Lucene search
+L

1094 matches found

Vulnrichment
Vulnrichment
•added 2025/08/12 11:16 a.m.•12 views

CVE-2024-54678

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SIMATIC PCS neo V6.0 All versions V6.0 SP1 Update 1, SIMATIC S7-PLCSIM V17 All versions, SIMATIC STEP 7 V17 All versions V17 Update 9, SIMATIC STEP 7 V18 All versions, SIMATIC STEP 7 V19 A...

8.6CVSS5.9AI score0.0017EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/12 12:00 a.m.•32 views

PT-2025-32646 · Siemens · Simatic S7-Plcsim +10

Name of the Vulnerable Software and Affected Versions: SIMATIC PCS neo versions 4.1 through 6.0 SIMATIC S7-PLCSIM version 17 SIMATIC STEP 7 versions 17 through 20 SIMATIC WinCC versions 17 through 20 SIMOCODE ES versions 17 through 20 SIMOTION SCOUT TIA versions 5.4 through 5.7 SINAMICS Startdriv...

8.6CVSS6.8AI score0.0017EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/12 12:00 a.m.•7 views

CVE-2024-54678: Deserialization of Untrusted Data

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SIMATIC PCS neo V6.0 All versions V6.0 SP1 Update 1, SIMATIC S7-PLCSIM V17 All versions, SIMATIC STEP 7 V17 All versions V17 Update 9, SIMATIC STEP 7 V18 All versions, SIMATIC STEP 7 V19 A...

8.6CVSS6.2AI score0.0017EPSS
SaveExploits0References2
ICS
ICS
•added 2025/08/12 12:00 a.m.•21 views

Siemens Engineering Platforms

SUMMARY Affected products do not properly restrict access permissions to a local Windows Named Pipe and do not properly sanitize user-controllable input sent to that Named Pipe. This could allow a local authenticated attacker to cause a type confusion and execute arbitrary code within the...

8.6CVSS7.5AI score0.0017EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
•added 2025/08/04 9:33 a.m.•13 views

CVE-2013-10046

A local privilege escalation vulnerability exists in Agnitum Outpost Internet Security 8.1 that allows an unprivileged user to execute arbitrary code with SYSTEM privileges. The flaw resides in the acs.exe component, which exposes a named pipe that accepts unauthenticated commands. By exploiting ...

8.5CVSS8.2AI score0.00559EPSS
SaveExploits1References1
CVE
CVE
•added 2025/08/01 8:37 p.m.•30 views

CVE-2013-10046

Agnitum Outpost Internet Security 8.1 contains a local privilege escalation in the acs.exe component. The issue arises from a directory traversal flaw in a named pipe that accepts unauthenticated commands, allowing an unprivileged user to load a malicious DLL from a user-controlled location and e...

8.5CVSS8.1AI score0.00559EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/08/01 8:37 p.m.•9 views

CVE-2013-10046 Agnitum Outpost Internet Security Local Privilege Escalation

A local privilege escalation vulnerability exists in Agnitum Outpost Internet Security 8.1 that allows an unprivileged user to execute arbitrary code with SYSTEM privileges. The flaw resides in the acs.exe component, which exposes a named pipe that accepts unauthenticated commands. By exploiting ...

8.5CVSS8.1AI score0.00559EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/08/01 12:00 a.m.•13 views

PT-2025-31683 · Agnitum · Agnitum Outpost Internet Security

Name of the Vulnerable Software and Affected Versions: Agnitum Outpost Internet Security version 8.1 Description: A local privilege escalation issue exists that allows an unprivileged user to execute arbitrary code with SYSTEM privileges. The flaw is located in the acs.exe component, which expose...

8.5CVSS7.4AI score0.00559EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/01 12:00 a.m.•3 views

CVE-2013-10046: Improper Limitation of a Pathname to a Restricted Directory

A local privilege escalation vulnerability exists in Agnitum Outpost Internet Security 8.1 that allows an unprivileged user to execute arbitrary code with SYSTEM privileges. The flaw resides in the acs.exe component, which exposes a named pipe that accepts unauthenticated commands. By exploiting ...

