Lucene search
+L

47 matches found

Circl
Circl
•added 2024/07/19 11:11 a.m.•29 views

CVE-2024-6902

creationtimestamp| type| source ---|---|--- 2024-07-19 11:11:27+00:00| seen| https://t.me/cvedetector/1199...

8.8CVSS6.2AI score0.00545EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/07/19 7:31 a.m.•50 views

CVE-2024-6902 SourceCodester Record Management System sort_user.php sql injection

A vulnerability classified as critical was found in SourceCodester Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file sortuser.php. The manipulation of the argument sort leads to sql injection. The attack can be launched remotely. The exploit has...

6.5CVSS0.00545EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/07/19 7:31 a.m.•28 views

CVE-2024-6902 SourceCodester Record Management System sort_user.php sql injection

A vulnerability classified as critical was found in SourceCodester Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file sortuser.php. The manipulation of the argument sort leads to sql injection. The attack can be launched remotely. The exploit has...

6.5CVSS7.4AI score0.00545EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2024/07/18 12:00 a.m.•62 views

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : Apache HTTP Server vulnerability (USN-6902-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6902-1 advisory. It was discovered that the Apache HTTP Server incorrectly handled certain handlers configured via AddType. A remote attacker could possibl...

5.3CVSS7AI score0.04168EPSS
SaveExploits4References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/01/24 8:23 p.m.•11 views

Malicious code in wlwz-2312-6902 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cb741da9a32478639c8b0ef3ca6670d55dc5148725d55b4a7b71dd676c0f6f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/01/24 8:23 p.m.•2 views

Malware in wlwz-2312-6902

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Circl
Circl
•added 2023/12/21 9:16 p.m.•23 views

CVE-2023-6902

creationtimestamp| type| source ---|---|--- 2023-12-21 21:16:39+00:00| seen| https://t.me/ctinow/157953 2024-01-11 22:41:57+00:00| seen| https://t.me/ctinow/166888...

9.8CVSS6.2AI score0.00972EPSS
SaveExploits1References2
CVE
CVE
•added 2023/12/17 3:31 p.m.•55 views

CVE-2023-6902

CVE-2023-6902 affects codelyfe Stupid Simple CMS up to version 1.2.4. The vulnerability resides in the file /file-manager/upload.php, where manipulation of the file parameter enables unrestricted file upload. The description indicates the exploit has been disclosed publicly, posing a risk of remo...

9.8CVSS7.7AI score0.00972EPSS
SaveExploits1References3Affected Software1
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•14 views

Mageia: Security Advisory (MGASA-2017-0126)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.9CVSS9.6AI score0.0547EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2021/01/05 5:21 p.m.•17 views

CVE-2020-6902

...

SaveExploits0
CVE
CVE
•added 2021/01/05 5:21 p.m.•34 views

CVE-2020-6902

CVE-2020-6902 is rejected/not used; this entry does not represent an active vulnerability.

6.9AI score
SaveExploits0
NVD
NVD
•added 2018/04/12 10:29 p.m.•24 views

CVE-2018-6902

PHP Scripts Mall Image Sharing Script 1.3.3 has XSS via the Full Name field in an Edit Profile action...

5.4CVSS5.3AI score0.00513EPSS
SaveExploits1References1
CVE
CVE
•added 2018/04/12 10:00 p.m.•51 views

CVE-2018-6902

Affected product: PHP Scripts Mall Image Sharing Script 1.3.3. Vulnerability: Cross-Site Scripting (XSS) via the Full Name field in an Edit Profile action. Root cause/details are not fully described in the provided documents beyond the XSS label. Impact ranges from low to medium according to CVSS...

5.4CVSS5.3AI score0.00513EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2017/05/11 2:01 p.m.•12 views

CVE-2015-6902

...

SaveExploits0
CVE
CVE
•added 2017/05/11 2:01 p.m.•31 views

CVE-2015-6902

CVE-2015-6902 is rejected and not used; it does not represent an active vulnerability entry.

7.4AI score
SaveExploits0
OSV
OSV
•added 2017/05/02 1:34 p.m.•17 views

MGASA-2017-0126 Updated python-lshell package fixes security vulnerabilities

Shell outbreak due to bad syntax parse CVE-2016-6902. Shell outbreak with multiline commands CVE-2016-6903...

9.9CVSS9.5AI score0.0547EPSS
SaveExploits0References3
NVD
NVD
•added 2017/04/24 7:59 p.m.•28 views

CVE-2016-6902

lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands...

9.9CVSS9.3AI score0.0547EPSS
SaveExploits0References6
CVE
CVE
•added 2017/04/24 7:00 p.m.•69 views

CVE-2016-6902

CVE-2016-6902 concerns lshell 0.9.16, where remote authenticated users can break out of a limited shell and execute arbitrary commands. The vulnerability is documented across multiple feeds, with NVD noting high/critical impact (NETWORK, low/low credentials, no user interaction) and Mageia OSV/OS...

9.9CVSS9.2AI score0.0547EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2017/03/14 9:00 p.m.•16 views

CVE-2017-6902

...

SaveExploits0
CVE
CVE
•added 2017/03/14 9:00 p.m.•39 views

CVE-2017-6902

CVE-2017-6902 entry is rejected/not used; the CNA withdrew it and it is not a security issue.

6.8AI score
SaveExploits0
Rows per page
Query Builder