Lucene search
+L

147 matches found

Kitploit
Kitploit
•added 2026/10/12 9:56 a.m.•15 views

CVE-2017-5007

This repository does not have a README...

6.1CVSS7.2AI score0.02252EPSS
SaveExploits1
Circl
Circl
•added 2026/07/26 7:02 a.m.•22 views

CVE-2017-5007

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:10+00:00| seen| https://t.me/KaitNews/2842 2026-07-27 00:01:50+00:00| seen| https://t.me/KaitNews/2842 2026-08-05 18:00:04+00:00| seen| https://t.me/KaitNews/2842 2026-08-06 00:00:26+00:00| seen| https://t.me/KaitNews/2842 2026-09-02...

6.1CVSS7.2AI score0.02252EPSS
SaveExploits1References1
Circl
Circl
•added 2026/03/28 8:10 p.m.•17 views

CVE-2026-5007

creationtimestamp| type| source ---|---|--- 2026-03-28 20:10:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi5gu4g5pn2i...

5.3CVSS6AI score0.01083EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2019-16094

Malware in sbrugna...

7.5CVSS7.5AI score0.04274EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2009-5007

Malware in sbrugna...

7.5CVSS7.3AI score0.01671EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2025/08/24 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2016-5007

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mappings for authorization and for mapping...

7.5CVSS7.2AI score0.02916EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/22 11:18 p.m.•23 views

CVE-2025-5007

A vulnerability was found in Part-DB up to 1.17.0. It has been declared as problematic. Affected by this vulnerability is the function handleUpload of the file src/Services/Attachments/AttachmentSubmitHandler.php of the component Profile Picture Feature. The manipulation of the argument attachmen...

5.1CVSS6.5AI score0.00341EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 7:48 a.m.•22 views

CVE-2019-5007

An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. It is an Out-of-Bounds Read Information Disclosure and crash due to a NULL pointer dereference when reading TIFF data during TIFF parsing...

7.1CVSS6.7AI score0.01552EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 2:21 a.m.•19 views

CVE-2012-5007

The Fill PDF module 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to write to arbitrary PDF files via unspecified vectors related to the fillpdfmergepdf function and incorrect arguments, a different vulnerability than CVE-2012-1625. NOTE: some of these details are obtained from third...

6CVSS7.2AI score0.01332EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/20 11:15 p.m.•48 views

CVE-2025-5007

A vulnerability was found in Part-DB up to 1.17.0. It has been declared as problematic. Affected by this vulnerability is the function handleUpload of the file src/Services/Attachments/AttachmentSubmitHandler.php of the component Profile Picture Feature. The manipulation of the argument attachmen...

5.1CVSS0.00341EPSS
SaveExploits0References6
CVE
CVE
•added 2025/05/20 11:00 p.m.•81 views

CVE-2025-5007

Part-DB up to 1.17.0 exposes a cross-site scripting (XSS) vulnerability in the Profile Picture Feature. The issue lies in handleUpload (src/Services/Attachments/AttachmentSubmitHandler.php) where the attachment argument can be manipulated to inject scripts. It can be exploited remotely and an exp...

5.1CVSS3.9AI score0.00341EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/05/20 11:00 p.m.•15 views

CVE-2025-5007 Part-DB Profile Picture Feature AttachmentSubmitHandler.php handleUpload cross site scripting

A vulnerability was found in Part-DB up to 1.17.0. It has been declared as problematic. Affected by this vulnerability is the function handleUpload of the file src/Services/Attachments/AttachmentSubmitHandler.php of the component Profile Picture Feature. The manipulation of the argument attachmen...

5.1CVSS3.8AI score0.00341EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2025/05/20 11:00 p.m.•62 views

CVE-2025-5007 Part-DB Profile Picture Feature AttachmentSubmitHandler.php handleUpload cross site scripting

A vulnerability was found in Part-DB up to 1.17.0. It has been declared as problematic. Affected by this vulnerability is the function handleUpload of the file src/Services/Attachments/AttachmentSubmitHandler.php of the component Profile Picture Feature. The manipulation of the argument attachmen...

5.1CVSS0.00341EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2025/05/20 11:00 p.m.•23 views

CVE-2025-5007 Part-DB Profile Picture Feature AttachmentSubmitHandler.php handleUpload cross site scripting

A vulnerability was found in Part-DB up to 1.17.0. It has been declared as problematic. Affected by this vulnerability is the function handleUpload of the file src/Services/Attachments/AttachmentSubmitHandler.php of the component Profile Picture Feature. The manipulation of the argument attachmen...

5.1CVSS3.7AI score
SaveExploits0References8
Mend
Mend
•added 2024/07/01 2:19 p.m.•6 views

MSC-2024-5007

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Malware dropper – this package contains a Trojan...

9.8CVSS5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/01/24 8:23 p.m.•17 views

Malicious code in wlwz-2312-5007 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ce422b0b38894bcf0dd28be9844ac7653f6c5884543e4736fbeb834d17c8fd6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/01/24 8:23 p.m.•3 views

Malware in wlwz-2312-5007

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Circl
Circl
•added 2023/12/20 5:23 p.m.•28 views

CVE-2023-5007

creationtimestamp| type| source ---|---|--- 2023-12-20 17:23:57+00:00| seen| https://t.me/ctinow/157167 2023-12-27 01:17:11+00:00| seen| https://t.me/ctinow/159491...

8.8CVSS8.7AI score0.00673EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/12/20 3:58 p.m.•21 views

CVE-2023-5007 Student Information System v1.0 - Multiple Authenticated SQL Injections (SQLi)

Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'id' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database...

8.8CVSS9.2AI score0.00673EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/12/20 3:58 p.m.•47 views

CVE-2023-5007 Student Information System v1.0 - Multiple Authenticated SQL Injections (SQLi)

Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'id' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database...

8.8CVSS10AI score0.00673EPSS
SaveExploits1References2
Rows per page
Query Builder