted the preceding description block directly from the CIQ...
Rocky Linux 8 [CIQ] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc (crlsa-2025_8686)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20258686 advisory. glibc: static setuid binary dlopen may incorrectly search LDLIBRARYPATH CVE-2025-4802 Tenable has extracted the preceding description block directly from the CIQ...
CVE-2025-4802-Proof-of-Concept
CVE-2025-4802 — Prueba de Concepto ⚠️ Aviso: Este repositorio es solo para fines educativos y de investigación de seguridad autorizados. No use este exploit contra sistemas que no posea o para los que no tenga permiso explícito para probar. El uso indebido puede violar leyes y regulaciones. Resume...
Paho 1.3.15 Path Hijacking / Code Execution
Arbitrary code execution is possible in the MQTTVersion utility of Paho version 1.3.15 due to uncontrolled loading of shared libraries using non-absolute paths. The application invokes dlopen with relative library names and relies on the dynamic loader’s search path to resolve the target library...
CVE-2026-54672: Uncontrolled Search Path Element
electron-updater allows for automatic updates for Electron apps. Prior to 26.15.0, AppImage targets built by app-builder-lib could use an empty path component when setting the LDLIBRARYPATH environment variable at runtime. This causes the current working directory to be added to the dynamic linke...
PT-2026-54018
Name of the Vulnerable Software and Affected Versions electron-updater versions prior to 26.15.0 Description AppImage targets built by app-builder-lib can use an empty path component when setting the LD LIBRARY PATH environment variable at runtime. This behavior causes the current working directo...
MiracleLinux 8 : glibc-2.28-251.el8_10.22 (AXSA:2025-10009:07)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10009:07 advisory. glibc: static setuid binary dlopen may incorrectly search LDLIBRARYPATH CVE-2025-4802 Tenable has extracted the preceding description block directly from th...
EUVD-2010-3353
Malware in sbrugna...
EUVD-2010-3379
Malware in sbrugna...
EUVD-2010-3370
Malware in sbrugna...
EUVD-2019-4606
Malware in sbrugna...
EUVD-2010-3374
Malware in sbrugna...
EUVD-2005-4783
Malware in sbrugna...
EUVD-2010-3391
Malware in sbrugna...
EUVD-2010-3349
Malware in sbrugna...
EUVD-2020-0181
Malware in sbrugna...
EUVD-2010-3382
Malware in sbrugna...