CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

144 matches found

Kitploit•added 2026/10/08 10:47 a.m.•16 views

CVE-2025-4632_POC

Samsung MagicINFO 9 Server Exploit CVE-2025-4632 This repository contains a Python replication script for CVE-2025-4632, an Unauthenticated Remote Code Execution RCE vulnerability in Samsung MagicINFO 9 Server versions prior to 21.1052. The vulnerability exists due to an improper limitation of a...

9.8CVSS8.9AI score0.24066EPSS

SaveExploits4References1

CISA KEV Catalog•added 2026/04/24 12:00 a.m.•41 views

Samsung MagicINFO 9 Server Path Traversal Vulnerability

Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to write arbitrary files as system authority...

9.8CVSS8.4AI score0.91941EPSS

SaveIn wildExploits3

attackerkb•added 2026/04/10 1:24 a.m.•7 views

CVE-2026-25203

Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability This issue affects MagicINFO 9 Server: less than 21.1091.1...

7.8CVSS5.9AI score0.00177EPSS

SaveExploits0References2Affected Software1

Vulnrichment•added 2026/04/10 1:24 a.m.•8 views

CVE-2026-25203

Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability This issue affects MagicINFO 9 Server: less than 21.1091.1...

7.8CVSS7.3AI score0.00177EPSS

SaveExploits0References1

Cvelist•added 2026/04/10 1:24 a.m.•47 views

CVE-2026-25203

Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability This issue affects MagicINFO 9 Server: less than 21.1091.1...

7.8CVSS0.00177EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2026/04/10 12:00 a.m.•6 views

CVE-2026-25203: Incorrect Default Permissions

Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability This issue affects MagicINFO 9 Server: less than 21.1091.1...

7.8CVSS7.3AI score0.00177EPSS

SaveExploits0References1

Cvelist•added 2026/02/02 4:49 a.m.•46 views

CVE-2026-25202

The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.This issue affects MagicINFO 9 Server: less than 21.1090.1...

9.8CVSS0.00483EPSS

SaveExploits1References1

Positive Technologies•added 2026/02/02 12:00 a.m.•15 views

PT-2026-5777

Уязвимость системы централизованного управления мультимедийным контентом MagicINFO 9 связана с использованием жестко закодированных учетных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ на чтение, изменение и удаление данных...

10CVSS5.4AI score

SaveExploits0References3

Positive Technologies•added 2026/02/02 12:00 a.m.•13 views

PT-2026-5778

Уязвимость системы централизованного управления мультимедийным контентом MagicINFO 9 связана с неограниченной загрузкой файлов опасного типа. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, проводить межсайтовые сценарные атаки и получить полный контроль над устройством...

10CVSS5.4AI score

SaveExploits0References3

BDU FSTEC•added 2026/02/02 12:00 a.m.•23 views

The vulnerability of the MagicINFO 9 centralized multimedia content management system lies in the use of strictly encrypted user credentials. This allows an intruder to gain access to read, modify, and delete data.

The vulnerability of the MagicINFO 9 centralized multimedia content management system is related to the use of strictly encrypted user credentials. Exploiting this vulnerability could allow an attacker to gain access to read, modify, and delete data...

10CVSS5.8AI score0.00483EPSS

SaveExploits1References3Affected Software1