Lucene search
+L

62 matches found

EUVD
EUVD
•added 2026/07/21 11:07 a.m.•23 views

EUVD-2026-46175

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Turkmesh Communication Services Inc. Turkhotspot 5651 Loglama allows SQL Injection. This issue affects Turkhotspot 5651 Loglama: from 5.1.2 before 5.1.3...

9.8CVSS5.7AI score0.00468EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•1 views

CVE-2026-1617: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Turkmesh Communication Services Inc. Turkhotspot 5651 Loglama allows SQL Injection. This issue affects Turkhotspot 5651 Loglama: from 5.1.2 before 5.1.3...

9.8CVSS5.8AI score0.00468EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•28 views

PT-2026-61856

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Turkmesh Communication Services Inc. Turkhotspot 5651 Loglama allows SQL Injection. This issue affects Turkhotspot 5651 Loglama: from 5.1.2 before 5.1.3...

9.8CVSS5.7AI score0.00468EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/06/07 10:07 a.m.•31 views

CVE-2025-5651

A vulnerability, which was classified as problematic, has been found in code-projects Traffic Offense Reporting System 1.0. This issue affects some unknown processing of the file saveuser.php. The manipulation of the argument userid/username/email/name/position leads to cross site scripting. The...

5.4CVSS3.7AI score0.00292EPSS
SaveExploits1References1
Circl
Circl
•added 2025/06/05 11:12 a.m.•30 views

CVE-2025-5651

creationtimestamp| type| source ---|---|--- 2025-06-05 11:12:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqu6snmli625 2025-06-05 11:49:00+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lquatikfkhi2...

5.4CVSS7AI score0.00292EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/06/05 10:00 a.m.•30 views

CVE-2025-5651 code-projects Traffic Offense Reporting System saveuser.php cross site scripting

A vulnerability, which was classified as problematic, has been found in code-projects Traffic Offense Reporting System 1.0. This issue affects some unknown processing of the file saveuser.php. The manipulation of the argument userid/username/email/name/position leads to cross site scripting. The...

5.1CVSS0.00292EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/05/23 4:32 a.m.•16 views

CVE-2023-5651

The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not ensure that the package to be deleted is a package, allowing any authenticated users, such as subscriber to delete arbitrary posts...

5.4CVSS6.8AI score0.00271EPSS
SaveExploits2
Circl
Circl
•added 2024/08/12 5:17 p.m.•15 views

CVE-2024-5651

creationtimestamp| type| source ---|---|--- 2024-08-12 17:17:25+00:00| published-proof-of-concept| https://t.me/HackingInsights/9581...

8.8CVSS8.1AI score0.01369EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/08/12 5:46 a.m.•287 views

CVE-2024-5651 Fence-agents-remediation: fence agent command line options leads to remote code execution

A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution RCE primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a...

8.8CVSS0.01369EPSS
SaveExploits0References3
CVE
CVE
•added 2024/08/12 5:46 a.m.•100 views

CVE-2024-5651

CVE-2024-5651 affects the Fence Agents Remediation Operator. A flaw in handling --ssh-path/--telnet-path arguments enables Remote Code Execution, allowing a low-privilege user to craft a FenceAgentsRemediation that executes arbitrary commands on the operator pod, escalating from the operator’s se...

8.8CVSS9.2AI score0.01369EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2024/08/12 5:46 a.m.•56 views

CVE-2024-5651

A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution RCE primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a...

8.8CVSS8.5AI score0.01369EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2023/11/20 6:55 p.m.•15 views

CVE-2023-5651 WP Hotel Booking < 2.0.8 - Subscriber+ Arbitrary Post Deletion

The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not ensure that the package to be deleted is a package, allowing any authenticated users, such as subscriber to delete arbitrary posts...

6.7AI score0.00271EPSS
SaveExploits2References1
CVE
CVE
•added 2023/11/20 6:55 p.m.•73 views

CVE-2023-5651

The CVE targets the WordPress plugin WP Hotel Booking prior to version 2.0.8. Root cause: lack of authorization checks and CSRF protection, and failure to verify that the item to be deleted is a package. Impact: allows any authenticated user (e.g., a subscriber) to delete arbitrary posts, enablin...

5.4CVSS5.5AI score0.00271EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2023/11/20 6:55 p.m.•49 views

CVE-2023-5651 WP Hotel Booking < 2.0.8 - Subscriber+ Arbitrary Post Deletion

The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not ensure that the package to be deleted is a package, allowing any authenticated users, such as subscriber to delete arbitrary posts...

5.8AI score0.00271EPSS
SaveExploits2References1
SUSE CVE
SUSE CVE
•added 2023/02/15 4:49 a.m.•11 views

SUSE CVE-2017-5651

In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the refactoring of the HTTP connectors introduced a regression in the send file processing. If the send file processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could result in t...

9.8CVSS9.5AI score0.07752EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•31 views

SUSE: Security Advisory (SUSE-SU-2013:1642-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9CVSS9.6AI score0.02678EPSS
SaveExploits1References2
Zero Science Lab
Zero Science Lab
•added 2021/04/30 12:00 a.m.•178 views

Epic Games Rocket League 1.95 (AK::MemoryMgr::GetPoolName) Stack Buffer Overrun

Summary Rocket League is a high-powered hybrid of arcade-style soccer and vehicular mayhem with easy-to-understand controls and fluid, physics-driven competition. Description The game suffers from a stack-based buffer overflow vulnerability. The issue is caused due to a boundary error in the...

9.3CVSS7.8AI score0.02076EPSS
SaveExploits2
OSV
OSV
•added 2020/10/21 4:15 p.m.•17 views

CVE-2020-5651

SQL injection vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to execute arbitrary SQL commands via a specially crafted URL...

8.8CVSS7AI score0.01506EPSS
SaveExploits0References2
CVE
CVE
•added 2020/10/21 3:15 p.m.•74 views

CVE-2020-5651

CVE-2020-5651 affects the WordPress plugin Simple Download Monitor (versions 3.8.8 and earlier). The root cause is SQL injection via a specially crafted URL that bypasses input validation, allowing remote attackers to execute arbitrary SQL commands. Documented impact includes the ability to run a...

8.8CVSS9.1AI score0.01506EPSS
SaveExploits0References2Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2020/10/21 12:00 a.m.•71 views

JVN#31425618: Multiple vulnerabilities in WordPress Plugin "Simple Download Monitor"

WordPress Plugin "Simple Download Monitor" provided by Tips and Tricks HQ contains multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2020-5650 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...

8.8CVSS7.7AI score0.01506EPSS
SaveExploits0
Rows per page
Query Builder