CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

249 matches found

Cvelist•added 2025/12/15 11:07 p.m.•56 views

CVE-2025-58173 FreshRSS vulnerable to authenticated RCE via path traversal inside include()

FreshRSS is a self-hosted RSS feed aggregator. In versions 1.23.0 through 1.27.0, using a path traversal inside the language user configuration parameter, it's possible to call install.php and perform various administrative actions as an unprivileged user. These actions include logging in as the...

8.7CVSS0.00701EPSS

SaveExploits1References7

CVE•added 2025/12/15 11:07 p.m.•92 views

CVE-2025-58173

FreshRSS (self-hosted RSS aggregator) is affected by a path traversal in the language configuration parameter that existed in versions 1.23.0–1.27.0. An unprivileged user could call install.php and perform administrative actions, including logging in as admin, creating a new admin user, or config...

8.8CVSS6AI score0.00701EPSS

SaveExploits1References7Affected Software1

EUVD•added 2025/12/15 11:07 p.m.•24 views

EUVD-2025-203469

8.7CVSS6AI score0.00701EPSS

SaveExploits1References7

Vulnrichment•added 2025/12/15 11:07 p.m.•11 views

CVE-2025-58173 FreshRSS vulnerable to authenticated RCE via path traversal inside include()

8.7CVSS6AI score0.00701EPSS

SaveExploits1References7

Positive Technologies•added 2025/12/15 12:00 a.m.•31 views

PT-2025-51321

Name of the Vulnerable Software and Affected Versions FreshRSS versions 1.23.0 through 1.27.0 Description FreshRSS is a self-hosted RSS feed aggregator. Versions 1.23.0 through 1.27.0 contain a path traversal issue within the language user configuration parameter. This allows an unprivileged user...

8.7CVSS5.9AI score0.00701EPSS

SaveExploits1References11

EUVD•added 2025/10/07 12:30 a.m.•19 views

EUVD-2018-11466

Malware in sbrugna...

6.1CVSS6.3AI score0.04432EPSS

SaveExploits5References6

EUVD•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-16931