8422 matches found
Raisecomm RAX701-GC Series
RISK EVALUATION Successful exploitation of this vulnerability could allow a remote attacker to bypass authentication and gain unauthenticated root shell access to the affected devices. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of...
EUVD-2025-35111
Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 commit 52e4b43, on 2025-05-17 allows attackers who can submit samples to cause incomplete or missing behavioral analysis reports by generating deeply nested or oversized behavior data that trigger MongoDB BSON limits o...
PT-2025-55111
Уязвимость «Корпоративная информационная система электронного документооборота «CompanyMedia» связана с недостатками механизма формирования отчетов об ошибках. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, раскрыть защищаемую информацию...
CVE-2025-61301: Uncontrolled Resource Consumption
Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 commit 52e4b43, on 2025-05-17 allows attackers who can submit samples to cause incomplete or missing behavioral analysis reports by generating deeply nested or oversized behavior data that trigger MongoDB BSON limits o...
CAPE 安全漏洞
CAPE is a malware sandbox by the individual developer Kevin OReilly. CAPE has a security vulnerability that stems from an analysis denial vulnerability in reporting/mongodb.py and reporting/jsondump.py, which allows an attacker to submit samples to generate deeply nested or oversized behavioral...
PT-2025-54835
Уязвимость инструмента для автоматической синхронизации приложения с банком Gocardless связана с недостатками механизма формирования отчетов об ошибках. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный доступ к защищаемой информации...
CVE-2025-61301
Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 commit 52e4b43, on 2025-05-17 allows attackers who can submit samples to cause incomplete or missing behavioral analysis reports by generating deeply nested or oversized behavior data that trigger MongoDB BSON limits o...
PT-2025-42814
Name of the Vulnerable Software and Affected Versions CAPEv2 versions prior to commit 52e4b43 on 2025-05-17 Description The software contains a flaw that allows attackers who can submit samples to cause incomplete or missing behavioral analysis reports. This occurs by generating deeply nested or...
Exploit for Observable Discrepancy in Openbsd Openssh
Advanced Exploit Finder A comprehensive penetration testing t...
CVE-2025-55694
Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2025-55692
Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
bluescan
BlueScan - Bluetooth Security Scanner A comprehensive Bluetoo...
WordPress NikanWP WooCommerce Reporting plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin NikanWP WooCommerce Reporting versions = 1.0.0...
PT-2025-43831
Name of the Vulnerable Software and Affected Versions NikanWP WooCommerce Reporting versions prior to 1.0.1 Description A Cross-Site Request Forgery CSRF issue exists due to missing or incorrect nonce validation a unique token used to prevent forged requests on a function. This allows...
EUVD-2025-34329
Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
EUVD-2025-34327
Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2025-55692
Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2025-55692
Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally...