8968 matches found
CVE-2026-0776
CVE-2026-0776 - Discord Client Uncontrolled Search Path Element Summary This repository documents CVE-2026-0776, a local code execution issue affecting the Discord Desktop Client on Windows. The vulnerability is related to unsafe module resolution behavior in Node.js-based components, which may...
CVE-2025-27237
CVE-2025-27237 Vulnerabilidade de escalonamento local de privilégios no Zabbix Agent/Agent2 para Windows via sequestro de arquivo de configuração OpenSSL. Visão Geral Campo| Valor ---|--- ID CVE| CVE-2025-27237 CVSS v4.0| 7.3 ALTO CWE| CWE-427: Elemento de Caminho de Pesquisa Não Controlado Tipo|...
CVE-2024-32019-ndsudo
Die ndsudo-Schwachstelle ermöglicht es einem Angreifer, Root-Berechtigungen zu erlangen, indem er einen nicht vertrauenswürdigen Suchpfad im ndsudo-Tool ausnutzt, das Teil des Netdata-Agents ist. Dies kann die Ausführung beliebiger Programme mit erhöhten Rechten ermöglichen, wenn der Angreifer ei...
CVE-2018-1058
CVE-2018-1058 — PostgreSQL सर्च पथ प्रदर्शन यह रिपॉजिटरी अंतिम रिपोर्ट और निम्नलिखित के लिए पुनरुत्पादन कलाकृतियों को शामिल करती है: CVE-2018-1058: अनियंत्रित सर्च पथ के माध्यम से PostgreSQL में विशेषाधिकार वृद्धि उद्देश्य एक सुरक्षित स्थानीय Docker वातावरण का उपयोग करके CVE-2018-1058 के पीछे के...
CVE-2025-69599
CVE-2025-69599 लेखक: Rafael José Núñez Gulías कंपनी: Iberian Var Group प्रभावित उत्पाद: RayVentory Scan Engine 12.6 Update 8 और पिछले संस्करण Raynet सलाह: RSEC200965 rvia Raynet में अनियंत्रित खोज पथ तत्व Uncontrolled Search Path Element समस्या के लिए संवेदनशील है। जब साझा ऑब्जेक्ट लोड करते हैं औ...
CVE-2010-5230
CVE-2010-5230 Mehrere Sicherheitslücken aufgrund nicht vertrauenswürdiger Suchpfade in MicroStation 7.1 erlauben lokalen Benutzern, Privilegien zu erlangen, indem sie eine Trojaner-Datei 1 mptools.dll, 2 baseman.dll, 3 wintab32.dll oder 4 wintab.dll im aktuellen Arbeitsverzeichnis platzieren, wie...
DLL_Injection_On_VLC
Iniezione di DLL e CVE-2010-3124 Panoramica 🌱 Questo progetto esplora il tema dell'iniezione di DLL Dynamic Link Library e si concentra in particolare sulla CVE-2010-3124. La CVE-2010-3124 si riferisce a una vulnerabilità di percorso di ricerca non attendibile trovata in VLC Media Player versione...
CVE-2024-6473-PoC
CVE-2024-6473 PoC Yandex Browser per Desktop prima della versione 24.7.1.380 presenta una vulnerabilità di DLL Hijacking perché viene utilizzato un percorso di ricerca non attendibile. Versione del browser vulnerabile !IMPORTANT Durante l'installazione, Internet deve essere disconnesso, altriment...
CVE-2026-75768
Substance3D - Painter is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a vict...
EUVD-2026-65687
Substance3D - Painter is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a vict...
CVE-2026-75768 Substance3D - Painter | Untrusted Search Path (CWE-426)
Substance3D - Painter is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a vict...
CVE-2026-75768
Adobe Substance3D - Painter is affected by an Untrusted Search Path vulnerability (CWE-426) that can lead to arbitrary code execution in the context of the current user. An attacker must convince a victim to open a malicious file , which triggers the exploitation path. The CVSS v3.1 score is 7.8 ...
CVE-2024-0670
CVE-2024-0670 – Lokale Privilegienausweitung im CheckMK Agent PowerShell PoC Zusammenfassung Dieses Repository präsentiert einen unabhängigen PowerShell-Proof-of-Concept für CVE-2024-0670 , eine Windows-Schwachstelle zur lokalen Privilegienausweitung im CheckMK Agent. Die Schwachstelle ermöglicht...
CVE-2026-78680 NLTK before 3.10.3 Arbitrary Code Execution via Graphviz dot Binary
NLTK versions before 3.10.3 fail to use validated absolute paths when invoking the Graphviz dot binary in dependencygraph.dot2img and AlignedSent.reprsvg, allowing attackers to execute arbitrary code by placing a malicious dot binary in the search path or current working directory. Attackers can...
CVE-2024-32019-POC
⚠️ CVE-2024-32019 - PoC 📌 Versioni Affette = v1.45.0, = v1.44.0-60, v1.45.0-169 🛠️ Prova di Concetto CVE-2024-32019 — escalation dei privilegi locale di ndsudo tramite percorso di ricerca non attendibile. 🔧 Compila l'exploit root@kitploit: x8664-linux-gnu-gcc -o nvme exploit.c -static 📤...
CVE-2024-50986
CVE-2024-50986: DLL-Hijacking-Exploit für Clementine Beschreibung: Ein Problem in Clementine v.1.3.1 ermöglicht einem lokalen Angreifer, beliebigen Code über eine manipulierte DLL-Datei auszuführen. Betroffene Version: Clementine v.1.3.1 Forscher: Utkarsh r1971d3 LinkedIn NIST CVE-Link:...
CVE-2026-78155
CVE-2026-78155 is a critical untrusted search path vulnerability in the StackGres operator that enables privilege escalation . A low-privilege tenant who owns a database can exploit this flaw to gain administrator privileges . The CVSS 3.1 score is 9.9 (Critical) with a network attack vector, low...
CVE-2026-78155 Untrusted Search Path in StackGres
privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privileges...