Lucene search
+L

278135 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/01 12:53 p.m.7 views

Malicious code in nbitcoin.unified (NuGet)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/01 12:53 p.m.10 views

Malicious code in bybitapi.net (NuGet)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0
NVD
NVD
added 2025/12/01 10:15 a.m.13 views

CVE-2025-13819

Open redirect in the web server component of MiR Robot and Fleet software allows a remote attacker to redirect users to arbitrary external websites via a crafted parameter, facilitating phishing or social engineering attacks...

6.1CVSS0.00233EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/01 9:41 a.m.31 views

CVE-2025-13819

MiR Robot and Fleet software’s web server component is affected by an open redirect vulnerability (CVE-2025-13819). The issue allows a remote attacker to redirect users to arbitrary external websites via a crafted parameter, enabling phishing or social-engineering attacks. The available documents...

6.1CVSS6.5AI score0.00233EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/01 9:41 a.m.5 views

CVE-2025-13819 Open redirect in web server of MiR robots and MiR fleet

Open redirect in the web server component of MiR Robot and Fleet software allows a remote attacker to redirect users to arbitrary external websites via a crafted parameter, facilitating phishing or social engineering attacks...

6.1CVSS6.5AI score0.00233EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/01 9:41 a.m.20 views

CVE-2025-13819 Open redirect in web server of MiR robots and MiR fleet

Open redirect in the web server component of MiR Robot and Fleet software allows a remote attacker to redirect users to arbitrary external websites via a crafted parameter, facilitating phishing or social engineering attacks...

6.1CVSS0.00233EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
added 2025/12/01 12:00 a.m.29 views

BackportBench: A Multilingual Benchmark for Automated Backporting of Patches

Many modern software projects evolve rapidly to incorporate new features and security patches. It is important for users to update their dependencies to safer versions, but many still use older, vulnerable package versions because upgrading can be difficult and may break their existing codebase...

6.9AI score
SaveExploits0
CNNVD
CNNVD
added 2025/12/01 12:00 a.m.12 views

Shirt Pocket SuperDuper! 安全漏洞

Shirt Pocket SuperDuper! is a data backup, disk cloning and recovery tool for macOS from Shirt Pocket. A security vulnerability exists in Shirt Pocket SuperDuper! V.3.10 and earlier versions that originates from a local attacker who can execute arbitrary code via the software update mechanism...

7.8CVSS7.2AI score0.00104EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/12/01 12:00 a.m.24 views

PT-2025-48484

Name of the Vulnerable Software and Affected Versions Shirt Pocket SuperDuper! versions 3.10 and earlier Description An issue exists that allows a local attacker to execute arbitrary code via the software update mechanism. Recommendations Update to a version later than 3.10...

7.8CVSS7.3AI score0.00104EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2025/12/01 12:00 a.m.16 views

PT-2025-48447

Name of the Vulnerable Software and Affected Versions Onaylarım versions 25.09.26.01 through 18112025 Description An improper enforcement of behavioral workflow issue exists in Onaylarım. This allows for functionality misuse. Recommendations Update Onaylarım to a version later than 18112025...

4.3CVSS5.5AI score0.00202EPSS
SaveExploits0References5
OSV
OSV
added 2025/12/01 12:00 a.m.12 views

ASB-A-388034510

Bulletin has no description...

7.8CVSS4.8AI score0.00085EPSS
SaveExploits0
OSV
OSV
added 2025/12/01 12:00 a.m.12 views

CVE-2024-56089

An issue in Technitium through v13.2.2 enables attackers to conduct a DNS cache poisoning attack and inject fake responses by reviving the birthday attack...

7.5CVSS6.8AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/01 12:00 a.m.13 views

PT-2025-48431

Open redirect in the web server component of MiR Robot and Fleet software allows a remote attacker to redirect users to arbitrary external websites via a crafted parameter, facilitating phishing or social engineering attacks...

6.1CVSS6.9AI score0.00233EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/01 12:00 a.m.18 views

CVE-2024-56089

An issue in Technitium through v13.2.2 enables attackers to conduct a DNS cache poisoning attack and inject fake responses by reviving the birthday attack...

0.00315EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/01 12:00 a.m.28 views

ASB-A-289809991

In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege and background activity launch with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.8AI score0.00112EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/01 12:00 a.m.10 views

Mobile Industrial Robots Robots和Mobile Industrial Robots Fleet 安全漏洞

Mobile Industrial Robots Robots and Mobile Industrial Robots Fleet are both products of the Danish company Mobile Industrial Robots.Mobile Industrial Robots Robots is an autonomous mobile robot. Mobile Industrial Robots Robots is an autonomous mobile robot and Mobile Industrial Robots Fleet is a...

6.1CVSS6.6AI score0.00233EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/12/01 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-12638

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Keras version 3.11.3 is affected by a path traversal vulnerability in the keras.utils.getfile function when extracting tar archives. The vulnerability arises...

8CVSS7.9AI score0.00649EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/01 12:00 a.m.27 views

CVE-2025-61228

CVE-2025-61228 affects Shirt Pocket SuperDuper! versions 3.10 and earlier. The issue allows a local attacker to execute arbitrary code via the software update mechanism. The available sources indicate the vulnerability exists in pre-3.11 builds; mitigation is to update to version 3.11 (or later)....

7.8CVSS7.3AI score0.00104EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/01 12:00 a.m.5 views

CVE-2024-56089

An issue in Technitium through v13.2.2 enables attackers to conduct a DNS cache poisoning attack and inject fake responses by reviving the birthday attack...

6.5AI score0.00315EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/01 12:00 a.m.4 views

CVE-2025-61228

An issue in Shirt Pocket SuperDuper! V.3.10 and before allows a local attacker to execute arbitrary code via the software update mechanism...

7.3AI score0.00104EPSS
SaveExploits1References2
Rows per page
Query Builder