https://vulnogram.org/ Most recent CVEs assigned by Pentraze Cybersecurity (pentraze). https://vulnogram.org/seaview/icons/pentraze.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-4556 https://vulnogram.org/CVE-2026-4556 Exam4 is affected by a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper, which communicates with the application via XPC. The [ConsoleLogHelper copyConsoleIntoFileFromStartDate:] method executes a syslog command… High Mon, 28 Sep 2026 14:29:41 GMT https://vulnogram.org/CVE-2025-4960 https://vulnogram.org/CVE-2025-4960 The com.epson.InstallNavi.helper tool, deployed with the EPSON printer driver installer, contains a local privilege escalation vulnerability due to multiple flaws in its implementation. It fails to properly authenticate clients over the XPC protocol… High Thu, 19 Feb 2026 01:37:22 GMT https://vulnogram.org/CVE-2024-1244 https://vulnogram.org/CVE-2024-1244 Improper input validation in the OSSEC HIDS agent for Windows prior to version 3.8.0 allows an attacker in with control over the OSSEC server or in possession of the agent's key to configure the agent to connect to a malicious UNC path. This results… Critical Network Exploitable Wed, 11 Jun 2025 02:59:06 GMT https://vulnogram.org/CVE-2024-1243 https://vulnogram.org/CVE-2024-1243 Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine a… Critical Network Exploitable Wed, 11 Jun 2025 01:15:13 GMT https://vulnogram.org/CVE-2024-9062 https://vulnogram.org/CVE-2024-9062 The Archify application contains a local privilege escalation vulnerability due to insufficient client validation in its privileged helper tool, com.oct4pie.archifyhelper, which is exposed via XPC. Archify follows the "factored applications" model, d… High Tue, 10 Jun 2025 23:25:30 GMT https://vulnogram.org/CVE-2025-1055 https://vulnogram.org/CVE-2025-1055 A vulnerability in the K7RKScan.sys driver, part of the K7 Security Anti-Malware suite, allows a local low-privilege user to send crafted IOCTL requests to terminate a wide range of processes running with administrative or system-level privileges, wi… Medium Tue, 10 Jun 2025 23:23:19 GMT https://vulnogram.org/CVE-2024-8270 https://vulnogram.org/CVE-2024-8270 The macOS Rocket.Chat application is affected by a vulnerability that allows bypassing Transparency, Consent, and Control (TCC) policies, enabling the exploitation or abuse of permissions specified in its entitlements (e.g., microphone, camera, autom… Medium Tue, 10 Jun 2025 23:22:10 GMT https://vulnogram.org/CVE-2024-7457 https://vulnogram.org/CVE-2024-7457 The ws.stash.app.mac.daemon.helper tool contains a vulnerability caused by an incorrect use of macOS’s authorization model. Instead of validating the client's authorization reference, the helper invokes AuthorizationCopyRights() using its own privile… High Tue, 10 Jun 2025 23:19:47 GMT https://vulnogram.org/CVE-2024-8272 https://vulnogram.org/CVE-2024-8272 The com.uaudio.bsd.helper service, responsible for handling privileged operations, fails to implement critical client validation during XPC inter-process communication (IPC). Specifically, the service does not verify the code requirements, entitlemen… High Mon, 25 Nov 2024 17:52:14 GMT https://vulnogram.org/CVE-2024-7915 https://vulnogram.org/CVE-2024-7915 The application Sensei Mac Cleaner contains a local privilege escalation vulnerability, allowing an attacker to perform multiple operations as the root user. These operations include arbitrary file deletion and writing, loading and unloading daemons,… High Mon, 25 Nov 2024 17:45:39 GMT https://vulnogram.org/CVE-2024-7062 https://vulnogram.org/CVE-2024-7062 Nimble Commander suffers from a privilege escalation vulnerability due to the server (info.filesmanager.Files.PrivilegedIOHelperV2) performing improper/insufficient validation of a client’s authorization before executing an operation. Consequently, i… High Fri, 26 Jul 2024 11:26:31 GMT https://vulnogram.org/CVE-2024-0916 https://vulnogram.org/CVE-2024-0916 Unauthenticated file upload allows remote code execution. This issue affects UvDesk Community: from 1.0.0 through 1.1.3. Critical Network Exploitable Thu, 25 Apr 2024 23:02:20 GMT https://vulnogram.org/CVE-2024-3120 https://vulnogram.org/CVE-2024-3120 A stack-buffer overflow vulnerability exists in all versions of sngrep since v1.4.1. The flaw is due to inadequate bounds checking when copying 'Content-Length' and 'Warning' headers into fixed-size buffers in the sip_validate_packet and sip_parse_ex… Critical Network Exploitable Tue, 09 Apr 2024 23:55:57 GMT https://vulnogram.org/CVE-2024-3119 https://vulnogram.org/CVE-2024-3119 A buffer overflow vulnerability exists in all versions of sngrep since v0.4.2, due to improper handling of 'Call-ID' and 'X-Call-ID' SIP headers. The functions sip_get_callid and sip_get_xcallid in sip.c use the strncpy function to copy header conten… Critical Network Exploitable Tue, 09 Apr 2024 23:55:43 GMT