Lucene search
+L

11608 matches found

GithubExploit
GithubExploit
•added 2026/03/26 8:55 a.m.•168 views

turboquant-monitoring-poc

TurboQuant x WhatAp Monitoring POC TurboQuanthttps://arxiv...

5.8AI score
SaveExploits0
NVD
NVD
•added 2026/03/26 7:16 a.m.•28 views

CVE-2026-32680

The installer of RATOC RAID Monitoring Manager for Windows allows to customize the installation folder. If the installation folder is customized to some non-default one, the folder may be left with un-secure ACLs and non-administrative users can alter contents of that folder. It may allow a...

8.5CVSS0.00151EPSS
SaveExploits0References2
CVE
CVE
•added 2026/03/26 6:55 a.m.•43 views

CVE-2026-32680

The issue concerns RATOC RAID Monitoring Manager for Windows. If users customize the installer’s target folder, that folder may retain insecure ACLs, allowing non-administrative users to alter its contents. This can enable a non-administrative user to execute arbitrary code with SYSTEM privileges...

8.5CVSS7.7AI score0.00151EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/03/26 6:54 a.m.•61 views

CVE-2026-28760

The installer of RATOC RAID Monitoring Manager for Windows searches the current directory to load certain DLLs. If a user is directed to place a crafted DLL with the installer, an arbitrary code may be executed with the administrator privilege...

8.4CVSS0.00181EPSS
SaveExploits0References2
CVE
CVE
•added 2026/03/26 6:54 a.m.•38 views

CVE-2026-28760

The vulnerability CVE-2026-28760 affects RATOC RAID Monitoring Manager for Windows. The installer loads DLLs by searching the current directory, enabling a user-directed crafted DLL to be loaded during installation, which may allow arbitrary code execution with administrator privileges. The issue...

8.4CVSS7.5AI score0.00181EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/03/26 6:54 a.m.•13 views

CVE-2026-28760

The installer of RATOC RAID Monitoring Manager for Windows searches the current directory to load certain DLLs. If a user is directed to place a crafted DLL with the installer, an arbitrary code may be executed with the administrator privilege...

8.4CVSS7.5AI score0.00181EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/03/26 12:00 a.m.•40 views

PT-2026-28374

Name of the Vulnerable Software and Affected Versions SolarWinds Observability Self-Hosted affected versions not specified Description The software is subject to a stored cross-site scripting issue. Successful exploitation may result in unintended script execution. The impact is limited by a...

8.7CVSS5.8AI score0.00448EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/03/26 12:00 a.m.•29 views

RATOC RAID Monitoring Manager for Windows 安全漏洞

RATOC RAID Monitoring Manager for Windows is a software developed by RATOC RAID in Japan, designed for monitoring and managing the RAID hard drive boxes it supports. RATOC RAID Monitoring Manager for Windows has a security vulnerability; this vulnerability stems from the installation program’s...

8.5CVSS7.5AI score0.00151EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/03/26 12:00 a.m.•21 views

PT-2026-28221

The installer of RATOC RAID Monitoring Manager for Windows searches the current directory to load certain DLLs. If a user is directed to place a crafted DLL with the installer, an arbitrary code may be executed with the administrator privilege...

8.4CVSS6AI score0.00181EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/26 12:00 a.m.•9 views

CVE-2026-32680: Incorrect Default Permissions

The installer of RATOC RAID Monitoring Manager for Windows allows to customize the installation folder. If the installation folder is customized to some non-default one, the folder may be left with un-secure ACLs and non-administrative users can alter contents of that folder. It may allow a...

8.5CVSS7.7AI score0.00151EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/03/26 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-33216

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, for MQTT deployments using...

8.6CVSS6.9AI score0.00631EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/26 12:00 a.m.•7 views

CVE-2026-28760: Uncontrolled Search Path Element

The installer of RATOC RAID Monitoring Manager for Windows searches the current directory to load certain DLLs. If a user is directed to place a crafted DLL with the installer, an arbitrary code may be executed with the administrator privilege...

8.4CVSS7.5AI score0.00181EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/03/26 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-33247

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, if a nats-server is run wi...

7.5CVSS6.9AI score0.00538EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/03/25 9:31 p.m.•18 views

CVE-2026-33247

A flaw was found in NATS-Server. If the NATS-Server is configured with static credentials provided through command-line arguments argv and the monitoring port is enabled, a remote attacker with access to the monitoring port can view these credentials. The /debug/vars endpoint on the monitoring po...

7.5CVSS7AI score0.00538EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/03/25 9:21 p.m.•18 views

CVE-2026-33216

A flaw was found in NATS-Server, a high-performance server for the NATS.io messaging system. For MQTT deployments utilizing usercodes and passwords, the MQTT passwords were mistakenly categorized as non-authenticating identity statements JSON Web Tokens - JWT. This misclassification leads to the...

8.6CVSS6.9AI score0.00631EPSS
SaveExploits0References6
osv-debian
osv-debian
•added 2026/03/25 8:16 p.m.•23 views

DEBIAN-CVE-2026-33247

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, if a nats-server is run with static credentials for all clients provided via argv the command-line, then those credentials are visible to any user who can see the...

5.3CVSS6.9AI score0.00538EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/25 8:16 p.m.•35 views

CVE-2026-33247

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, if a nats-server is run with static credentials for all clients provided via argv the command-line, then those credentials are visible to any user who can see the...

7.5CVSS0.00538EPSS
SaveExploits0References8
NVD
NVD
•added 2026/03/25 8:16 p.m.•23 views

CVE-2026-33216

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, for MQTT deployments using usercodes/passwords: MQTT passwords are incorrectly classified as a non-authenticating identity statement JWT and exposed via monitoring...

8.6CVSS0.00631EPSS
SaveExploits0References9
osv-azl
osv-azl
•added 2026/03/25 8:16 p.m.•18 views

AZL-81636 CVE-2026-33216 affecting package telegraf for versions less than 1.31.0-19

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, for MQTT deployments using usercodes/passwords: MQTT passwords are incorrectly classified as a non-authenticating identity statement JWT and exposed via monitoring...

8.6CVSS7AI score0.00631EPSS
SaveExploits0References1
osv-debian
osv-debian
•added 2026/03/25 8:16 p.m.•17 views

DEBIAN-CVE-2026-33216

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, for MQTT deployments using usercodes/passwords: MQTT passwords are incorrectly classified as a non-authenticating identity statement JWT and exposed via monitoring...

7.5CVSS7AI score0.00631EPSS
SaveExploits0References1
Rows per page
Query Builder