Lucene search
+L

139 matches found

Kitploit
Kitploit
•added 2026/10/04 6:27 a.m.•11 views

CVE-2019-1006

CVE-2019-1006 사용법: 터미널에서 "python CVE-2019-1006.py "url""을 입력하세요. 여기서 url은 테스트할 RDG 게이트웨이 서버의 URL입니다. 예시: python CVE-2019-1006.py "https://www.aaa.com/"...

7.5CVSS7.5AI score0.06024EPSS
SaveExploits0
Circl
Circl
•added 2026/08/29 11:00 p.m.•21 views

CVE-2019-1006

creationtimestamp| type| source ---|---|--- 2026-08-29 23:00:08+00:00| seen| Telegram/TpDEhiVvoRRT5pQQyvb-1r61ahWr8WRyHVAuHr5I07s1ek 2026-08-30 00:00:11+00:00| seen| Telegram/TpDEhiVvoRRT5pQQyvb-1r61ahWr8WRyHVAuHr5I07s1ek 2026-08-31 00:00:47+00:00| published-proof-of-concept|...

7.5CVSS7.3AI score0.06024EPSS
SaveExploits0
Anthropic
Anthropic
•added 2026/08/17 5:47 p.m.•17 views

ANT-2026-3SEPW083 · ncurses · Stack-buffer-overflow

stack-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by an unreleased Anthropic model REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-3SEPW083: Stack buffer overflow in SGR mouse...

6.3AI score
SaveExploits0
EUVD
EUVD
•added 2026/01/06 4:01 p.m.•14 views

EUVD-2026-1006

Lack of output escaping leads to a XSS vector in the pagebreak plugin...

8.4CVSS5.7AI score0.00213EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/03 12:00 a.m.•1 views

CVE-2025-57202: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the PwdGrp.cgi endpoint of AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the username field...

6.1CVSS6.1AI score0.00485EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/03 12:00 a.m.•0 views

CVE-2025-57200: Improper Neutralization of Special Elements used in a Command

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the testmail function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

6.5CVSS8.2AI score0.02395EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/03 12:00 a.m.•2 views

CVE-2025-57198: Improper Neutralization of Special Elements used in a Command

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the Machine.cgi endpoint. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

8.8CVSS8.2AI score0.02809EPSS
SaveExploits1References3
Circl
Circl
•added 2025/11/13 5:00 a.m.•7 views

CVE-2025-43445

creationtimestamp| type| source ---|---|--- 2025-11-13 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1006/...

4.3CVSS6.2AI score0.01041EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/09/10 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2013-1006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and...

9.3CVSS5.8AI score0.02738EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/22 10:18 p.m.•16 views

CVE-2022-1006

The Advanced Booking Calendar WordPress plugin before 1.7.1 does not sanitise and escape the id parameter when editing Calendars, which could allow high privilege users such as admin to perform SQL injection attacks...

7.2CVSS7.6AI score0.01484EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:50 p.m.•13 views

CVE-2020-1006

An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940, CVE-2020-1001, CVE-2020-1017...

7.8CVSS7AI score0.0095EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/03/06 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2025-1006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted web app...

8.8CVSS7AI score0.00503EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/02/25 12:00 a.m.•15 views

Microsoft Edge (Chromium-Based) < 133.0.3065.82 Multiple Vulnerabilities (Feb 2025)

Microsoft Edge Chromium-Based is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.8CVSS8.8AI score0.00634EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2025/02/24 12:00 a.m.•15 views

Fedora: Security Advisory (FEDORA-2025-c0c371a0b6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.00634EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
•added 2025/02/21 8:00 a.m.•23 views

Chromium: CVE-2025-1006 Use after free in Network

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.00593EPSS
SaveExploits0
FreeBSD
FreeBSD
•added 2025/02/20 12:00 a.m.•28 views

qt6-webengine -- Multiple vulnerabilities

Qt qtwebengine-chromium repo reports: Backports for 11 security bugs in Chromium: CVE-2024-11477: 7-Zip Zstd decompression integer underflow CVE-2025-0762: Use after free in DevTools CVE-2025-0996: Inappropriate implementation in Browser UI CVE-2025-0998: Out of bounds memory access in V8...

9.8CVSS8.5AI score0.22561EPSS
SaveExploits2References1
Circl
Circl
•added 2025/02/19 6:06 p.m.•16 views

CVE-2025-1006

creationtimestamp| type| source ---|---|--- 2025-02-19 18:06:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3likej75iku2y 2025-02-19 20:24:56+00:00| seen| https://t.me/cvedetector/18454 2025-02-19 21:48:35+00:00| seen|...

8.8CVSS7.6AI score0.00503EPSS
SaveExploits0References4
OSV
OSV
•added 2025/02/19 5:15 p.m.•19 views

CVE-2025-1006

Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted web app. Chromium security severity: Medium...

8.8CVSS9.2AI score
SaveExploits0References2
CVE
CVE
•added 2025/02/19 4:55 p.m.•131 views

CVE-2025-1006

A use after free vulnerability in the Network component of Google Chrome (prior to version 133.0.6943.126 ) allows a remote attacker to potentially exploit heap corruption via a crafted web application. This vulnerability affects the Chromium engine, as evidenced by its presence in related distri...

8.8CVSS9.1AI score0.00503EPSS
SaveExploits0References2Affected Software1
AlpineLinux
AlpineLinux
•added 2025/02/19 4:55 p.m.•27 views

CVE-2025-1006

Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted web app. Chromium security severity: Medium...

8.8CVSS7.2AI score0.00503EPSS
SaveExploits0
Rows per page
Query Builder