Lucene search
K

110 matches found

Circl
Circl
added 2026/04/09 7:23 p.m.5 views

CVE-2026-5970

creationtimestamp| type| source ---|---|--- 2026-04-09 19:23:22+00:00| published-proof-of-concept| Telegram/K8a1FTaVN2JlTJVl1v5NyI0oXkvq2Mm-2U5yRQRN1QgtAH4...

9.8CVSS7.3AI score0.00387EPSS
Exploits1
NVD
NVD
added 2026/04/09 6:17 p.m.2 views

CVE-2026-5970

A vulnerability was detected in FoundationAgents MetaGPT up to 0.8.1. This affects the function checksolution of the component HumanEvalBenchmark/MBPPBenchmark. Performing a manipulation results in code injection. The attack may be initiated remotely. The exploit is now public and may be used. Th...

9.8CVSS0.00387EPSS
Exploits1References6
ATTACKERKB
ATTACKERKB
added 2026/04/09 5:0 p.m.1 views

CVE-2026-5970

A vulnerability was detected in FoundationAgents MetaGPT up to 0.8.1. This affects the function checksolution of the component HumanEvalBenchmark/MBPPBenchmark. Performing a manipulation results in code injection. The attack may be initiated remotely. The exploit is now public and may be used. Th...

7.5CVSS6.8AI score0.00387EPSS
Exploits1References6Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/02 8:39 a.m.2 views

CVE-2026-20436

In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00473802; Issue ID:...

5.9AI score0.00123EPSS
Exploits0References1
CVE
CVE
added 2026/03/02 8:39 a.m.12 views

CVE-2026-20436

CVE-2026-20436 affects the MediaTek WLAN STA driver, with a missing bounds check in the driver leading to local privilege escalation if an attacker already has System privileges. No user interaction is required. Impact is rated high for confidentiality, integrity, and availability; attack vector ...

6.7CVSS5.9AI score0.00123EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2006-6641

Malware in sbrugna...

5CVSS6.4AI score0.0114EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/04 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2017-5970

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service system crash via 1 an...

7.5CVSS7.3AI score0.03915EPSS
Exploits0References2
OSV
OSV
added 2025/07/31 12:0 a.m.2 views

DSA-5970-1 sope - security update

Bulletin has no description...

7.5CVSS7.2AI score0.00597EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/06/12 5:6 p.m.5 views

CVE-2025-5970

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/add-subadmin.php. The manipulation of the argument fullname leads to cross site scripting. The attack may be launched...

5.4CVSS3.9AI score0.0025EPSS
Exploits1References1
NVD
NVD
added 2025/06/10 5:25 p.m.7 views

CVE-2025-5970

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/add-subadmin.php. The manipulation of the argument fullname leads to cross site scripting. The attack may be launched...

5.4CVSS0.0025EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/06/10 5:0 p.m.9 views

CVE-2025-5970 PHPGurukul Restaurant Table Booking System add-subadmin.php cross site scripting

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/add-subadmin.php. The manipulation of the argument fullname leads to cross site scripting. The attack may be launched...

4.8CVSS0.0025EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/06/10 5:0 p.m.5 views

CVE-2025-5970 PHPGurukul Restaurant Table Booking System add-subadmin.php cross site scripting

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/add-subadmin.php. The manipulation of the argument fullname leads to cross site scripting. The attack may be launched...

4.8CVSS6.4AI score0.0025EPSS
Exploits1References5
Packet Storm
Packet Storm
added 2024/09/16 12:0 a.m.246 views

ManageEngine DeviceExpert 5.9.7 Build 5970 Hash Disclosure

==================================================================================================================================== | Title : DeviceExpert v 5.9.7 build 5970 PHP extracts Credentials Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox...

7.4AI score
Exploits0
CVE
CVE
added 2024/06/18 9:36 p.m.48 views

CVE-2024-5970

CVE-2024-5970 applies to the MaxGalleria WordPress plugin. It is a Stored XSS vulnerability in the maxgallery_thumb shortcode, affecting all versions up to and including 6.4.4. The issue stems from insufficient input sanitization and output escaping on user-supplied attributes, allowing an attack...

6.4CVSS5.9AI score0.00274EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/06/18 9:36 p.m.10 views

CVE-2024-5970 MaxGalleria <= 6.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via maxgallery_thumb Shortcode

The MaxGalleria plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's maxgallerythumb shortcode in all versions up to, and including, 6.4.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.8AI score0.00274EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/06/18 9:36 p.m.36 views

CVE-2024-5970 MaxGalleria <= 6.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via maxgallery_thumb Shortcode

The MaxGalleria plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's maxgallerythumb shortcode in all versions up to, and including, 6.4.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00274EPSS
Exploits0References2
Circl
Circl
added 2023/12/24 3:26 p.m.10 views

CVE-2023-5970

creationtimestamp| type| source ---|---|--- 2023-12-24 15:26:21+00:00| seen| https://t.me/ctinow/159039 2025-10-24 21:02:35+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3xrj4a4ub27 2025-10-26 22:33:03+00:00| exploited| https://www.cybereason.com/blog/ttp-briefing-q3-2025...

8.8CVSS7.1AI score0.00911EPSS
Exploits0References4
NVD
NVD
added 2023/12/05 9:15 p.m.10 views

CVE-2023-5970

Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass...

8.8CVSS0.00911EPSS
Exploits0References1
CVE
CVE
added 2023/12/05 8:20 p.m.42 views

CVE-2023-5970

CVE-2023-5970 affects SonicWall SMA100 SSL-VPN virtual office portal. The issue is improper authentication that lets a remote authenticated attacker create an identical external-domain user using accent characters, resulting in an MFA bypass. Affected devices include SMA100 and other SMA families...

8.8CVSS8.4AI score0.00911EPSS
In wildExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2023/03/24 12:0 a.m.32 views

Ubuntu: Security Advisory (USN-5970-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.4AI score0.03702EPSS
Exploits5References4
Rows per page
Query Builder