Lucene search
+L

11233 matches found

Vulnrichment
Vulnrichment
•added 2026/04/06 12:00 a.m.•9 views

CVE-2026-31062

UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the filename parameter of the formFtpServerDirConfig function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

6AI score0.00229EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/06 12:00 a.m.•6 views

CVE-2026-31062: Buffer Copy without Checking Size of Input

UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the filename parameter of the formFtpServerDirConfig function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

4.5CVSS5.9AI score0.00229EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/06 12:00 a.m.•9 views

CVE-2026-35399: Improper Neutralization of Input During Web Page Generation

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, a stored XSS vulnerability allows an attacker to inject malicious scripts through a backup filename. This could lead to unauthorized execution of malicious code in the victim's browser, compromising session data or executing...

8.5CVSS6AI score0.00288EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/04/06 12:00 a.m.•58 views

CVE-2026-31062

UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the filename parameter of the formFtpServerDirConfig function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

0.00229EPSS
SaveExploits1References1
CVE
CVE
•added 2026/04/06 12:00 a.m.•43 views

CVE-2026-31062

The UTT Aggressive 520W wireless router (version v3v1.7.7-180627 ) is vulnerable to a buffer overflow within the formFtpServerDirConfig function. The root cause is the copying of buffers without validating the size of the input data, specifically within the filename parameter . A remote attacker ...

4.5CVSS6AI score0.00229EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/06 12:00 a.m.•10 views

CVE-2026-5641: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown function of the file /admin/update-image1.php of the component Parameter Handler. The manipulation of the argument filename results in sql injection. The attack may be performed from...

6.5CVSS6.4AI score0.00196EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/06 12:00 a.m.•11 views

CVE-2026-5639: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in PHPGurukul Online Shopping Portal Project 2.1. Impacted is an unknown function of the file /admin/update-image3.php of the component Parameter Handler. Executing a manipulation of the argument filename can lead to sql injection. The attack can be executed remotely. The...

6.5CVSS6.4AI score0.00246EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/06 12:00 a.m.•25 views

PT-2026-30587

A flaw has been found in PHPGurukul Online Shopping Portal Project 2.1. Impacted is an unknown function of the file /admin/update-image3.php of the component Parameter Handler. Executing a manipulation of the argument filename can lead to sql injection. The attack can be executed remotely. The...

6.5CVSS5.8AI score0.00246EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/04/06 12:00 a.m.•28 views

PHPGurukul Online Shopping Portal Project SQL Injection Vulnerability

The PHPGurukul Online Shopping Portal Project is an online shopping portal project developed by PHPGurukul Corporation. Version 2.1 of the PHPGurukul Online Shopping Portal Project contains a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter filename ...

6.5CVSS6.5AI score0.00196EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/04/06 12:00 a.m.•22 views

PT-2026-30590

A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown function of the file /admin/update-image1.php of the component Parameter Handler. The manipulation of the argument filename results in sql injection. The attack may be performed from...

6.5CVSS5.6AI score0.00196EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/06 12:00 a.m.•9 views

CVE-2026-5640: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown function of the file /admin/update-image2.php of the component Parameter Handler. The manipulation of the argument filename leads to sql injection. The attack is possible to be...

6.5CVSS6.4AI score0.00192EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/06 12:00 a.m.•25 views

PHPGurukul Online Shopping Portal Project SQL Injection Vulnerability

The PHPGurukul Online Shopping Portal Project is an online shopping portal project developed by PHPGurukul Corporation. Version 2.1 of the PHPGurukul Online Shopping Portal Project contains a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter filename ...

6.5CVSS6.5AI score0.00192EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/04/06 12:00 a.m.•35 views

PT-2026-30588

A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown function of the file /admin/update-image2.php of the component Parameter Handler. The manipulation of the argument filename leads to sql injection. The attack is possible to be...

6.5CVSS5.7AI score0.00192EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/04/06 12:00 a.m.•24 views

UTT 520W security vulnerability

UTT 520W is a wireless router produced by China's UT Technology Co., Ltd. The UTT 520W v3v1.7.7-180627 version contains a security vulnerability. This vulnerability stems from a buffer overflow in the filename parameter of the formFtpServerDirConfig function, which could lead to a denial-of-servi...

4.5CVSS5.8AI score0.00229EPSS
SaveExploits1References1
NVD
NVD
•added 2026/04/05 10:16 p.m.•21 views

CVE-2026-5597

A flaw has been found in griptape-ai griptape 0.19.4. This affects an unknown part of the file griptape\tools\computer\tool.py of the component ComputerTool. Executing a manipulation of the argument filename can lead to path traversal. It is possible to launch the attack remotely. The exploit has...

6.5CVSS0.00422EPSS
SaveExploits0References4
Snyk
Snyk
•added 2026/04/05 10:08 p.m.•12 views

Directory Traversal

Overview griptape is a Modular Python framework for LLM workflows, tools, memory, and data. Affected versions of this package are vulnerable to Directory Traversal via the filename handling in the code-writing path used by executecodeincontainer in griptape/tools/computer/tool.py. An attacker can...

6.5CVSS6.8AI score0.00422EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/05 10:08 p.m.•9 views

Directory Traversal

Overview griptape-tools is a Tools for the Griptape framework. Affected versions of this package are vulnerable to Directory Traversal via the filename handling in the code-writing path used by executecodeincontainer in griptape/tools/computer/tool.py. An attacker can write arbitrary files on the...

6.5CVSS6.8AI score0.00422EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/04/05 9:15 p.m.•7 views

CVE-2026-5597 griptape-ai griptape ComputerTool tool.py path traversal

A flaw has been found in griptape-ai griptape 0.19.4. This affects an unknown part of the file griptape\tools\computer\tool.py of the component ComputerTool. Executing a manipulation of the argument filename can lead to path traversal. It is possible to launch the attack remotely. The exploit has...

6.5CVSS6.2AI score0.00422EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/04/05 9:15 p.m.•58 views

CVE-2026-5597 griptape-ai griptape ComputerTool tool.py path traversal

A flaw has been found in griptape-ai griptape 0.19.4. This affects an unknown part of the file griptape\tools\computer\tool.py of the component ComputerTool. Executing a manipulation of the argument filename can lead to path traversal. It is possible to launch the attack remotely. The exploit has...

6.5CVSS0.00422EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/04/05 12:00 a.m.•21 views

PT-2026-30509

A flaw has been found in griptape-ai griptape 0.19.4. This affects an unknown part of the file griptapetoolscomputertool.py of the component ComputerTool. Executing a manipulation of the argument filename can lead to path traversal. It is possible to launch the attack remotely. The exploit has be...

6.5CVSS6.2AI score0.00422EPSS
SaveExploits0References5
Rows per page
Query Builder