Lucene search
+L

4925 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/21 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2023-6955

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A missing authorization check vulnerability exists in GitLab Remote Development affecting all versions prior to 16.5.6, 16.6 prior to 16.6.4 and 16.7 prior to...

6.6CVSS6.1AI score0.00552EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/08/15 9:28 a.m.19 views

CVE-2025-55345

Using Codex CLI in workspace-write mode inside a malicious context repo, directory, etc could lead to arbitrary file overwrite and potentially remote code execution due to symlinks being followed outside the allowed current working directory...

8.8CVSS8.2AI score0.00838EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/13 6:29 p.m.18 views

CVE-2025-25229

Omnissa Workspace ONE UEM contains a Server-Side Request Forgery SSRF Vulnerability. A malicious actor with user privileges may be able to access restricted internal system information, potentially enabling enumeration of internal network resources...

5.4CVSS7.2AI score0.00191EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/13 9:15 a.m.9 views

CVE-2025-55345

Using Codex CLI in workspace-write mode inside a malicious context repo, directory, etc could lead to arbitrary file overwrite and potentially remote code execution due to symlinks being followed outside the allowed current working directory...

8.8CVSS0.00838EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/13 8:55 a.m.44 views

CVE-2025-55345

CVE-2025-55345 concerns OpenAI Codex CLI when used in a restricted workspace-write sandbox. The issue arises because symlinks are followed outside the allowed current working directory in a malicious context (repo/directory), enabling arbitrary file overwrite and potentially remote code execution...

8.8CVSS8.1AI score0.00838EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/08/13 8:55 a.m.5 views

CVE-2025-55345 Unsafe symlink following in restricted workspace-write sandbox leads to RCE

Using Codex CLI in workspace-write mode inside a malicious context repo, directory, etc could lead to arbitrary file overwrite and potentially remote code execution due to symlinks being followed outside the allowed current working directory...

8.8CVSS8.1AI score0.00838EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/13 8:55 a.m.18 views

CVE-2025-55345 Unsafe symlink following in restricted workspace-write sandbox leads to RCE

Using Codex CLI in workspace-write mode inside a malicious context repo, directory, etc could lead to arbitrary file overwrite and potentially remote code execution due to symlinks being followed outside the allowed current working directory...

8.8CVSS0.00838EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/13 8:55 a.m.11 views

CVE-2025-55345 Unsafe symlink following in restricted workspace-write sandbox leads to RCE

Using Codex CLI in workspace-write mode inside a malicious context repo, directory, etc could lead to arbitrary file overwrite and potentially remote code execution due to symlinks being followed outside the allowed current working directory...

8.8CVSS6.7AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/08/13 12:00 a.m.22 views

PT-2025-32971 · Codex Cli · Codex Cli

Name of the Vulnerable Software and Affected Versions: Codex CLI affected versions not specified Description: Using Codex CLI in workspace-write mode within a malicious context repository, directory, etc. may lead to arbitrary file overwrite and potentially remote code execution. This occurs...

8.8CVSS7.9AI score0.00838EPSS
SaveExploits0References8
GithubExploit
GithubExploit
added 2025/08/12 9:05 a.m.145 views

Exploit for CVE-2025-25231

CVE-2025-25231 Nuclei Template این تمپلیت برای ابزار Nuclei...

7.5CVSS9.6AI score0.20348EPSS
SaveExploits1
NVD
NVD
added 2025/08/11 7:15 p.m.18 views

CVE-2025-25229

Omnissa Workspace ONE UEM contains a Server-Side Request Forgery SSRF Vulnerability. A malicious actor with user privileges may be able to access restricted internal system information, potentially enabling enumeration of internal network resources...

5.4CVSS0.00191EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/11 6:24 p.m.25 views

CVE-2025-25229

Omnissa Workspace ONE UEM contains a Server-Side Request Forgery SSRF Vulnerability. A malicious actor with user privileges may be able to access restricted internal system information, potentially enabling enumeration of internal network resources...

5.4CVSS0.00191EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/11 6:24 p.m.40 views

CVE-2025-25229

Omnissa Workspace ONE UEM is affected by a Server-Side Request Forgery (SSRF) vulnerability (CVE-2025-25229). The issue could allow a user with privileges to access restricted internal information and enumerate internal network resources via API endpoints. The connected documents corroborate the ...

5.4CVSS7.1AI score0.00191EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/11 6:12 p.m.35 views

CVE-2025-25231

Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests read-only to restricted API endpoints...

7.5CVSS0.20348EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/08/11 6:12 p.m.17 views

EUVD-2025-24160

Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests read-only to restricted API endpoints...

7.5CVSS6.8AI score0.20348EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/08/11 6:12 p.m.6 views

CVE-2025-25231

Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests read-only to restricted API endpoints...

7.5CVSS6.8AI score0.20348EPSS
SaveExploits1References2
CVE
CVE
added 2025/08/11 6:12 p.m.77 views

CVE-2025-25231

CVE-2025-25231 affects Omnissa Workspace ONE UEM (VMware). The issue is a Secondary Context Path Traversal in restricted API endpoints that can disclose sensitive information via crafted GET requests (read-only). Sources describe a path traversal vulnerability leading to leakage of confidential d...

7.5CVSS6.8AI score0.20348EPSS
SaveIn wildExploits1References2
CNNVD
CNNVD
added 2025/08/11 12:00 a.m.11 views

Omnissa Workspace ONE UEM 安全漏洞

Omnissa Workspace ONE UEM is an endpoint management platform from Omnissa USA. A security vulnerability exists in Omnissa Workspace ONE UEM that stems from server-side request forgery and could lead to internal network resource enumeration...

5.4CVSS6.6AI score0.00191EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/11 12:00 a.m.9 views

PT-2025-32561

Name of the Vulnerable Software and Affected Versions Omnissa Workspace ONE UEM affected versions not specified Description Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted...

7.5CVSS6.9AI score0.20348EPSS
SaveExploits1References18
Positive Technologies
Positive Technologies
added 2025/08/11 12:00 a.m.13 views

PT-2025-32560 · Omnissa · Workspace One Uem

Name of the Vulnerable Software and Affected Versions: Omnissa Workspace ONE UEM affected versions not specified Description: Omnissa Workspace ONE UEM contains a Server-Side Request Forgery SSRF vulnerability. A malicious actor with user privileges may be able to access restricted internal syste...

5.4CVSS6.9AI score0.00191EPSS
SaveExploits0References7
Rows per page
Query Builder