8.5CVSS6.5AI score0.00559EPSS
SaveExploits1References1
GithubExploit
GithubExploit
•added 2025/07/24 10:19 p.m.•362 views

Exploit for Improper Access Control in Fortinet Forticlient

CVE-2024-40586 Windows Coerced Authentication in FortiClient...

6.7CVSS8AI score0.00248EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/07/02 12:16 a.m.•30 views

CVE-2025-46014

Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect services to the named pipe iMateBookAssistant with default or overly permissive security attributes, leading to a privilege escalation...

8.8CVSS7.6AI score0.00424EPSS
SaveExploits2References1
NVD
NVD
•added 2025/06/30 2:15 a.m.•22 views

CVE-2025-46014

Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect services to the named pipe iMateBookAssistant with default or overly permissive security attributes, leading to a privilege escalation...

8.8CVSS0.00424EPSS
SaveExploits2References1
OSV
OSV
•added 2025/06/30 2:15 a.m.•16 views

CVE-2025-46014

Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect services to the named pipe iMateBookAssistant with default or overly permissive security attributes, leading to a privilege escalation...

8.8CVSS5.8AI score0.00424EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2025/06/30 12:00 a.m.•9 views

CVE-2025-46014

Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect services to the named pipe iMateBookAssistant with default or overly permissive security attributes, leading to a privilege escalation...

7.6AI score0.00424EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/30 12:00 a.m.•5 views

CVE-2025-46014: Incorrect Default Permissions

Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect services to the named pipe iMateBookAssistant with default or overly permissive security attributes, leading to a privilege escalation...

8.8CVSS5.8AI score0.00424EPSS
SaveExploits2References1
CVE
CVE
•added 2025/06/30 12:00 a.m.•50 views

CVE-2025-46014

A privilege escalation vulnerability exists in Honor PC Manager version 16.0.0.118 developed by Honor Device Co., Ltd. The issue arises because several services connect to the named pipe iMateBookAssistant with default or overly permissive security attributes, potentially allowing unauthorized us...

8.8CVSS7.6AI score0.00424EPSS
SaveExploits2References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/06/15 2:16 a.m.•15 views

CVE-2025-5491

Acer ControlCenter contains Remote Code Execution vulnerability. The program exposes a Windows Named Pipe that uses a custom protocol to invoke internal functions. However, this Named Pipe is misconfigured, allowing remote users with low privileges to interact with it and access its features. One...

8.8CVSS9.2AI score0.00727EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/13 3:15 a.m.•24 views

CVE-2025-5491

Acer ControlCenter contains Remote Code Execution vulnerability. The program exposes a Windows Named Pipe that uses a custom protocol to invoke internal functions. However, this Named Pipe is misconfigured, allowing remote users with low privileges to interact with it and access its features. One...

8.8CVSS0.00727EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/06/13 1:56 a.m.•27 views

CVE-2025-5491 Acer ControlCenter - Remote Code Execution

Acer ControlCenter contains Remote Code Execution vulnerability. The program exposes a Windows Named Pipe that uses a custom protocol to invoke internal functions. However, this Named Pipe is misconfigured, allowing remote users with low privileges to interact with it and access its features. One...

8.8CVSS0.00727EPSS
SaveExploits0References3
CVE
CVE
•added 2025/06/13 1:56 a.m.•88 views

CVE-2025-5491

Affected product: Acer ControlCenter (Windows). The CVE-2025-5491 entry describes a Remote Code Execution via a misconfigured Windows Named Pipe that uses a custom protocol to invoke internal functions, allowing low-privilege remote users to execute arbitrary code as NT AUTHORITY\SYSTEM and thus ...

8.8CVSS9.2AI score0.00727EPSS
SaveExploits0References3
Rows per page
Query Builder