Lucene search
+L

11 matches found

GithubExploit
GithubExploit
•added 2026/09/29 8:17 p.m.•18 views

Exploit for PHP Remote File Inclusion in Wordpress

⚡ XWPRCE — CVE-2026-87902 Hacker Console WordPress Core g...

8.1CVSS5.9AI score0.19756EPSS
SaveExploits30
OSV
OSV
•added 2026/07/07 2:34 p.m.•14 views

PYSEC-2026-1357 FastAPI Admin Cross-site Scripting vulnerability in the Config-Create function

A cross-site scripting XSS vulnerability in the Config-Create function of fastapi-admin pro v0.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

6.1CVSS6AI score0.00286EPSS
SaveExploits0References6
PyPA
PyPA
•added 2026/07/07 2:34 p.m.•23 views

FastAPI Admin Cross-site Scripting vulnerability in the Config-Create function

A cross-site scripting XSS vulnerability in the Config-Create function of fastapi-admin pro v0.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

6.1CVSS6AI score0.00286EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2025/08/01 2:44 p.m.•7 views

SUSE-SU-2025:02592-1 Security update for cosign

This update for cosign fixes the following issues: Update to version 2.5.3 jscSLE-23879: - CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego bsc1246725 Changelog: Update to 2.5.3: - Add signing-config create command 4280 - Allow multiple services to be specified for trusted-ro...

7.4CVSS5.8AI score0.00532EPSS
SaveExploits0References3
Veracode
Veracode
•added 2024/08/27 7:12 a.m.•19 views

Cross Site Scripting(XSS)

fastapi-admin is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to insufficient validation of the Product Name parameter in the Config-Create function, allowing attackers to inject and execute arbitrary web scripts or HTML...

6.1CVSS6.5AI score0.00286EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2024/08/26 6:33 p.m.•34 views

FastAPI Admin Cross-site Scripting vulnerability in the Config-Create function

A cross-site scripting XSS vulnerability in the Config-Create function of fastapi-admin pro v0.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

6.1CVSS5.7AI score0.00286EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2024/08/26 4:15 p.m.•15 views

CVE-2024-42818

A cross-site scripting XSS vulnerability in the Config-Create function of fastapi-admin pro v0.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

6.1CVSS5.9AI score0.00286EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/26 12:00 a.m.•1 views

CVE-2024-42818: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the Config-Create function of fastapi-admin pro v0.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

6.1CVSS6.1AI score0.00286EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/26 12:00 a.m.•17 views

PT-2024-30176

Name of the Vulnerable Software and Affected Versions fastapi-admin pro version 0.1.4 Description A cross-site scripting XSS vulnerability in the Config-Create function allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

6.1CVSS6AI score0.00286EPSS
SaveExploits0References13
CVE
CVE
•added 2024/08/26 12:00 a.m.•73 views

CVE-2024-42818

The software fastapi-admin pro version v0.1.4 is vulnerable to a cross-site scripting (XSS) vulnerability within the Config-Create function. An attacker can execute arbitrary web scripts or HTML by injecting a crafted payload into the Product Name parameter. To remediate this issue, users should ...

6.1CVSS5.8AI score0.00286EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/29 12:00 a.m.•11 views

PT-2024-40710 · Git +1 · Mosquitto

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap buffer overflow issue is reported, which can cause a crash. The crash occurs during specific function calls, including config add listener, config...

7.5AI score
SaveExploits0References2
Rows per page
Query Builder