Lucene search
+L

3483 matches found

Positive Technologies
Positive Technologies
added 2025/09/03 12:0 a.m.5 views

PT-2025-35700

Name of the Vulnerable Software and Affected Versions: Akinsoft MyRezzta versions s2.02.02 through v2.05.00 Description: An authorization bypass exists in Akinsoft MyRezzta due to a user-controlled key, allowing for forceful browsing. Recommendations: Update Akinsoft MyRezzta to version 2.05.01 o...

6.8CVSS6.4AI score0.00197EPSS
SaveExploits0References5
NVD
NVD
added 2025/09/02 12:15 p.m.8 views

CVE-2024-12973

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.7CVSS0.00139EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/09/02 11:43 a.m.7 views

CVE-2024-12973

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.7CVSS5.8AI score0.00139EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/09/02 11:43 a.m.4 views

CVE-2024-12973 Host Header Injection in Akinsoft's OctoCloud

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.7CVSS5.8AI score0.00139EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/02 11:43 a.m.11 views

CVE-2024-12973 Host Header Injection in Akinsoft's OctoCloud

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.7CVSS0.00139EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/09/02 12:0 a.m.10 views

PT-2025-35549

Name of the Vulnerable Software and Affected Versions: Akinsoft OctoCloud versions s1.09.01 through v1.11.00 Description: An origin validation error exists in Akinsoft OctoCloud, enabling HTTP response splitting. This issue is categorized as CAPEC - 87 - Forceful Browsing. Recommendations: Update...

4.7CVSS6.4AI score0.00139EPSS
SaveExploits0References6
NVD
NVD
added 2025/09/01 1:15 p.m.4 views

CVE-2024-12924

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Akınsoft QR Menü allows Forceful Browsing, Phishing. This issue affects QR Menü: from s1.05.05 before v1.05.12...

6.3CVSS0.00175EPSS
SaveExploits0References2
CVE
CVE
added 2025/09/01 12:33 p.m.13 views

CVE-2024-12924

CVE-2024-12924 describes an open redirect vulnerability in Akınsoft QR Menü. Affected versions are s1.05.05 up to v1.05.12 (prior to 1.05.12). The root cause is improper handling of target jumps, enabling an attacker to redirect victims to arbitrary websites (phishing/forceful browsing). The CVSS...

6.3CVSS5.8AI score0.00175EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/01 12:33 p.m.10 views

CVE-2024-12924 Open Redirect in Akinsoft's QR Menu

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Akınsoft QR Menü allows Forceful Browsing, Phishing. This issue affects QR Menü: from s1.05.05 before v1.05.12...

6.3CVSS0.00175EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/09/01 12:33 p.m.6 views

CVE-2024-12924

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Akınsoft QR Menü allows Forceful Browsing, Phishing. This issue affects QR Menü: from s1.05.05 before v1.05.12...

6.3CVSS5.8AI score0.00175EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/09/01 12:33 p.m.3 views

CVE-2024-12924 Open Redirect in Akinsoft's QR Menu

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Akınsoft QR Menü allows Forceful Browsing, Phishing. This issue affects QR Menü: from s1.05.05 before v1.05.12...

6.3CVSS5.8AI score0.00175EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-30884

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The issue was resolved with additional restrictions on CSS compositing. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Visiting a maliciously...

4.7CVSS5.9AI score0.01114EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
added 2025/08/29 12:0 a.m.15 views

Wireshark Analyzer 4.4.9

Wireshark is a GTK+-based network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and Win32 and to give Wireshark features that are missing from closed-source sniffers. Thi...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/08/25 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2017-7142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. Safari before 11 is affected. The issue involves the WebKit Storage component. It allows attackers to bypass...

5.3CVSS6.7AI score0.01705EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/08/20 1:9 p.m.3 views

CVE-2025-24322

An unsafe default authentication vulnerability exists in the Initial Setup Authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted network request can lead to arbitrary code execution. An attacker can browse to the device to trigger this vulnerability...

8.1CVSS8AI score0.00574EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/17 5:25 p.m.21 views

CVE-2025-8361

Missing Authorization vulnerability in Drupal Config Pages allows Forceful Browsing.This issue affects Config Pages: from 0.0.0 before 2.18.0...

7.6CVSS7.2AI score0.00271EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/17 5:25 p.m.18 views

CVE-2025-8996

Missing Authorization vulnerability in Drupal Layout Builder Advanced Permissions allows Forceful Browsing.This issue affects Layout Builder Advanced Permissions: from 0.0.0 before 2.2.0...

4.3CVSS7.2AI score0.00236EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/15 5:15 p.m.14 views

CVE-2025-8996

Missing Authorization vulnerability in Drupal Layout Builder Advanced Permissions allows Forceful Browsing.This issue affects Layout Builder Advanced Permissions: from 0.0.0 before 2.2.0...

4.3CVSS0.00236EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/15 5:15 p.m.9 views

CVE-2025-8361

Missing Authorization vulnerability in Drupal Config Pages allows Forceful Browsing.This issue affects Config Pages: from 0.0.0 before 2.18.0...

7.6CVSS0.00271EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/15 5:15 p.m.3 views

CVE-2025-8361

Missing Authorization vulnerability in Drupal Config Pages allows Forceful Browsing.This issue affects Config Pages: from 0.0.0 before 2.18.0...

7.6CVSS5.8AI score0.00271EPSS
SaveExploits0References1
Rows per page
Query Builder