Lucene search
+L

18 matches found

GithubExploit
GithubExploit
•added 2026/07/16 4:46 a.m.•145 views

Exploit for Insertion of Sensitive Information into Log File in Realtek Rtsper

CVE-2022-25477 ⚡ Simple Usage Use this project only in s...

8.8CVSS6.7AI score0.01271EPSS
SaveExploits2
NVD
NVD
•added 2026/03/11 7:16 p.m.•16 views

CVE-2019-25477

RAR Password Recovery 1.80 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload in the registration dialog. Attackers can craft a malicious input string exceeding 6000 bytes and paste it into the User Name and Registration...

6.9CVSS0.00123EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/03/11 6:23 p.m.•8 views

CVE-2019-25477

RAR Password Recovery 1.80 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload in the registration dialog. Attackers can craft a malicious input string exceeding 6000 bytes and paste it into the User Name and Registration...

6.9CVSS6.1AI score0.00123EPSS
SaveExploits0References2Affected Software1
Circl
Circl
•added 2026/03/03 12:30 a.m.•10 views

CVE-2026-25477

creationtimestamp| type| source ---|---|--- 2026-03-03 00:30:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg4jcfzlfs2n...

6.9CVSS5.8AI score0.003EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/02 8:16 p.m.•16 views

CVE-2026-25477

AFFiNE is an open-source, all-in-one workspace and an operating system. Prior to version 0.26.0, there is an Open Redirect vulnerability located at the /redirect-proxy endpoint. The flaw exists in the domain validation logic, where an improperly anchored Regular Expression allows an attacker to...

6.9CVSS0.003EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/17 12:00 a.m.•5 views

CVE-2025-7983: Heap-based Buffer Overflow

Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this vulnerability in that the...

7.8CVSS7.8AI score0.00224EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/22 6:26 p.m.•19 views

CVE-2021-25477

An improper error handling in Mediatek RRC Protocol stack prior to SMR Oct-2021 Release 1 allows modem crash and remote denial of service...

4.9CVSS6.9AI score0.00497EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/28 12:00 a.m.•4 views

CVE-2025-25477: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A host header injection vulnerability in SysPass 3.2x allows an attacker to load malicious JS files from an arbitrary domain which would be executed in the victim's browser...

8.1CVSS5.9AI score0.00421EPSS
SaveExploits1References1
Circl
Circl
•added 2025/02/27 11:25 p.m.•16 views

CVE-2025-25477

creationtimestamp| type| source ---|---|--- 2025-02-27 23:25:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5812 2025-02-28 01:53:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj7ccv5fxx2w 2025-02-28 03:38:48+00:00| seen|...

8.1CVSS5.3AI score0.00421EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/02/27 12:00 a.m.•35 views

CVE-2025-25477

A host header injection vulnerability in SysPass 3.2x allows an attacker to load malicious JS files from an arbitrary domain which would be executed in the victim's browser...

0.00421EPSS
SaveExploits1References1
Circl
Circl
•added 2024/10/27 4:49 p.m.•19 views

CVE-2022-25477

creationtimestamp| type| source ---|---|--- 2024-10-27 16:49:25+00:00| published-proof-of-concept| https://t.me/Rootsec2/4876 2024-10-28 13:32:54+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/11344 2024-11-21 04:19:04+00:00| published-proof-of-concept|...

5.5CVSS6.2AI score0.00215EPSS
SaveExploits1References8
CVE
CVE
•added 2024/07/02 12:00 a.m.•70 views

CVE-2022-25477

The CVE-2022-25477 issue affects Realtek RtsPer.sys (PCIe Card Reader) and Realtek RtsUer.sys (USB Card Reader). Affected versions are RtsPer before 10.0.22000.21355 and RtsUer before 10.0.22000.31274. The vulnerability leaks driver logs that contain addresses of kernel-mode objects, weakening KA...

5.5CVSS6.9AI score0.00215EPSS
SaveExploits1References3Affected Software2
NVD
NVD
•added 2023/09/01 11:15 a.m.•24 views

CVE-2023-25477

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Yotuwp Video Gallery plugin = 1.3.12 versions...

5.9CVSS5.4AI score0.00362EPSS
SaveExploits0References1
CVE
CVE
•added 2023/09/01 10:38 a.m.•104 views

CVE-2023-25477

CVE-2023-25477 is a stored XSS in the WordPress plugin Yotuwp Video Gallery (versions

5.9CVSS5AI score0.00362EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2023/07/07 12:00 a.m.•20 views

WordPress Video Gallery Plugin <= 1.3.12 is vulnerable to Cross Site Scripting (XSS)

Software Video Gallery Type Plugin Vulnerable versions = 1.3.12 Fixed in 1.3.13 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25477 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 69f2f538600b Credits Abdi Pranata Required...

5.9CVSS5.8AI score0.00362EPSS
SaveExploits0References2Affected Software1
Circl
Circl
•added 2021/10/06 10:32 p.m.•16 views

CVE-2021-25477

creationtimestamp| type| source ---|---|--- 2021-10-06 22:32:26+00:00| seen| https://t.me/cibsecurity/30093...

4.9CVSS5AI score0.00497EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/10/06 5:09 p.m.•49 views

CVE-2021-25477

An improper error handling in Mediatek RRC Protocol stack prior to SMR Oct-2021 Release 1 allows modem crash and remote denial of service...

4.4CVSS5.5AI score0.00497EPSS
SaveExploits0References1
CVE
CVE
•added 2021/10/06 5:09 p.m.•115 views

CVE-2021-25477

CVE-2021-25477 affects Mediatek RRC Protocol stack; improper error handling could cause a modem crash and remote DoS. Root cause described as error handling weakness in the Mediatek RRC stack prior to SMR Oct-2021 Release 1. Documented impact is network-exposed denial of service with potential av...

4.9CVSS5.2AI score0.00497EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder