Lucene search
+L

62 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/06/05 12:53 a.m.26 views

Malicious code in @forjacms/sections (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c21dd7e7453f68aa7240f5ec40de3a37683b0a9655d0218a094c528e042766f The package was found to contain malicious code or consuming dependency that contains malicious code Source: google-open-source-security...

6.1AI score
Exploits0References4
OSV
OSV
added 2026/06/05 12:53 a.m.14 views

MAL-2026-5261 Malicious code in mountly-tailwind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e398eaa72f57a4536d3bb3c64f27de01f4a1d91cf64c65f10b8949dcfb4cfb91 The package was found to contain malicious code or consuming dependency that contains malicious code Source: google-open-source-security...

6.2AI score
Exploits0References3
OSV
OSV
added 2026/06/05 12:53 a.m.9 views

MAL-2026-5267 Malicious code in wrangler-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d2085fa4916157b99799df085aa11e3d29bdb9a47f5798c85375b1bfdf8bd7e Package name wrangler-deploy is close to Cloudflare's official wrangler CLI, which raises confusion-risk concerns for developers who may install it...

6.2AI score
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/05/04 12:0 a.m.29 views

PT-2026-37203

Name of the Vulnerable Software and Affected Versions Pelican versions 7.21.0 through 7.21.4 Pelican versions 7.22.0 through 7.22.2 Pelican versions 7.23.0 through 7.23.2 Pelican versions 7.24.0 through 7.24.1 Description A privilege escalation issue exists in the Web User Interface WebUI that...

9CVSS5.8AI score0.0032EPSS
Exploits0References7
GithubExploit
GithubExploit
added 2026/03/05 6:37 a.m.153 views

Blueprint-POC

Sales-to-Delivery Agent Orchestration System - POC Phase 1...

5.9AI score
Exploits0
EUVD
EUVD
added 2025/12/31 6:30 p.m.5 views

EUVD-2025-206033

A local privilege escalation vulnerability exists in SevenCs ORCA G2 2.0.1.35 EC2007 Kernel v5.22. The flaw is a Time-of-Check Time-of-Use TOCTOU race condition in the license management logic. The regService process, which runs with SYSTEM privileges, creates a fixed directory and writes files...

7.2AI score0.0014EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.6 views

SevenCs ORCA G2 安全漏洞

SevenCs ORCA G2 is an electronic charting system from SevenCs, Germany. A security vulnerability exists in SevenCs ORCA G2 version 2.0.1.35, which originates from the regService process applying a security descriptor without an explicitly configured DACL, and could result in system interruption,...

7.8CVSS6.4AI score0.0013EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.11 views

EUVD-2023-40367

Malicious code in bioql PyPI...

7.2CVSS7.5AI score0.01938EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2023-40388

Malicious code in bioql PyPI...

8.8CVSS8.9AI score0.0199EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:47 a.m.5 views

CVE-2023-30262

An issue found in MIM software Inc MIM License Server and MIMpacs services v.6.9 thru v.7.0 fixed in v.7.0.10 allows a remote unauthenticated attacker to execute arbitrary code via the RMI Registry service...

8.8CVSS8.1AI score0.00843EPSS
Exploits0References1
The Hacker News
The Hacker News
added 2024/10/22 2:12 p.m.59 views

Security Flaw in Styra's OPA Exposes NTLM Hashes to Remote Attackers

Details have emerged about a now-patched security flaw in Styra's Open Policy Agent OPA that, if successfully exploited, could have led to leakage of New Technology LAN Manager NTLM hashes. "The vulnerability could have allowed an attacker to leak the NTLM credentials of the OPA server's local us...

8.8CVSS7.4AI score0.11871EPSS
Exploits0
NVD
NVD
added 2024/10/08 6:15 p.m.37 views

CVE-2024-43532

Remote Registry Service Elevation of Privilege Vulnerability...

8.8CVSS0.11871EPSS
Exploits0References1
OSV
OSV
added 2024/10/08 6:15 p.m.9 views

CVE-2024-43532

Remote Registry Service Elevation of Privilege Vulnerability...

8.8CVSS5.8AI score0.11871EPSS
Exploits0References1
CVE
CVE
added 2024/10/08 5:35 p.m.107 views

CVE-2024-43532

CVE-2024-43532 is a Remote Registry Service Elevation of Privilege vulnerability with a documented exploit path in a private GitHub post, alleging interception of NTLM data via RPC_A uthon level CONNECT and a Machine‑in‑the‑Middle attack against advapi32.dll behavior. Affected: Windows 10/11 and ...

8.8CVSS8.7AI score0.11871EPSS
Exploits0References1Affected Software15
Vulnrichment
Vulnrichment
added 2024/10/08 5:35 p.m.28 views

CVE-2024-43532 Remote Registry Service Elevation of Privilege Vulnerability

...

8.8CVSS7.2AI score0.11871EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/08 5:35 p.m.28 views

CVE-2024-43532 Remote Registry Service Elevation of Privilege Vulnerability

...

8.8CVSS0.11871EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2024/10/08 7:0 a.m.25 views

Remote Registry Service Elevation of Privilege Vulnerability

...

8.8CVSS7.1AI score0.11871EPSS
Exploits0
CNNVD
CNNVD
added 2024/10/08 12:0 a.m.4 views

Microsoft Windows Remote Registry Service 安全漏洞

Microsoft Windows Remote Registry Service is an RPC-based client/server protocol from Microsoft Corporation USA for remotely managing hierarchical data repositories like the Windows Registry . A security vulnerability exists in Microsoft Windows Remote Registry Service. An attacker could exploit...

8.8CVSS6.8AI score0.11871EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/08 12:0 a.m.50 views

KB5044306: Windows Server 2008 Security Update (October 2024)

The remote Windows host is missing security update 5044306. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2024-38212, CVE-2024-38261, CVE-2024-38265, CVE-2024-43453, CVE-2024-43549, CVE-2024-43564,...

9CVSS8.2AI score0.66571EPSS
Exploits3References35
Tenable Nessus
Tenable Nessus
added 2024/10/08 12:0 a.m.53 views

KB5044286: Windows 10 LTS 1507 Security Update (October 2024)

The remote Windows host is missing security update 5044286. It is, therefore, affected by multiple vulnerabilities - Remote Desktop Client Remote Code Execution Vulnerability CVE-2024-43599 - Remote Registry Service Elevation of Privilege Vulnerability CVE-2024-43532 - Microsoft WDAC OLE DB...

8.8CVSS8.5AI score0.66571EPSS
Exploits2References35
Rows per page
Query Builder