Lucene search
K

34 matches found

Nuclei
Nuclei
added 11 hours ago50 views

Cacti < 1.2.25 Insecure Deserialization

Cacti is an open source operational monitoring and fault management framework. There are two instances of insecure deserialization in Cacti version 1.2.24. id: CVE-2023-30534 info: name: Cacti 1.2.25 Insecure Deserialization author: k0pak4 severity: medium description: | Cacti is an open source...

4.3CVSS7AI score0.52473EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2026/03/27 12:0 a.m.1 views

CVE-2026-30534

A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in admin/managecategory.php via the "id" parameter...

6AI score0.00044EPSS
Exploits1References1
NVD
NVD
added 2025/03/24 2:15 p.m.3 views

CVE-2025-30534

Cross-Site Request Forgery CSRF vulnerability in captcha.soft Image Captcha image-captcha allows Cross Site Request Forgery.This issue affects Image Captcha: from n/a through = 1.2...

4.3CVSS0.00324EPSS
Exploits0References1
CVE
CVE
added 2025/03/24 1:46 p.m.59 views

CVE-2025-30534

CVE-2025-30534 refers to a CSRF vulnerability in Image Captcha (captcha.image-captcha) affecting Image Captcha versions up to 1.2. The connected Wordfence vulnerability report lists this CVE under Image Captcha, noting a Cross-Site Request Forgery to change settings but does not provide explicit ...

4.3CVSS7.2AI score0.00324EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/24 1:46 p.m.17 views

CVE-2025-30534 WordPress Image Captcha plugin <= 1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in captcha.soft Image Captcha image-captcha allows Cross Site Request Forgery.This issue affects Image Captcha: from n/a through = 1.2...

4.3CVSS0.00324EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2023-30534

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti is an open source operational monitoring and fault management framework. There are two instances of insecure deserialization in Cacti version 1.2.24. Whil...

4.3CVSS6.9AI score0.52473EPSS
Exploits1References3
NVD
NVD
added 2024/06/09 9:15 a.m.16 views

CVE-2024-30534

Missing Authorization vulnerability in typps Calendarista Basic Edition calendarista-basic-edition.This issue affects Calendarista Basic Edition: from n/a through = 3.0.5...

9.8CVSS0.00188EPSS
Exploits0References2
CVE
CVE
added 2024/06/09 9:3 a.m.68 views

CVE-2024-30534

Technical details about CVE-2024-30534 (Calendarista Basic Edition,

9.8CVSS7.2AI score0.00188EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/09 9:3 a.m.15 views

CVE-2024-30534 WordPress Calendarista Basic Edition plugin <= 3.0.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in typps Calendarista Basic Edition calendarista-basic-edition.This issue affects Calendarista Basic Edition: from n/a through = 3.0.5...

6.5CVSS7.2AI score0.00188EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/06/09 9:3 a.m.20 views

CVE-2024-30534 WordPress Calendarista Basic Edition plugin <= 3.0.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in typps Calendarista Basic Edition calendarista-basic-edition.This issue affects Calendarista Basic Edition: from n/a through = 3.0.5...

6.5CVSS0.00188EPSS
Exploits0References1
VulnCheck KEV
VulnCheck KEV
added 2024/03/29 12:0 a.m.3 views

VulnCheck KEV: CVE-2024-30534

Missing Authorization vulnerability in typps Calendarista Basic Edition calendarista-basic-edition.This issue affects Calendarista Basic Edition: from n/a through = 3.0.5...

9.8CVSS7.3AI score0.00188EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/03/29 12:0 a.m.12 views

WordPress Calendarista Basic Edition Plugin <= 3.0.5 is vulnerable to Broken Access Control

Software Calendarista Basic Edition Type Plugin Vulnerable versions = 3.0.5 Fixed in 3.0.6 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-30534 Patch priority Medium CVSS severity Medium 6.5 Developer Typps PSID 013b5129fc7c Credits Mochamad Sofyan Requir...

9.8CVSS6.5AI score0.00188EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2023/11/05 12:0 a.m.24 views

Fedora: Security Advisory (FEDORA-2023-248dff7cbe)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.5AI score0.92641EPSS
Exploits24References21
OpenVAS
OpenVAS
added 2023/10/16 12:0 a.m.20 views

Fedora: Security Advisory for cacti (FEDORA-2023-06a2a6e03c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.5AI score0.92641EPSS
Exploits24References2
OpenVAS
OpenVAS
added 2023/10/16 12:0 a.m.19 views

Fedora: Security Advisory for cacti (FEDORA-2023-6335ea9c0c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.5AI score0.92641EPSS
Exploits24References2
OpenVAS
OpenVAS
added 2023/10/16 12:0 a.m.67 views

Fedora: Security Advisory for cacti-spine (FEDORA-2023-06a2a6e03c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.5AI score0.92641EPSS
Exploits24References2
Circl
Circl
added 2023/09/06 2:17 a.m.1 views

CVE-2023-30534

creationtimestamp| type| source ---|---|--- 2023-09-06 02:17:23+00:00| seen| https://t.me/cibsecurity/69916...

4.3CVSS6.7AI score0.52473EPSS
Exploits1References1
CVE
CVE
added 2023/09/05 9:21 p.m.113 views

CVE-2023-30534

CVE-2023-30534 affects Cacti prior to 1.2.25. The issue involves insecure deserialization via unserialize in graphs_new.php (host_new_graphs_save) due to lack of input sanitization. A viable phpseclib gadget chain exists in vendor code but the gadgets are not accessible, making exploitation not p...

4.3CVSS6.8AI score0.52473EPSS
Exploits1References5Affected Software1
Circl
Circl
added 2022/08/22 10:20 p.m.2 views

CVE-2022-30534

creationtimestamp| type| source ---|---|--- 2022-08-22 22:20:57+00:00| seen| https://t.me/cibsecurity/48548 2025-04-15 18:54:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11877...

9.9CVSS8.7AI score0.12273EPSS
Exploits0References2
OSV
OSV
added 2022/08/22 7:15 p.m.17 views

CVE-2022-30534

An OS command injection vulnerability exists in the aVideoEncoder chunkfile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability...

8.8CVSS7.5AI score
Exploits0References2
Rows per page
Query Builder