Lucene search
+L

375 matches found

CNNVD
CNNVD
added 2025/10/16 12:00 a.m.13 views

PrestaShop Checkout 安全漏洞

PrestaShop Checkout is an open source checkout payment module from PrestaShopCorp. A security vulnerability exists in PrestaShop Checkout versions prior to 4.4.1 and prior to 5.0.5, which stems from an incorrect use of the PHP arraysearch function and could lead to PayPal merchant account hijacki...

3.8CVSS6.5AI score0.00251EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/16 12:00 a.m.15 views

PrestaShop Checkout 路径遍历漏洞

PrestaShop Checkout is an open source checkout payment module from PrestaShopCorp. A path traversal vulnerability exists in PrestaShop Checkout versions prior to 4.4.1 and prior to 5.0.5, which stems from a lack of input validation in the backend, and could lead to directory traversal and arbitra...

4.1CVSS6.5AI score0.00859EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/16 12:00 a.m.14 views

PT-2025-42516

Name of the Vulnerable Software and Affected Versions PrestaShop Checkout versions prior to 4.4.1 and 5.0.5 Description A flaw exists in the PrestaShop Checkout module due to incorrect use of the PHP array search function. This improper usage allows bypassing validation, potentially leading to th...

3.8CVSS6.7AI score0.00251EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2019-4587

Malware in sbrugna...

5.5CVSS5.6AI score0.00353EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2019-16030

Malware in sbrugna...

7.5CVSS6.5AI score0.08813EPSS
SaveExploits1References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2020-1473

Malware in sbrugna...

8.1CVSS8AI score0.01029EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2020-1429

Malware in sbrugna...

8.7CVSS8.5AI score0.01002EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2020-1415

Malware in sbrugna...

7.2CVSS6.9AI score0.02311EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.16 views

EUVD-2022-1879

Malicious code in bioql PyPI...

6.1CVSS6.3AI score0.00906EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.13 views

EUVD-2022-32430

Malicious code in bioql PyPI...

7.8CVSS7.7AI score0.01122EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2024-2385

Malicious code in bioql PyPI...

7.5CVSS6.8AI score0.00828EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2022-5663

Malicious code in bioql PyPI...

6.1CVSS6.3AI score0.00906EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.15 views

EUVD-2025-12597

Malicious code in bioql PyPI...

7CVSS6.3AI score0.00158EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2022-32427

Malicious code in bioql PyPI...

5.5CVSS5.8AI score0.01044EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/03 8:07 p.m.13 views

EUVD-2022-32429

Malicious code in bioql PyPI...

7.8CVSS7.7AI score0.01117EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
added 2025/09/04 1:31 a.m.11 views

CVE-2025-58162

MobSF is a mobile application security testing tool used. In version 4.4.0, an authenticated user who uploaded a specially prepared one.a, can write arbitrary files to any directory writable by the user of the MobSF process. This issue has been patched in version 4.4.1...

6.5CVSS6.9AI score0.006EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/09/04 1:30 a.m.9 views

CVE-2025-58161

MobSF is a mobile application security testing tool used. In version 4.4.0, the GET /download/ route uses string path verification via os.path.commonprefix, which allows an authenticated user to download files outside the DWDDIR download directory from "neighboring" directories whose absolute pat...

5.3CVSS6.7AI score0.00765EPSS
SaveExploits1References1
NVD
NVD
added 2025/09/02 1:15 a.m.13 views

CVE-2025-58161

MobSF is a mobile application security testing tool used. In version 4.4.0, the GET /download/ route uses string path verification via os.path.commonprefix, which allows an authenticated user to download files outside the DWDDIR download directory from "neighboring" directories whose absolute pat...

5.3CVSS0.00765EPSS
SaveExploits1References3
NVD
NVD
added 2025/09/02 1:15 a.m.11 views

CVE-2025-58162

MobSF is a mobile application security testing tool used. In version 4.4.0, an authenticated user who uploaded a specially prepared one.a, can write arbitrary files to any directory writable by the user of the MobSF process. This issue has been patched in version 4.4.1...

6.5CVSS0.006EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/09/02 12:46 a.m.2 views

CVE-2025-58162 MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction

MobSF is a mobile application security testing tool used. In version 4.4.0, an authenticated user who uploaded a specially prepared one.a, can write arbitrary files to any directory writable by the user of the MobSF process. This issue has been patched in version 4.4.1...

6.5CVSS6.3AI score0.006EPSS
SaveExploits1References3
Rows per page
Query Builder