Lucene search
+L

25 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2021-23153

Malware in sbrugna...

5.4CVSS6AI score0.00503EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2008-0944

Malware in sbrugna...

6.8CVSS6.4AI score0.00874EPSS
SaveExploits1References4
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/09/05 5:10 p.m.•12 views

Malicious code in meissa-bioinformatics-event-module (npm)

The package meissa-bioinformatics-event-module was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/09/05 5:10 p.m.•10 views

MAL-2025-45164 Malicious code in meissa-bioinformatics-event-module (npm)

The package meissa-bioinformatics-event-module was found to contain malicious code...

7AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 6:39 p.m.•20 views

CVE-2021-36551

TikiWiki v21.4 was discovered to contain a cross-site scripting XSS vulnerability in the component tiki-calendar.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload under the Add Event module...

5.4CVSS6.1AI score0.00503EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/21 8:27 p.m.•23 views

CVE-2008-0937

SQL injection vulnerability in index.php in the Tiny Event tinyevent 1.01 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action, a different vector than CVE-2007-1811...

7.5CVSS8.7AI score0.01029EPSS
SaveExploits2References1
BDU FSTEC
BDU FSTEC
•added 2024/11/05 12:00 a.m.•20 views

A vulnerability exists in the web/ajax/event.php module of the ZoneMinder video surveillance software, which allows a intruder to execute arbitrary code.

The vulnerability in the web/ajax/event.php module of the ZoneMinder video surveillance software lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by injecting a specially crafted SQL query...

9.9CVSS7.1AI score0.3661EPSS
SaveExploits9References3Affected Software1
SUSE CVE
SUSE CVE
•added 2023/02/15 6:03 a.m.•14 views

SUSE CVE-2009-2699

The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime APR library before 1.3.9, as used in the Apache HTTP Server before 2.2.14 and other products, does not properly handle errors, which allows remote attackers to cause a denial of service daemon...

7.5CVSS8.9AI score0.14173EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/11/08 12:00 a.m.•19 views

EyesOfNetwork 跨站脚本漏洞

EyesOfNetwork EON is an open source, free IT monitoring solution from the EyesOfNetwork community. The solution provides features such as a business process configuration tool, generating pop-up windows when events occur in the active queue, and more. A cross-site scripting vulnerability exists i...

4.8CVSS4.9AI score0.00402EPSS
SaveExploits0References2
OSV
OSV
•added 2021/10/28 8:15 p.m.•17 views

CVE-2021-36551

TikiWiki v21.4 was discovered to contain a cross-site scripting XSS vulnerability in the component tiki-calendar.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload under the Add Event module...

5.4CVSS5.9AI score0.00503EPSS
SaveExploits1References1
NVD
NVD
•added 2021/10/28 8:15 p.m.•34 views

CVE-2021-36551

TikiWiki v21.4 was discovered to contain a cross-site scripting XSS vulnerability in the component tiki-calendar.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload under the Add Event module...

5.4CVSS0.00503EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/10/28 8:15 p.m.•11 views

CVE-2021-36551

TikiWiki v21.4 was discovered to contain a cross-site scripting XSS vulnerability in the component tiki-calendar.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload under the Add Event module...

5.4CVSS6.2AI score0.00503EPSS
SaveExploits1References2
CVE
CVE
•added 2021/10/28 7:11 p.m.•75 views

CVE-2021-36551

CVE-2021-36551 affects TikiWiki v21.4, specifically the tiki-calendar.php component in the Add Event module. The vulnerability is a cross-site scripting (XSS) flaw that allows an attacker to execute arbitrary web scripts or HTML via a crafted payload. Exploitation details or in-the-wild status ar...

5.4CVSS5.3AI score0.00503EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/10/28 12:00 a.m.•6 views

PT-2021-21288

Name of the Vulnerable Software and Affected Versions TikiWiki version 21.4 Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload under the Add Event module in the tiki-calendar.php component. This is a cross-site scripting XSS issue. Recommendation...

5.4CVSS0.00503EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/28 12:00 a.m.•10 views

CVE-2021-36551: Improper Neutralization of Input During Web Page Generation

TikiWiki v21.4 was discovered to contain a cross-site scripting XSS vulnerability in the component tiki-calendar.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload under the Add Event module...

5.4CVSS6AI score0.00503EPSS
SaveExploits1References2
Drupal
Drupal
•added 2012/01/11 12:00 a.m.•40 views

SA-CONTRIB-2012-004 - Date - SQL injection

CVE: CVE-2012-1626 This module enables you to add and administer date fields to nodes. It includes Date Tools, that allows users to convert nodes created with the Event module into Date fields. The conversion form for Events is vulnerable to SQL injection. This vulnerability is mitigated by the...

6CVSS6.9AI score0.01105EPSS
SaveExploits0References10
zdt
zdt
•added 2011/06/26 12:00 a.m.•36 views

JoomlaXi Persistent XSS Vulnerability

Exploit for php platform in category web applications 1.JoomlaXi persistent XSS vulnerabilty vendor: www.joomlaxi.com Author: 3psil0nLambDa a.k.a Karthik Email: email protected My blog: epsilonlambda.co.cc Google dork: © 2008-2010 JoomlaXi...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2011/06/26 12:00 a.m.•33 views

Joomla! Component JoomlaXi - Persistent Cross-Site Scripting

Joomla! Component JoomlaXi - Persistent Cross-Site Scripting 1.JoomlaXi persistent XSS vulnerabilty vendor: www.joomlaxi.com Author: 3psil0nLambDa a.k.a Karthik Email: [email protected] My blog: epsilonlambda.co.cc Google dork: © 2008-2010 JoomlaXi...

6.8AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2011/06/26 12:00 a.m.•39 views

JoomlaXi Cross Site Scripting

1.JoomlaXi persistent XSS vulnerabilty vendor: www.joomlaxi.com Author: 3psil0nLambDa a.k.a Karthik Email: [email protected] My blog: epsilonlambda.co.cc Google dork: © 2008-2010 JoomlaXi...

7.4AI score
SaveExploits0
NVD
NVD
•added 2006/12/28 9:28 p.m.•30 views

CVE-2006-6800

PHP remote file inclusion in eventcal/modeventcal.php in the event module 1.0 for Limbo CMS allows remote attackers to execute arbitrary PHP code via a URL in the lmabsolutepath parameter...

6.8CVSS7.6AI score0.0347EPSS
SaveExploits2References9
Rows per page
Query Builder