Lucene search
+L

9 matches found

Kitploit
Kitploit
added 2026/09/11 8:06 p.m.9 views

CVE-2025-49844

🚨 CVE-2025-49844 — “RediShell” 全球最快内存存储中的严重远程代码执行漏洞 Redis Lua 脚本执行区域现已成为认证后的完美着陆点。 经过认证的攻击者 → 精心构造的 Lua 脚本 → 逃逸沙箱 → 在宿主机上实现完全 RCE ⚠️ 概述 CVE-2025-49844 (“RediShell ”)是 Redis 嵌入式 Lua 脚本引擎中一个严重的释放后使用(UAF)内存破坏漏洞 。 一个经过认证的 用户通过 EVAL/EVALSHA 提交一个精心构造的 Lua 脚本,该脚本操纵垃圾收集器,在解析/执行过程中触发 UAF,逃逸 Lua...

9.9CVSS8.2AI score0.82294EPSS
SaveExploits14
Tenable Nessus
Tenable Nessus
added 2026/08/25 12:00 a.m.8 views

Redis < 6.2.20 / 7.0.x < 7.2.11 / 7.4.x < 7.4.6 / 8.0.x < 8.0.4 / 8.2.x < 8.2.2 RCE (RediShell)

The version of Redis installed on the remote host is prior to 6.2.20, 7.0.x prior to 7.2.11, 7.4.x prior to 7.4.6, 8.0.x prior to 8.0.4, or 8.2.x prior to 8.2.2. It is, therefore, affected by a vulnerability as referenced in the security advisory. - A use-after-free vulnerability in the Lua...

9.9CVSS8AI score0.82294EPSS
SaveExploits14References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2018-10717

Malware in sbrugna...

8.8CVSS8.6AI score0.01724EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.18 views

Mageia: Security Advisory (MGASA-2018-0325)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.01724EPSS
SaveExploits0References5
OSV
OSV
added 2018/07/25 8:24 a.m.12 views

MGASA-2018-0325 Updated wesnoth packages fix security vulnerability

The Battle for Wesnoth Project version 1.7.0 through 1.14.3 contains a Code Injection vulnerability in the Lua scripting engine that can result in code execution outside the sandbox. This attack appear to be exploitable via Loading specially-crafted saved games, networked games, replays, and play...

8.8CVSS8.2AI score0.01724EPSS
SaveExploits0References4
ArchLinux
ArchLinux
added 2018/07/25 12:00 a.m.21 views

[ASA-201807-15] wesnoth: arbitrary code execution

Arch Linux Security Advisory ASA-201807-15 ========================================== Severity: High Date : 2018-07-25 CVE-ID : CVE-2018-1999023 Package : wesnoth Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-741 Summary ======= The package wesnoth before...

8.8CVSS1.7AI score0.01724EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2018/07/23 4:29 p.m.36 views

CVE-2018-1999023

The Battle for Wesnoth Project version 1.7.0 through 1.14.3 contains a Code Injection vulnerability in the Lua scripting engine that can result in code execution outside the sandbox. This attack appear to be exploitable via Loading specially-crafted saved games, networked games, replays, and play...

8.8CVSS7.2AI score0.01724EPSS
SaveExploits0References2
OSV
OSV
added 2018/07/23 4:29 p.m.23 views

CVE-2018-1999023

The Battle for Wesnoth Project version 1.7.0 through 1.14.3 contains a Code Injection vulnerability in the Lua scripting engine that can result in code execution outside the sandbox. This attack appear to be exploitable via Loading specially-crafted saved games, networked games, replays, and play...

8.8CVSS7.2AI score
SaveExploits0References1
CVE
CVE
added 2018/07/23 4:00 p.m.71 views

CVE-2018-1999023

CVE-2018-1999023 affects The Battle for Wesnoth Project versions 1.7.0 through 1.14.3. The vulnerability is a Code Injection flaw in the Lua scripting engine that can lead to code execution outside the sandbox. Exploitation vectors include loading specially-crafted saved games, networked games, r...

8.8CVSS8.6AI score0.01724EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder