Lucene search
K

81 matches found

Exploit DB
Exploit DB
added 2026/05/26 12:0 a.m.41 views

D-Link DSL2600U - 'rom-0' Admin Password Disclosure

Exploit Title: D-Link DSL2600U - 'rom-0' Admin Password Disclosure Date: 2026-05-02 Exploit Author: Amir Hossein Jamshidi Vendor Homepage: https://www.dlink.com Version: DSL-2600U Tested on: ubuntu CVE : N/A Firmware Version: v1.08 from routersploit.libs.lzs.lzs import LZSDecompress import reques...

5.8AI score
Exploits0
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.5 views

Astra Linux - уязвимость в liblivemedia

Live555 version 1.08 does not handle Matroska and Ogg files properly. Sending two consecutive RTSP SETUP commands for the same track causes a Use-After-Free error and results in a crash of the daemon...

6.5CVSS6.8AI score0.00225EPSS
Exploits1References2
NVD
NVD
added 2025/10/22 3:15 p.m.1 views

CVE-2025-52763

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NickDuncan Nifty Backups nifty-backups allows Reflected XSS.This issue affects Nifty Backups: from n/a through = 1.08...

7.1CVSS0.00075EPSS
Exploits0References1
CVE
CVE
added 2025/10/22 2:32 p.m.5 views

CVE-2025-52763

The CVE-2025-52763 entry concerns the NickDuncan Nifty Backups WordPress plugin (

7.1CVSS6AI score0.00075EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/22 2:32 p.m.1 views

CVE-2025-52763 WordPress Nifty Backups plugin <= 1.08 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NickDuncan Nifty Backups nifty-backups allows Reflected XSS.This issue affects Nifty Backups: from n/a through = 1.08...

7.1CVSS6AI score0.00075EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.1 views

WordPress plugin Nifty Backups 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

7.1CVSS6AI score0.00075EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/22 12:0 a.m.3 views

PT-2025-43247

Name of the Vulnerable Software and Affected Versions NickDuncan Nifty Backups versions through 1.08 Description The software contains a flaw related to improper input handling during web page generation, specifically a Reflected Cross-Site Scripting issue. This allows for the injection of...

7.1CVSS6.4AI score0.00075EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2007-5910

Malware in sbrugna...

4.6CVSS6.1AI score0.00045EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2007-6347

Malware in sbrugna...

7.5CVSS6.4AI score0.00577EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-10170

Malware in sbrugna...

7.8CVSS7.6AI score0.00982EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-37013

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.0021EPSS
Exploits0References2
NVD
NVD
added 2025/09/03 6:15 a.m.1 views

CVE-2025-58272

Cross-site request forgery vulnerability exists in Web Caster V130 versions 1.08 and earlier. If a logged-in user views a malicious page created by an attacker, the settings of the product may be unintentionally changed...

3.7CVSS0.00012EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/09/03 5:28 a.m.6 views

CVE-2025-58272

Cross-site request forgery vulnerability exists in Web Caster V130 versions 1.08 and earlier. If a logged-in user views a malicious page created by an attacker, the settings of the product may be unintentionally changed...

3.7CVSS0.00012EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/09/03 5:28 a.m.2 views

CVE-2025-58272

Cross-site request forgery vulnerability exists in Web Caster V130 versions 1.08 and earlier. If a logged-in user views a malicious page created by an attacker, the settings of the product may be unintentionally changed...

3.7CVSS4.6AI score0.00012EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/09/03 12:0 a.m.1 views

NTT EAST Web Caster V130 跨站请求伪造漏洞

The NTT EAST Web Caster V130 is a broadband access device from NTT EAST Japan. A cross-site request forgery vulnerability exists in NTT EAST Web Caster V130 version 1.08 and earlier, which stems from vulnerability to cross-site request forgery attacks...

3.7CVSS4.6AI score0.00012EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/09/03 12:0 a.m.2 views

PT-2025-35676

Name of the Vulnerable Software and Affected Versions: Web Caster V130 versions 1.08 and earlier Description: A cross-site request forgery issue exists that allows an attacker to potentially modify product settings if a logged-in user views a malicious page. Recommendations: Update Web Caster V13...

3.7CVSS4.5AI score0.00012EPSS
Exploits0References7
Patchstack
Patchstack
added 2025/08/29 4:1 p.m.3 views

WordPress Nifty Backups plugin <= 1.08 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Nifty Backups versions = 1.08...

7.1CVSS6.1AI score0.00075EPSS
Exploits0Affected Software1
Cvelist
Cvelist
added 2025/08/27 12:0 a.m.6 views

CVE-2025-55582

D-Link DCS-825L firmware v1.08.01 contains a vulnerability in the watchdog script mydlink-watch-dog.sh, which blindly respawns binaries such as dcp and signalc without verifying integrity, authenticity, or permissions. An attacker with local filesystem access via physical access, firmware...

0.00019EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/07/09 12:0 a.m.3 views

Jenkins plugin Nouvola DiveCloud 安全漏洞

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. Jenkins plugin...

6.5CVSS6.1AI score0.00069EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 11:46 p.m.5 views

CVE-2022-42159

D-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator...

4.3CVSS7.2AI score0.0051EPSS
Exploits1References1
Rows per page
Query Builder