Lucene search
+L

366 matches found

Kitploit
Kitploit
•added 2026/10/02 4:29 a.m.•41 views

chromebackdoor

VIDEO Install Text V 3.0 Install Video OLD Binder guide Module guide Form grabber plugins Facebook MessengerSpy plugins Jabber Notifier/ Hide Panel Windows infection Rubber Ducky Payload Require: pip install crxmake wine32 Let's go python chromebackdoor.py user: root pass: toor KALI LINUX web...

5.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/27 10:50 a.m.•13 views

Malicious code in caracas4check (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 973d711f03dafa9f390e489476d4795acdda8db926bdd688ca5e1abbe6efa025 The package installs boot.pth at the site-packages root, causing 'import c4cboot' to run on every Python interpreter startup on the host after...

6.1AI score
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/23 12:00 a.m.•28 views

Malicious code in memoryos (PyPI)

On September 23, 2026, an attacker published malicious versions of two MemTensor packages. The affected packages are the OpenClaw plugin @memtensor/memos-cloud-openclaw-plugin on npm and the MemOS Python library MemoryOS on PyPI. Both versions contain the same Go implant, sckit. The binary runs i...

6AI score
SaveExploits0References5
OSV
OSV
•added 2026/09/23 12:00 a.m.•39 views

MAL-2026-16475 Malicious code in memoryos (PyPI)

On September 23, 2026, an attacker published malicious versions of two MemTensor packages. The affected packages are the OpenClaw plugin @memtensor/memos-cloud-openclaw-plugin on npm and the MemOS Python library MemoryOS on PyPI. Both versions contain the same Go implant, sckit. The binary runs i...

6AI score
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/07/17 12:00 a.m.•15 views

Rockwell Studio 5000 Logix Designer Incorrect Authorization RCE (SD1783)

The version of Rockwell Studio 5000 Logix Designer installed on the remote Windows host is affected by a remote code execution vulnerability. Due to incorrect authorization on a configuration file, any authenticated user can modify the paths of external tools configured within the application. An...

7.5CVSS7.7AI score0.00153EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/14 6:31 p.m.•24 views

EUVD-2026-43711

A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External Tools configuration. The executable paths specified in the external tools configuration file are not properly quoted, and because these paths contain spaces, the operating syst...

7.3CVSS6.5AI score0.00168EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/14 3:12 p.m.•39 views

CVE-2026-9128 Studio 5000 Logix Designer® – Multiple Vulnerabilities

A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External Tools configuration. The executable paths specified in the external tools configuration file are not properly quoted, and because these paths contain spaces, the operating syst...

7.3CVSS0.00168EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/14 3:12 p.m.•17 views

CVE-2026-9128 Studio 5000 Logix Designer® – Multiple Vulnerabilities

A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External Tools configuration. The executable paths specified in the external tools configuration file are not properly quoted, and because these paths contain spaces, the operating syst...

7.3CVSS7.7AI score0.00168EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•28 views

PT-2026-58083

A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External Tools configuration. The executable paths specified in the external tools configuration file are not properly quoted, and because these paths contain spaces, the operating syst...

7.3CVSS6.5AI score0.00168EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/08 4:38 a.m.•14 views

CVE-2026-57895

Incorrect default permissions issue exists in Pupsman versions prior to 3.9.0. An attacker can place a malicious executable in the installation folder, which results in arbitrary code execution with SYSTEM privilege...

8.5CVSS7.6AI score0.00161EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2026/07/08 4:38 a.m.•51 views

CVE-2026-57895

Pupsman before 3.9.0 has an incorrect default-permissions issue that allows an attacker to drop a malicious executable into the installation folder, enabling arbitrary code execution with SYSTEM privileges. Affected software: Pupsman, versions prior to 3.9.0. Root cause: default permissions misco...

8.5CVSS7.6AI score0.00161EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/08 4:38 a.m.•44 views

CVE-2026-57895

Incorrect default permissions issue exists in Pupsman versions prior to 3.9.0. An attacker can place a malicious executable in the installation folder, which results in arbitrary code execution with SYSTEM privilege...

8.5CVSS0.00161EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/08 12:00 a.m.•32 views

PT-2026-56325

Incorrect default permissions issue exists in Pupsman versions prior to 3.9.0. An attacker can place a malicious executable in the installation folder, which results in arbitrary code execution with SYSTEM privilege...

8.5CVSS6.5AI score0.00161EPSS
SaveExploits0References3
NVD
NVD
•added 2026/06/19 3:16 p.m.•36 views

CVE-2016-20092

NetDrive 2.6.12 contains an unquoted service path vulnerability in the Netdrive2ServiceNetdrive2 service that allows local users to execute arbitrary code with SYSTEM privileges. Attackers can insert malicious executables in the system root path that will be executed during service startup or...

8.5CVSS0.00175EPSS
SaveExploits0References4
NVD
NVD
•added 2026/06/19 3:16 p.m.•29 views

CVE-2016-20087

Fortitude HTTP 1.0.4.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated privileges by exploiting the service binary path. Attackers can insert malicious executables in the system root path that execute with SYSTEM privileges during...

8.5CVSS0.00175EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/06/19 2:16 p.m.•53 views

CVE-2021-47985 Brother SAPSprint 7.60 Unquoted Service Path Privilege Escalation

Brother SAPSprint 7.60 contains an unquoted service path vulnerability in the SAPSprint service binary that allows local attackers to escalate privileges. Attackers can place a malicious executable in the Program Files directory path to be executed with LocalSystem privileges when the service...

8.5CVSS0.00165EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/06/19 2:16 p.m.•52 views

CVE-2016-20094 AnyDesk 2.5.0 Unquoted Service Path Elevation of Privilege

AnyDesk 2.5.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with SYSTEM privileges by exploiting the service installation. Attackers can insert malicious executables in the system root path that execute with elevated privileges during applicatio...

8.5CVSS0.00197EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/06/19 2:16 p.m.•53 views

CVE-2016-20089 Iperius Remote 1.7.0 Unquoted Service Path Elevation of Privilege

Iperius Remote 1.7.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with SYSTEM privileges by exploiting the service installation path. When installed from directories containing spaces, attackers can place malicious executables in the path to be...

8.5CVSS0.00175EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/06/19 12:00 a.m.•49 views

PT-2026-50913

Name of the Vulnerable Software and Affected Versions Matrix42 Remote Control Host version 3.20.0031 Description An unquoted service path issue exists in the FastViewerRemoteService and FastViewerRemoteProxy services. This allows local users to execute arbitrary code with SYSTEM privileges by...

8.5CVSS6.1AI score0.00173EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/06/19 12:00 a.m.•44 views

PT-2026-50919

Name of the Vulnerable Software and Affected Versions Wondershare PDFelement version 5.2.9 Description A privilege escalation issue exists due to an unquoted service path in the WsAppService Windows service. Local attackers can exploit this by placing a malicious executable in the service path,...

8.5CVSS6AI score0.00175EPSS
SaveExploits0References6
Rows per page
Query Builder