Lucene search
+L

2830 matches found

Zero Day Initiative
Zero Day Initiative
•added 2025/07/08 12:00 a.m.•16 views

Microsoft PC Manager Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft PC Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS6.5AI score0.00411EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/07/08 12:00 a.m.•15 views

Microsoft PC Manager 后置链接漏洞

Microsoft PC Manager is a computer management software from Microsoft USA that allows one-click acceleration, system space management, pop-up window management, and full health check. Microsoft PC Manager suffers from a backlink vulnerability. An attacker can exploit this vulnerability to elevate...

7.8CVSS6.5AI score0.00381EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/07/08 12:00 a.m.•17 views

Microsoft PC Manager 访问控制错误漏洞

Microsoft PC Manager is a computer management software from Microsoft USA, which can be used for one-click acceleration, system space management, pop-up window management, and comprehensive physical examination. An access control error vulnerability exists in Microsoft PC Manager. An attacker can...

7.8CVSS6.1AI score0.00411EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/07/08 12:00 a.m.•16 views

PT-2025-28624 · Microsoft · Pcmanager

Name of the Vulnerable Software and Affected Versions: Microsoft PC Manager affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', which allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00381EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/07/08 12:00 a.m.•7 views

PT-2025-28524 · Microsoft · Pcmanager +1

Name of the Vulnerable Software and Affected Versions: Microsoft PC Manager affected versions not specified Description: The issue is related to improper access control in Microsoft PC Manager, allowing an authorized attacker to elevate privileges locally. This can lead to a local privilege...

7.8CVSS5.9AI score0.00411EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/08 12:00 a.m.•3 views

CVE-2025-47993: Improper Access Control

Improper access control in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00411EPSS
SaveExploits0References1
Malwarebytes
Malwarebytes
•added 2025/07/07 11:14 a.m.•20 views

Gamers hacked playing Call of Duty: WWII—PC version temporarily taken offline

On Saturday, the Call of Duty team announced that the PC version of Call of Duty: WWII has been taken offline following "reports of an issue." That issue seems to be a serious security problem, after reports surfaced about a remote code execution RCE vulnerability in the game. After Microsoft’s...

8.3AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/07/02 12:16 a.m.•32 views

CVE-2025-46014

Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect services to the named pipe iMateBookAssistant with default or overly permissive security attributes, leading to a privilege escalation...

8.8CVSS7.6AI score0.00424EPSS
SaveExploits2References1
NVD
NVD
•added 2025/06/30 2:15 a.m.•23 views

CVE-2025-46014

Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect services to the named pipe iMateBookAssistant with default or overly permissive security attributes, leading to a privilege escalation...

8.8CVSS0.00424EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2025/06/30 12:00 a.m.•9 views

CVE-2025-46014

Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect services to the named pipe iMateBookAssistant with default or overly permissive security attributes, leading to a privilege escalation...

7.6AI score0.00424EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2025/06/30 12:00 a.m.•40 views

CVE-2025-46014

Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect services to the named pipe iMateBookAssistant with default or overly permissive security attributes, leading to a privilege escalation...

0.00424EPSS
SaveExploits2References1
Packet Storm
Packet Storm
•added 2025/06/30 12:00 a.m.•119 views

📄 Hecate PC Remote Control 1.6.1.0 Remote Code Execution

Hecate PC Remote Control version 1.6.1.0 listens on UDP port 48436 and accepts unauthenticated JSON commands for keyboard and mouse input. This lack of authentication allows a remote attacker to simulate user interaction, open system dialogs, and execute arbitrary commands. Exploit Title: Hecate ...

8.7AI score
SaveExploits0
CVE
CVE
•added 2025/06/30 12:00 a.m.•52 views

CVE-2025-46014

A privilege escalation vulnerability exists in Honor PC Manager version 16.0.0.118 developed by Honor Device Co., Ltd. The issue arises because several services connect to the named pipe iMateBookAssistant with default or overly permissive security attributes, potentially allowing unauthorized us...

8.8CVSS7.6AI score0.00424EPSS
SaveExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/30 12:00 a.m.•8 views

CVE-2025-46014: Incorrect Default Permissions

Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect services to the named pipe iMateBookAssistant with default or overly permissive security attributes, leading to a privilege escalation...

8.8CVSS5.8AI score0.00424EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2025/06/30 12:00 a.m.•17 views

PT-2025-27396 · Honor · Honor Pc Manager

Name of the Vulnerable Software and Affected Versions: Honor PC Manager version 16.0.0.118 Description: A privilege escalation issue was discovered in Honor PC Manager, where several services connect to the named pipe iMateBookAssistant with default or overly permissive security attributes...

8.8CVSS6.5AI score0.00424EPSS
SaveExploits2References7
BDU FSTEC
BDU FSTEC
•added 2025/06/23 12:00 a.m.•24 views

SLNX PC Client RCE

The vulnerability of the SLNX PC Client of the embedded application and document management tool RICOH Streamline NX lies in the use of an unreliable data source during the download of updates. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary cod...

2.5CVSS6.1AI score0.0012EPSS
SaveExploits0References4Affected Software1
osv_usn
osv_usn
•added 2025/06/18 3:11 a.m.•25 views

USN-7574-1 golang-1.22 vulnerabilities

Kyle Seely discovered that the Go net/http module did not properly handle sensitive headers during repeated redirects. An attacker could possibly use this issue to obtain sensitive information. CVE-2024-45336 Juho Forsén discovered that the Go crypto/x509 module incorrectly handled IPv6 addresses...

6.8CVSS6.7AI score0.00671EPSS
SaveExploits2References6
Vulnrichment
Vulnrichment
•added 2025/06/13 8:18 a.m.•17 views

CVE-2025-46783

Path traversal vulnerability exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is running by tampering with specific files used on the product...

9.8CVSS7.5AI score0.00884EPSS
SaveExploits0References2
CVE
CVE
•added 2025/06/13 8:18 a.m.•72 views

CVE-2025-36506

CVE-2025-36506 affects Ricoh Streamline NX V3 PC Client, versions 3.5.0 to 3.242.0. The issue is an external control of file name or path (CWE-73) that allows a crafted request to overwrite arbitrary files in the filesystem with log data. Exploitation details are not provided beyond the vulnerabi...

6.9CVSS7AI score0.00421EPSS
SaveExploits0References2
Hewlett-Packard
Hewlett-Packard
•added 2025/06/13 12:00 a.m.•33 views

Realtek Wireless Bluetooth Security Update

A potential security vulnerability has been identified in certain Realtek Wireless Bluetooth drivers for HP PC products which might allow information disclosure. Realtek has provided an updated RTL8xxx Series Bluetooth Driver to mitigate this vulnerability. Realtek has released updates to mitigat...

6.8CVSS6.4AI score0.01297EPSS
SaveExploits1Affected Software144
Rows per page
Query Builder