Lucene search
K

35 matches found

Circl
Circl
added 2026/05/27 4:33 p.m.5 views

CVE-2026-9035

creationtimestamp| type| source ---|---|--- 2026-05-27 16:33:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtwq45msb2p...

6.5CVSS5.8AI score0.00045EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/27 1:21 p.m.6 views

CVE-2026-9035 Multiple vulnerabilities in Aspera applications.

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a potential arbitrary file read in the asperahttpd component. An authenticated user may be ab...

6.5CVSS5.9AI score0.00045EPSS
Exploits0References1
Circl
Circl
added 2025/09/22 3:22 p.m.2 views

CVE-2025-9035

creationtimestamp| type| source ---|---|--- 2025-09-22 15:22:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lzgpljpwei2x...

5.4CVSS4.8AI score0.00032EPSS
Exploits0References1
CVE
CVE
added 2025/09/22 9:15 a.m.7 views

CVE-2025-9035

The CVE-2025-9035 issue affects Horato Internet Technologies Ind. And Trade Inc. Virtual Library Platform. Multiple connected sources confirm a vulnerability in input handling during web page generation that enables Reflected Cross-Site Scripting (XSS) in versions older than a released fixed vers...

5.4CVSS5.4AI score0.00032EPSS
Exploits0References2
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-9035 Malicious code in @malware-test-unarm-tolas-loxes-aunts/test-mlw3-unarm-tolas-loxes-aunts (npm)

The package @malware-test-unarm-tolas-loxes-aunts/test-mlw3-unarm-tolas-loxes-aunts was found to contain malicious code...

7.2AI score
Exploits0
Circl
Circl
added 2025/06/22 3:0 p.m.1 views

CVE-2018-9035

creationtimestamp| type| source ---|---|--- 2025-06-22 15:00:07+00:00| published-proof-of-concept| Telegram/JhIwgOcKr8EuzXdP4lXz4VNzj9O9Xya0EghIe8UBLFzF5XU 2025-06-22 21:00:05+00:00| published-proof-of-concept| Telegram/19EMVZIHpcnMlAoFeCqFg0vg5TINRuzyp1l3kYKW1wZpE...

9.6CVSS8.7AI score0.08414EPSS
Exploits5
Circl
Circl
added 2024/09/20 6:4 p.m.0 views

CVE-2024-9035

creationtimestamp| type| source ---|---|--- 2024-09-20 18:04:52+00:00| seen| https://t.me/cvedetector/6107...

7.5CVSS7.3AI score0.00085EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/09/20 3:0 p.m.11 views

CVE-2024-9035 code-projects Blood Bank Management System Admin Login login.php sql injection

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/login.php of the component Admin Login. The manipulation of the argument username/password leads to sql injection. It is possible to...

7.5CVSS7.3AI score0.00085EPSS
Exploits1References5
CVE
CVE
added 2024/09/20 3:0 p.m.42 views

CVE-2024-9035

The CVE-2024-9035 entry concerns Code-projects Blood Bank Management System 1.0. The vulnerability exists in the Admin Login component, specifically in /admin/login.php, where manipulating the username and password parameters yields a SQL injection. It is exploitable remotely and the exploit has ...

7.5CVSS7.5AI score0.00085EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2024/09/20 3:0 p.m.15 views

CVE-2024-9035 code-projects Blood Bank Management System Admin Login login.php sql injection

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/login.php of the component Admin Login. The manipulation of the argument username/password leads to sql injection. It is possible to...

7.5CVSS0.00085EPSS
Exploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:14 a.m.2 views

SUSE CVE-2019-9035

An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is a stack-based buffer over-read in the function ReadNextStructField in mat5.c...

9.1CVSS9.3AI score0.00196EPSS
Exploits1References3
Packet Storm
Packet Storm
added 2021/08/06 12:0 a.m.504 views

Constructor.Win32.SS.11.c Unauthenticated Open Proxy

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/da60b92742abff72930879fa8560b3c3.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Constructor.Win32.SS.11.c Vulnerability: Unauthenticated Open Proxy Description: The malware listens...

0.1AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2021/02/08 12:0 a.m.48 views

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2021-9035)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9035 advisory. - target: fix XCOPY NAA identifier lookup David Disseldorp Orabug: 32248040 CVE-2020-28374 - tty: Fix -session locking Jann Horn Orabug: 32266681...

8.8CVSS7AI score0.00579EPSS
Exploits1References4
UbuntuCve
UbuntuCve
added 2019/02/23 12:29 p.m.17 views

CVE-2019-9035

An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is a stack-based buffer over-read in the function ReadNextStructField in mat5.c...

9.1CVSS7.5AI score0.00196EPSS
Exploits1References3
CVE
CVE
added 2019/02/23 12:0 p.m.40 views

CVE-2019-9035

CVE-2019-9035 affects the MAT file I/O library libmatio.a in matio (version 1.5.13). A stack-based buffer over-read occurs in the function ReadNextStructField() in mat5.c, as documented across multiple sources. The vulnerability is confirmed by CVSS details (NVD) indicating high impact on confide...

9.1CVSS9.2AI score0.00196EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2018/04/04 7:29 p.m.15 views

CVE-2018-9035

CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordPress allows remote attackers to inject spreadsheet formulas into CSV files via the contact form...

9.6CVSS7.6AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2018/04/04 7:29 p.m.5 views

CVE-2018-9035

CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordPress allows remote attackers to inject spreadsheet formulas into CSV files via the contact form...

9.6CVSS5.6AI score0.08414EPSS
Exploits5References2
CVE
CVE
added 2018/04/04 7:0 p.m.61 views

CVE-2018-9035

CVE-2018-9035 affects the WordPress plugin Contact Form 7 to Database Extension (v2.10.32). The vulnerability is a CSV Injection in ExportToCsvUtf8.php where a column value is printed without validating whether it contains a spreadsheet formula, allowing remote attackers to inject formulas into g...

9.6CVSS9.3AI score0.08414EPSS
Exploits5References1Affected Software1
Packet Storm
Packet Storm
added 2018/03/31 12:0 a.m.49 views

WordPress Contact Form 7 To Database Extension 2.10.32 CSV Injection

Exploit Title : Contact Form 7 to Database Extension Wordpress Plugin CSV Injection Date: 23-03-2018 Exploit Author : Stefan Broeder Contact : https://twitter.com/stefanbroeder Vendor Homepage: None Software Link: https://wordpress.org/plugins/contact-form-7-to-database-extension Version: 2.10.32...

9.1AI score0.08414EPSS
Exploits5
exploitpack
exploitpack
added 2018/03/30 12:0 a.m.25 views

WordPress Plugin Contact Form 7 to Database Extension 2.10.32 - CSV Injection

WordPress Plugin Contact Form 7 to Database Extension 2.10.32 - CSV Injection Exploit Title : Contact Form 7 to Database Extension Wordpress Plugin CSV Injection Date: 23-03-2018 Exploit Author : Stefan Broeder Contact : https://twitter.com/stefanbroeder Vendor Homepage: None Software Link:...

6.8CVSS9.6AI score0.08414EPSS
Exploits5
Rows per page
Query Builder