Lucene search
+L

27 matches found

Kitploit
Kitploit
•added 2026/10/10 2:44 p.m.•18 views

bad-dicom

Bad-DICOM PoC del mio strumento di exploit creato a mano per CVE-2019-11687. Ho creato questo PEDICOM come Proof of Concept per il capstone del mio college: "Rilevamento e prevenzione di attacchi basati su vulnerabilità di file DICOM contro servizi di gestione medica ". Cos'è un PEDICOM...

9.3CVSS7.7AI score0.02762EPSS
SaveExploits2References1
OPENSUSE Linux
OPENSUSE Linux
•added 2026/07/07 12:00 a.m.•10 views

gi-docgen-2026.1-1.1 on GA media (moderate)

gi-docgen-2026.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11185-1 Rating: moderate Cross-References: CVE-2025-11687 CVSS scores: CVE-2025-11687 SUSE : 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L CVE-2025-11687 SUSE : 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:...

5.8CVSS6.1AI score0.00384EPSS
SaveExploits0
Wolfi
Wolfi
•added 2026/06/12 1:48 a.m.•22 views

CVE-2026-11687 vulnerabilities

Vulnerabilities for packages: chromium...

8.8CVSS7.7AI score0.00203EPSS
SaveExploits0
Chainguard
Chainguard
•added 2026/06/12 1:17 a.m.•29 views

CVE-2026-11687 vulnerabilities

Vulnerabilities for packages: chromium...

8.8CVSS7.7AI score0.00203EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/06/10 6:09 p.m.•21 views

CVE-2026-11687

An use after free flaw was found in the Dawn component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517303276...

8.8CVSS7.7AI score0.00203EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/06/09 12:00 a.m.•22 views

Linux Distros Unpatched Vulnerability : CVE-2026-11687

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Dawn in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.6AI score0.00203EPSS
SaveExploits0References2
CVE
CVE
•added 2026/06/08 11:27 p.m.•90 views

CVE-2026-11687

A use after free vulnerability exists in the Dawn component of Google Chrome on Mac systems prior to version 149.0.7827.103 . This flaw allows a remote attacker to potentially exploit heap corruption by navigating to a crafted HTML page , which could lead to arbitrary code execution . For Debian ...

8.8CVSS8.8AI score0.00203EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2026/06/08 11:27 p.m.•26 views

CVE-2026-11687

Use after free in Dawn in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.8AI score0.00203EPSS
SaveExploits0
OPENSUSE Linux
OPENSUSE Linux
•added 2026/04/21 12:00 a.m.•15 views

Security update for python-gi-docgen (moderate)

openSUSE security update: security update for python-gi-docgen ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20497-1 Rating: moderate References: bsc1251961 Cross-References: CVE-2025-11687 CVSS scores: CVE-2025-11687 SUSE : 5.8...

5.8CVSS5.7AI score0.00384EPSS
SaveExploits0References1
OSV
OSV
•added 2026/04/09 2:47 p.m.•10 views

OPENSUSE-SU-2026:20497-1 Security update for python-gi-docgen

This update for python-gi-docgen fixes the following issues: - CVE-2025-11687: Fixed reflected DOM XSS bsc1251961...

6.1CVSS5.9AI score0.00384EPSS
SaveExploits0References2
OSV
OSV
•added 2026/01/26 8:16 p.m.•0 views

DEBIAN-CVE-2025-11687

A flaw was found in the gi-docgen. This vulnerability allows arbitrary JavaScript execution in the context of the page — enabling DOM access, session cookie theft and other client-side attacks — via a crafted URL that supplies a malicious value to the q GET parameter reflected DOM XSS...

6.1CVSS5.7AI score0.00384EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/01/26 7:36 p.m.•21 views

CVE-2025-11687

A flaw was found in the gi-docgen. This vulnerability allows arbitrary JavaScript execution in the context of the page — enabling DOM access, session cookie theft and other client-side attacks — via a crafted URL that supplies a malicious value to the q GET parameter reflected DOM XSS...

6.1CVSS6.1AI score0.00384EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2025/10/21 12:00 a.m.•12 views

Fedora: Security Advisory (FEDORA-2025-b4184a589e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6AI score0.00384EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/10/21 12:00 a.m.•12 views

Fedora 41 : gi-docgen (2025-52dc5ac7d9)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-52dc5ac7d9 advisory. gi-docgen 2025.5 - 2025-10-11 This is a security fix for CVE-2025-11687. The severity of this issue depends on what else is hosted on the same domain as the...

6.1CVSS6AI score0.00384EPSS
SaveExploits0References2
Circl
Circl
•added 2025/06/26 9:02 p.m.•28 views

CVE-2018-11687

creationtimestamp| type| source ---|---|--- 2025-06-26 21:02:22+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lsjzkcotya2j 2026-06-19 12:53:13+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dd3cf363-89d0-4fb9-8bfc-555544669ac4...

7.5CVSS7.1AI score0.0143EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/23 7:06 a.m.•12 views

CVE-2024-11687

The Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 3.9.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

6.1CVSS6.4AI score0.00293EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/06 9:15 a.m.•18 views

CVE-2024-11687

The Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 3.9.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

6.1CVSS0.00293EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/12/06 8:24 a.m.•28 views

CVE-2024-11687 Next-Cart Store to WooCommerce Migration <= 3.9.2 - Reflected Cross-Site Scripting

The Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 3.9.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

6.1CVSS0.00293EPSS
SaveExploits0References2
OSV
OSV
•added 2020/04/22 2:15 p.m.•14 views

CVE-2020-11687

In JetBrains TeamCity before 2019.2.2, password values were shown in an unmasked format on several pages...

7.5CVSS5.8AI score0.01072EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/04/22 1:52 p.m.•43 views

CVE-2020-11687

In JetBrains TeamCity before 2019.2.2, password values were shown in an unmasked format on several pages...

8.2AI score0.01072EPSS
SaveExploits0References1
Rows per page
Query Builder