Lucene search
+L

811 matches found

BDU FSTEC
BDU FSTEC
added 2026/09/20 11:41 p.m.50 views

The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

9CVSS6.1AI score0.02695EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/20 2:14 p.m.10 views

ranger

ranger セキュリティ専門家がリモートのMicrosoft Windowsベースのシステムにアクセスし、操作するためのツール。 このプロジェクトは、私たちは弓や矢を発明したわけではなく、単により効率的な使用方法を考案したという考え方に基づいています。 Rangerはコマンドライン駆動の攻撃・ペネトレーションテストツールであり、インスタンス化されたカタパルトサーバーを使用してWindowsシステムに対して機能を提供する能力を持っています。ユーザーが資格情報またはハッシュセット(NTLM、LM、LM:NTLM)を持っている限り、信頼関係にあるシステムにアクセスできます。...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 9:41 a.m.12 views

ms08-067.py

📖 概要 このリポジトリには、MS08-067 Windows Server Service の脆弱性(CVE-2008-4250)に対するいくつかの Python スクリプトの実装が含まれています。これは、古い Windows システムに影響を与える古典的なリモートコード実行の脆弱性です。 🛠️ インストールと使い方 前提条件 Python3 認可されたテスト環境 🤔 使用方法? まず、シェルまたは Cmd を開きます。その後、 👉 次のコマンドを実行します: root@kitploit: git clone...

10CVSS8.6AI score0.98751EPSS
SaveExploits18References1
Tenable Nessus
Tenable Nessus
added 2026/08/25 12:00 a.m.12 views

Wazuh Server 4.6.0 < 4.14.6 SQL Injection (CVE-2026-49392)

The version of Wazuh Server on the remote host is at least 4.6.0 and prior to 4.14.6. It is, therefore, affected by a SQL injection vulnerability: - DB::getFile and DB::searchFile concatenate a monitored file path into SQLite row filters without proper escaping on non-Windows systems. A local use...

5.3CVSS5.5AI score0.00289EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/04/17 10:45 a.m.20 views

CVE-2026-5131 Server-Side Request Forgery in GREENmod

GREENmod uses named pipes for communication between plugins, the web portal, and the system service, but the access control lists for these pipes are configured incorrectly. This allows an attacker to communicate with the stream and upload any XML or JSON file, which will be processed by the name...

6.9CVSS5.7AI score0.00426EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/17 10:45 a.m.9 views

CVE-2026-5131

GREENmod uses named pipes for communication between plugins, the web portal, and the system service, but the access control lists for these pipes are configured incorrectly. This allows an attacker to communicate with the stream and upload any XML or JSON file, which will be processed by the name...

6.9CVSS5.7AI score0.00426EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/04/17 12:00 a.m.25 views

PT-2026-33439

GREENmod uses named pipes for communication between plugins, the web portal, and the system service, but the access control lists for these pipes are configured incorrectly. This allows an attacker to communicate with the stream and upload any XML or JSON file, which will be processed by the name...

6.9CVSS5.7AI score0.00426EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/04/14 12:00 a.m.25 views

PT-2026-33497

Name of the Vulnerable Software and Affected Versions Microsoft-signed third-party bootloader affected versions not specified Description A security-feature bypass allows attackers to affect the system. A Microsoft-signed third-party bootloader completely skips signature verification when loading...

6.2CVSS6.5AI score0.00089EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2026/04/14 12:00 a.m.24 views

Microsoft Function Discovery Service 安全漏洞

The Microsoft Function Discovery Service is a background service provided by Microsoft Corporation. There are security vulnerabilities associated with the Microsoft Function Discovery Service. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and versio...

7CVSS5.8AI score0.01116EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/04/11 5:08 p.m.128 views

infosec-notebook

infosec-notebook Personal cybersecurity notes and references...

5.8AI score
SaveExploits0
NVD
NVD
added 2026/04/10 5:16 a.m.17 views

CVE-2026-4482

The installer certificate files in the …/bootstrap/common/ssl folder do not seem to have restricted permissions on Windows systems users have read and execute access. For the client.key file in particular, this could potentially lead to exploits, as this exposes agent identity material to any...

6.8CVSS0.00075EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/04/10 4:22 a.m.5 views

CVE-2026-4482 Insight Agent Private Key Information Disclosure via Inherited File Permissions

The installer certificate files in the …/bootstrap/common/ssl folder do not seem to have restricted permissions on Windows systems users have read and execute access. For the client.key file in particular, this could potentially lead to exploits, as this exposes agent identity material to any...

6.8CVSS5.9AI score0.00075EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/07 6:31 p.m.16 views

EUVD-2025-209270

A flaw was found in libssh. This vulnerability allows local man-in-the-middle attacks, security downgrades of SSH Secure Shell connections, and manipulation of trusted host information, posing a significant risk to the confidentiality, integrity, and availability of SSH communications via an...

7.8CVSS6.5AI score0.00129EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/03/17 6:55 p.m.17 views

CVE-2025-15584

Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow an unprivileged user to trigger an integer overflow within the filter communication port, leading to a Blue-Screen-of-Death...

6.8CVSS5.8AI score0.00109EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/03/12 12:00 a.m.12 views

The vulnerability of the GDI component in Windows operating systems, which allows a hacker to execute arbitrary code

The vulnerability of the GDI component in Windows operating systems is related to the use of an insecure lookup path. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS6AI score0.00496EPSS
SaveExploits0References2Affected Software21
HackRead
HackRead
added 2026/03/03 6:39 p.m.17 views

Fake Zoom and Google Meet Pages Trick Users Into Installing Monitoring Tool

Fake Zoom and Google Meet pages trick users into installing a monitoring software on Windows systems through phishing links and fake updates...

5.9AI score
SaveExploits0
Packet Storm
Packet Storm
added 2026/02/25 12:00 a.m.202 views

📄 MS‑EVEN TOCTOU ElfrBackupELFW Arbitrary File Write

This module exploits a Time-of-Check Time-of-Use TOCTOU vulnerability in the MS-EVEN protocol Windows Event Log service. A low-privileged authenticated user can write arbitrary files to a remote Windows machine by abusing the ElfrBackupELFW RPC function. This module strictly follows the MS-EVEN...

7.5CVSS5.8AI score0.01152EPSS
SaveExploits1
CVE
CVE
added 2026/02/18 1:43 p.m.25 views

CVE-2026-2464

The CVE describes a path traversal vulnerability in the AMR Printer Management 1.01 Beta web service that is accessible without authentication and runs with elevated privileges. An attacker can supply crafted path traversal sequences to the web management interface to read arbitrary files on the ...

8.7CVSS6AI score0.00793EPSS
SaveExploits0References1
CNVD
CNVD
added 2026/02/11 12:00 a.m.18 views

IBM Db2 Denial of Service Vulnerability (CNVD-2026-14669)

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM Db2 suffers from a denial of service vulnerability that originates from a possible trap when...

7.5CVSS6.9AI score0.00372EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/10 12:00 a.m.19 views

Microsoft Windows Ancillary Function Driver for WinSock 资源管理错误漏洞

The Microsoft Windows Ancillary Function Driver for WinSock is a accessibility driver for Winsock developed by Microsoft Corporation. There is a resource management vulnerability present in the Microsoft Windows Ancillary Function Driver for WinSock. Attackers can exploit this vulnerability to ga...

7CVSS5.8AI score0.02587EPSS
SaveExploits0References1
Rows per page
Query Builder