Lucene search
+L

5 matches found

Packet Storm
Packet Storm
•added 2026/10/27 12:00 a.m.•18 views

Lobster_pro 4.12.12-LTS Token Replay / Privilege Escalation

Lobsterpro version 4.12.12-LTS and potentially other versions prior to 25.1.3 suffer from a privilege escalation vulnerability due to allowing use of non-privileged access to achieve administrative access. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Privilege escalation via request replaying ...

5.6CVSS6AI score0.00183EPSS
SaveExploits1
CVE
CVE
•added 2026/10/26 2:41 p.m.•18 views

CVE-2026-3322

The software Lobster_pro is vulnerable to a privilege escalation issue due to improper permission checks . Attackers can interact with endpoints that should strictly require administrative privileges, potentially leading to high confidentiality impact. This vulnerability affects Lobster_pro versi...

5.6CVSS5.8AI score0.00183EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/10/26 2:41 p.m.•12 views

CVE-2026-3322 Privilege escalation via request replaying in Lobster_pro

Due to improper permission checks in Lobsterpro, attackers are able to interact with endpoints that should require administrative privileges. This issue affects Lobsterpro version 4.12.12-LTS and potentially other versions prior to 25.1.3...

5.6CVSS5.8AI score0.00183EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/10/26 2:41 p.m.•31 views

CVE-2026-3322 Privilege escalation via request replaying in Lobster_pro

Due to improper permission checks in Lobsterpro, attackers are able to interact with endpoints that should require administrative privileges. This issue affects Lobsterpro version 4.12.12-LTS and potentially other versions prior to 25.1.3...

5.6CVSS0.00183EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/06/07 12:00 a.m.•9 views

PT-2023-19631

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description An attacker with local access to the machine could record the traffic, which could allow them to resend requests without the server authenticating that the user or session are valid...

3.3CVSS5.3AI score0.00132EPSS
SaveExploits0References5
Rows per page
Query Builder