Lucene search
+L

2838 matches found

Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.6 views

PT-2025-50288

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system write. An attacker could exploit this vulnerability to write malicious files to arbitrary locations on the file system. Exploitation of this...

6.2CVSS6.8AI score0.00636EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.14 views

PT-2025-50285

Name of the Vulnerable Software and Affected Versions ColdFusion versions 2025.4, 2023.16, and 2021.22 and earlier Description An improper input validation issue exists in ColdFusion that could allow a high privileged attacker to achieve arbitrary code execution. Exploitation of this issue does n...

8.4CVSS7AI score0.04255EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.9 views

PT-2025-50287

Name of the Vulnerable Software and Affected Versions ColdFusion versions 2025.4, 2023.16, and 2021.22 and earlier Description ColdFusion is affected by an Improper Restriction of XML External Entity Reference 'XXE' issue that could allow an attacker to read arbitrary files from the system. An...

8.6CVSS6AI score0.00511EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.11 views

PT-2025-50290

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Access Control vulnerability. A low privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized write access potentially resulting in denial of service...

5.6CVSS6.6AI score0.00127EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.11 views

PT-2025-50291

Name of the Vulnerable Software and Affected Versions ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier Description The software contains an issue with insufficiently protected credentials, potentially allowing limited unauthorized write access. An attacker could exploit improperly stored ...

5.3CVSS5.8AI score0.00425EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.9 views

PT-2025-50282

Name of the Vulnerable Software and Affected Versions ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier Description An improper input validation issue exists in ColdFusion that could allow an attacker to bypass security measures and gain unauthorized read and write access. Exploitation of...

9.1CVSS6.3AI score0.00647EPSS
SaveExploits0References10
Adobe
Adobe
added 2025/12/09 12:0 a.m.59 views

APSB25-105 : Security update available for Adobe ColdFusion

Adobe has released security updates for ColdFusion versions 2025, 2023 and 2021. These updates resolves critical and important vulnerability that could lead to arbitrary file system write, arbitrary file system read, arbitrary code execution, security feature bypass, and priviledge escalation...

7.5AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.7 views

PT-2025-50283

Name of the Vulnerable Software and Affected Versions ColdFusion versions 2025.4, 2023.16, and 2021.22 and earlier Description A Deserialization of Untrusted Data issue exists that could lead to arbitrary code execution with the privileges of the current user. A high-privileged attacker could...

9CVSS7.3AI score0.09336EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.7 views

PT-2025-50284

Name of the Vulnerable Software and Affected Versions ColdFusion versions 2025.4, 2023.16, and 2021.22 and earlier Description An improper access control issue exists in ColdFusion that could allow for arbitrary code execution with the privileges of the current user. An attacker with high...

9.1CVSS7.4AI score0.01177EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.11 views

PT-2025-50286

Name of the Vulnerable Software and Affected Versions ColdFusion versions 2025.4, 2023.16, and 2021.22 and earlier Description ColdFusion is affected by an Improper Restriction of XML External Entity Reference 'XXE' issue that could allow an attacker to read arbitrary files from the system...

8.6CVSS6.4AI score0.00537EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.14 views

PT-2025-50289

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could lead to arbitrary file system read. A high privileged attacker could exploit this vulnerability to access sensitive files and data on th...

6.2CVSS6.5AI score0.00482EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2025/10/28 4:10 a.m.217 views

Exploit for Improper Access Control in Adobe Coldfusion

PoC exploit for CVE-2023-26360, a Remote Code Execution vulnerab...

9.8CVSS7.9AI score0.97339EPSS
SaveExploits13
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2016-2219

Malware in sbrugna...

5.9CVSS6AI score0.02485EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2018-7818

Malware in sbrugna...

5.3CVSS7.5AI score0.05549EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2014-0602

Malware in sbrugna...

4.3CVSS6.4AI score0.02732EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-1999-0905

Malware in sbrugna...

5CVSS6.4AI score0.01614EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2005-4340

Malware in sbrugna...

7.2CVSS6.4AI score0.00358EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2006-2365

Malware in sbrugna...

5.8CVSS6.4AI score0.01282EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2019-17532

Malware in sbrugna...

10CVSS9AI score0.18858EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2009-3449

Malware in sbrugna...

4.3CVSS6.4AI score0.02493EPSS
SaveExploits0References4
Rows per page
Query Builder