Lucene search
K

14 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.21 views

EUVD-2025-22726

Malicious code in bioql PyPI...

8.8CVSS6.5AI score0.00408EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-53724

Malicious code in bioql PyPI...

9.9CVSS9.6AI score0.09328EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/07/25 12:0 a.m.5 views

PT-2025-30898 · Unknown · Simplehelp

Name of the Vulnerable Software and Affected Versions: Simplehelp versions prior to 5.5.12 Description: The software contains an inclusion of functionality from an untrusted control sphere issue. Recommendations: Update Simplehelp to version 5.5.12 or later...

8.3CVSS6.4AI score0.00408EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/07/25 12:0 a.m.4 views

PT-2025-30899 · Unknown · Simplehelp

Name of the Vulnerable Software and Affected Versions: Simplehelp versions prior to 5.5.11 Description: The software contains a Cross-Site Request Forgery CSRF flaw. Recommendations: Update Simplehelp to version 5.5.11 or later...

8.8CVSS6.6AI score0.00165EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 7:5 a.m.5 views

CVE-2024-57728

SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file i.e. zip slip. This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user...

7.2CVSS7.9AI score0.07549EPSS
Exploits0References1
VulnCheck KEV
VulnCheck KEV
added 2025/04/17 12:0 a.m.3 views

VulnCheck KEV: CVE-2024-57728

SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file i.e. zip slip. This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user...

7.2CVSS7.6AI score0.07549EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/15 12:0 a.m.232 views

CVE-2024-57728

SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file i.e. zip slip. This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user...

0.07549EPSS
Exploits0References2
CVE
CVE
added 2025/01/15 12:0 a.m.207 views

CVE-2024-57728

CVE-2024-57728 affects SimpleHelp remote support software versions 5.5.7 and earlier. The flaw allows an admin to upload arbitrary files via a crafted zip (zip slip), enabling remote code execution on the SimpleHelp server when exploited in the admin context. Connected documents describe an attac...

7.2CVSS7.9AI score0.07549EPSS
In wildExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/15 12:0 a.m.2 views

PT-2025-1274

Name of the Vulnerable Software and Affected Versions SimpleHelp remote support software versions 5.5.7 and before Description The issue allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file, also known as a zip slip. This can be exploited to...

9CVSS9.3AI score0.07549EPSS
Exploits0References85
Vulnrichment
Vulnrichment
added 2025/01/15 12:0 a.m.12 views

CVE-2024-57728

SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file i.e. zip slip. This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user...

7.4AI score0.07549EPSS
Exploits0References2
CVE
CVE
added 2025/01/15 12:0 a.m.164 views

CVE-2024-57726

CVE-2024-57726 affects SimpleHelp remote support software, versions 5.5.7 and earlier. The issue allows low-privilege technicians to create API keys with excessive permissions, enabling privilege escalation to the server admin role. Public disclosures and multiple security feeds corroborate the h...

9.9CVSS7.2AI score0.09328EPSS
In wildExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/01/15 12:0 a.m.95 views

CVE-2024-57727

SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing...

9.1CVSS8.2AI score0.95151EPSS
In wildExploits2References3
Vulnrichment
Vulnrichment
added 2025/01/15 12:0 a.m.14 views

CVE-2024-57726

SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role...

9.8AI score0.09328EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/01/15 12:0 a.m.22 views

CVE-2024-57727

SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing...

0.95151EPSS
Exploits2References2
Rows per page
Query Builder