Lucene search
+L

60 matches found

Kitploit
Kitploit
•added 2026/10/08 8:21 p.m.•14 views

CVE-2024-4320

لا يحتوي هذا المستودع على ملف README...

9.8CVSS8.1AI score0.34354EPSS
SaveExploits1
Circl
Circl
•added 2026/05/18 12:56 p.m.•27 views

CVE-2026-4320

creationtimestamp| type| source ---|---|--- 2026-05-18 12:56:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4wfejqwn2n...

9.3CVSS5.8AI score0.0043EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/23 3:24 p.m.•19 views

EUVD-2026-4320

In the Linux kernel, the following vulnerability has been resolved: net: do not write to msggetinq in callee NULL pointer dereference fix. msggetinq is an input field from caller to callee. Don't set it in the callee, as the caller may not clear it on struct reuse. This is a kernel-internal varia...

5.3AI score0.00118EPSS
SaveExploits0References3
Circl
Circl
•added 2026/01/23 1:44 p.m.•16 views

CVE-2025-4320

creationtimestamp| type| source ---|---|--- 2026-01-23 13:44:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md3tgyo76h24 2026-01-23 14:28:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md3vx2omxk2r...

10CVSS5.8AI score0.00512EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/12/08 12:00 a.m.•17 views

SUSE: Security Advisory (SUSE-SU-2025:4320-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.6AI score0.22293EPSS
SaveExploits0References223
OSV
OSV
•added 2025/10/01 12:00 a.m.•11 views

DLA-4320-1 u-boot - security update

Bulletin has no description...

7.8CVSS7.9AI score0.01104EPSS
SaveExploits0
Circl
Circl
•added 2025/08/30 12:19 p.m.•14 views

CVE-2023-4320

creationtimestamp| type| source ---|---|--- 2025-08-30 12:19:53+00:00| seen| Telegram/jeV1P16aLm0VDGF10VyDeX-S9ksNlaVoQqTazUcF70m5U...

7.6CVSS6.1AI score0.00653EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 12:46 a.m.•20 views

CVE-2022-4320

The WordPress Events Calendar WordPress plugin before 1.4.5 does not sanitize and escapes a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against both unauthenticated and authenticated users such as high-privilege ones like admin...

6.1CVSS6.2AI score0.00891EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:31 p.m.•20 views

CVE-2020-24055

Verint 5620PTZ VerintFW042 and Verint 4320 V4320FW023, and V4320FW031 units feature an autodiscovery service implemented in the binary executable '/usr/sbin/DM' that listens on port TCP 6666. The service is vulnerable to a stack buffer overflow. It is worth noting that this service does not requi...

9.8CVSS7.1AI score0.01624EPSS
SaveExploits1
Circl
Circl
•added 2025/04/04 6:36 p.m.•39 views

CVE-2022-4320

creationtimestamp| type| source ---|---|--- 2025-04-04 18:36:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10524...

6.1CVSS6AI score0.00891EPSS
SaveExploits2References1
VulnCheck KEV
VulnCheck KEV
•added 2024/10/10 12:00 a.m.•9 views

VulnCheck KEV: CVE-2023-4320

An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attacker who uses this arithmetic overflow to create personal access tokens that are valid indefinitely, resulting in damage to the system's integrity...

7.6CVSS5.8AI score0.00653EPSS
SaveIn wildExploits0References2
Github Security Blog
Github Security Blog
•added 2024/06/22 6:30 p.m.•36 views

Remote Code Execution via path traversal bypass in lollms

CVE-2024-4320 describes a vulnerability in the parisneo/lollms software, specifically within the ExtensionBuilder.buildextension function. The vulnerability arises from the /mountextension endpoint, where a path traversal issue allows attackers to navigate beyond the intended directory structure...

9.8CVSS7.5AI score0.34354EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2024/06/22 5:15 p.m.•40 views

CVE-2024-5443

CVE-2024-4320 describes a vulnerability in the parisneo/lollms software, specifically within the ExtensionBuilder.buildextension function. The vulnerability arises from the /mountextension endpoint, where a path traversal issue allows attackers to navigate beyond the intended directory structure...

9.8CVSS7.6AI score0.34354EPSS
SaveExploits1References2
CVE
CVE
•added 2024/06/22 4:12 p.m.•96 views

CVE-2024-5443

CVE-2024-5443 describes a path traversal flaw in parisneo/lollms related to the ExtensionBuilder().build_extension() workflow. The issue, exploited via the /mount_extension endpoint, arises because data.category and data.folder can be empty strings, enabling construction of a package_path that ca...

9.8CVSS8.2AI score0.01164EPSS
SaveExploits0References2
NVD
NVD
•added 2024/06/06 7:16 p.m.•52 views

CVE-2024-4320

A remote code execution RCE vulnerability exists in the '/installextension' endpoint of the parisneo/lollms-webui application, specifically within the @router.post"/installextension" route handler. The vulnerability arises due to improper handling of the name parameter in the...

9.8CVSS0.34354EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/06/06 6:22 p.m.•21 views

CVE-2024-4320 Remote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webui

A remote code execution RCE vulnerability exists in the '/installextension' endpoint of the parisneo/lollms-webui application, specifically within the @router.post"/installextension" route handler. The vulnerability arises due to improper handling of the name parameter in the...

9.8CVSS8.2AI score0.34354EPSS
SaveExploits1References1
NVD
NVD
•added 2023/12/18 2:15 p.m.•40 views

CVE-2023-4320

An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attacker who uses this arithmetic overflow to create personal access tokens that are valid indefinitely, resulting in damage to the system's integrity...

7.6CVSS0.00653EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/12/18 1:43 p.m.•39 views

CVE-2023-4320 Satellite: arithmetic overflow in satellite

An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attacker who uses this arithmetic overflow to create personal access tokens that are valid indefinitely, resulting in damage to the system's integrity...

7.6CVSS7.7AI score0.00653EPSS
SaveExploits0References3
CVE
CVE
•added 2023/12/18 1:43 p.m.•167 views

CVE-2023-4320

An arithmetic overflow flaw exists in Satellite during the creation of new personal access tokens. This vulnerability allows an attacker to generate tokens that remain valid indefinitely , compromising the integrity of the system. While Red Hat Security Advisory RHSA-2024:2010 addresses this in t...

7.6CVSS7.4AI score0.00653EPSS
SaveIn wildExploits0References3Affected Software1
OSV
OSV
•added 2023/07/29 12:15 a.m.•29 views

CVE-2021-4320

Use after free in Blink in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...

8.8CVSS9.1AI score
SaveExploits0References3
Rows per page
Query Builder