Lucene search
K

55 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2007-5211

Malware in sbrugna...

4.6CVSS6.3AI score0.05545EPSS
Exploits0References5
Circl
Circl
added 2025/05/27 4:47 a.m.14 views

CVE-2025-5230

creationtimestamp| type| source ---|---|--- 2025-05-27 04:47:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17605 2025-05-27 05:35:38+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4xrk4ojq52 2025-05-27...

9.8CVSS7.3AI score0.00204EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/05/27 4:0 a.m.6 views

CVE-2025-5230 PHPGurukul Online Nurse Hiring System bwdates-report-details.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Online Nurse Hiring System 1.0. This affects an unknown part of the file /admin/bwdates-report-details.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely...

7.5CVSS7.7AI score0.00204EPSS
Exploits1References5
CVE
CVE
added 2025/05/27 4:0 a.m.45 views

CVE-2025-5230

CVE-2025-5230 – PHPGurukul Online Nurse Hiring System 1.0 is affected by an SQL injection in the file /admin/bwdates-report-details.php caused by manipulating the fromdate/todate parameters. The vulnerability can be exploited remotely and the exploit has been publicly disclosed. Connected sources...

9.8CVSS7.7AI score0.00204EPSS
Exploits1References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 4:31 a.m.5 views

CVE-2023-5230

The TM WooCommerce Compare & Wishlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tmwoowishlisttable' shortcode in versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5.8AI score0.00217EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:5 a.m.6 views

CVE-2019-5230

P20 Pro, P20, Mate RS smartphones with versions earlier than Charlotte-AL00A 9.1.0.321C00E320R1P1T8, versions earlier than Emily-AL00A 9.1.0.321C00E320R1P1T8, versions earlier than NEO-AL00D NEO-AL00 9.1.0.321C786E320R1P1T8 have an improper validation vulnerability. The system does not perform a...

5.5CVSS6.7AI score0.00125EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 11:1 p.m.12 views

CVE-2008-5230

The Temporal Key Integrity Protocol TKIP implementation in unspecified Cisco products and other vendors' products, as used in WPA and WPA2 on Wi-Fi networks, has insufficient countermeasures against certain crafted and replayed packets, which makes it easier for remote attackers to decrypt packet...

6.8CVSS7AI score0.00889EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/02/05 3:39 p.m.9 views

CVE-2020-5230

Opencast before 8.1 and 7.6 allows almost arbitrary identifiers for media packages and elements to be used. This can be problematic for operation and security since such identifiers are sometimes used for file system operations which may lead to an attacker being able to escape working directorie...

7.7CVSS6.7AI score0.00327EPSS
Exploits0
0day.today
0day.today
added 2024/05/28 12:0 a.m.383 views

FleetCart 4.1.1 Information Disclosure Vulnerability

Exploit Title: FleetCart 4.1.1 - WebPage Content Information Disclosure Exploit Author: CraCkEr Vendor: EnvaySoft Vendor Homepage: https://codecanyon.net/item/fleetcart-laravel-ecommerce-system/23014826 Software Demo Link: https://demo.fleetcart.envaysoft.com/en Tested on: Windows 11 Pro 22H2...

6.9CVSS7.4AI score0.40729EPSS
Exploits2
Vulnrichment
Vulnrichment
added 2024/05/23 2:0 a.m.15 views

CVE-2024-5230 EnvaySoft FleetCart information disclosure

A vulnerability has been found in EnvaySoft FleetCart up to 4.1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument razorpayKeyId leads to information disclosure. The attack can be launched remotely. It is recommended to...

6.9CVSS6.5AI score0.40729EPSS
Exploits2References3
Packet Storm
Packet Storm
added 2024/05/23 12:0 a.m.417 views

FleetCart 4.1.1 Information Disclosure

Exploit Title: FleetCart 4.1.1 - WebPage Content Information Disclosure Exploit Author: CraCkEr Date: 13/05/2024 Vendor: EnvaySoft Vendor Homepage: https://codecanyon.net/item/fleetcart-laravel-ecommerce-system/23014826 Software Demo Link: https://demo.fleetcart.envaysoft.com/en Tested on: Window...

5CVSS7.2AI score0.40729EPSS
Exploits2
Circl
Circl
added 2024/02/13 10:26 a.m.0 views

CVE-2019-5230

creationtimestamp| type| source ---|---|--- 2024-02-13 10:26:24+00:00| seen| https://t.me/ctinow/183721...

5.5CVSS5.5AI score0.00125EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/10/16 12:0 a.m.23 views

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : App::cpanminus vulnerability (USN-5230-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-5230-1 advisory. It was discovered that App::cpanminus did not properly verify CHECKSUMS files. An attacker could possibly use this issue to bypass signatu...

7.8CVSS7.5AI score0.00024EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2023/09/28 4:31 a.m.6 views

CVE-2023-5230 TM WooCommerce Compare & Wishlist <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The TM WooCommerce Compare & Wishlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tmwoowishlisttable' shortcode in versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS6.8AI score0.00217EPSS
Exploits0References2
CVE
CVE
added 2023/09/28 4:31 a.m.60 views

CVE-2023-5230

CVE-2023-5230 concerns the TM WooCommerce Compare & Wishlist WordPress plugin. The vulnerability: Stored Cross-Site Scripting via the shortcode tm_woo_wishlist_table, arising from insufficient input sanitization and output escaping of user-supplied attributes. Affected versions are up to and incl...

6.4CVSS5.3AI score0.00217EPSS
Exploits0References2Affected Software1
Patchstack
Patchstack
added 2023/09/28 12:0 a.m.10 views

WordPress TM WooCommerce Compare & Wishlist Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)

Software TM WooCommerce Compare & Wishlist Type Plugin Vulnerable versions = 1.1.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5230 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 76b4f5683bff Credits Lana Cod...

6.4CVSS5.7AI score0.00217EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/08/02 12:0 a.m.8 views

Moxa NPort 5210 5230 5232 Uncontrolled Resource Consumption (CVE-2018-10632)

In Moxa NPort 5210, 5230, and 5232 versions 2.9 build 17030709 and prior, the amount of resources requested by a malicious actor are not restricted, allowing for a denial-of-service condition. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for mor...

7.5CVSS7.3AI score0.00424EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2022/09/17 12:0 a.m.26 views

Debian: Security Advisory (DSA-5230-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.3AI score0.03008EPSS
Exploits1References4
Circl
Circl
added 2020/02/24 6:49 a.m.2 views

CVE-2018-5230

creationtimestamp| type| source ---|---|--- 2020-02-24 06:49:27+00:00| seen| https://t.me/ctinow/20653...

6.1CVSS6.3AI score0.22721EPSS
Exploits0References1
CVE
CVE
added 2020/01/30 8:55 p.m.92 views

CVE-2020-5230

Opencast CVE-2020-5230 affects Opencast versions older than 8.1 and 7.6, where media package and element identifiers can be almost arbitrary. The identifiers are sometimes used in filesystem operations, which can allow an attacker to escape working directories and write files to unintended locati...

7.7CVSS7.4AI score0.00327EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder