Lucene search
+L

8369 matches found

CVE
CVE
•added 2026/02/02 5:02 a.m.•54 views

CVE-2026-1745

CVE-2026-1745 affects SourceCodester Medical Certificate Generator App 1.0. The issue is a cross-site request forgery (CSRF) in an unknown part of the application, allowing remote exploitation. Public PoC/exploit references exist (e.g., proof-of-concept CSRF exploit). Connected advisories consist...

5.3CVSS5.1AI score0.00176EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2026/02/02 5:02 a.m.•55 views

CVE-2026-1745 SourceCodester Medical Certificate Generator App cross-site request forgery

A vulnerability was determined in SourceCodester Medical Certificate Generator App 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized...

5.3CVSS0.00176EPSS
SaveExploits1References6
EUVD
EUVD
•added 2026/02/02 5:02 a.m.•19 views

EUVD-2026-5094

A vulnerability was determined in SourceCodester Medical Certificate Generator App 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized...

5.3CVSS4.8AI score0.00176EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2026/02/02 5:02 a.m.•9 views

CVE-2026-1745 SourceCodester Medical Certificate Generator App cross-site request forgery

A vulnerability was determined in SourceCodester Medical Certificate Generator App 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized...

5.3CVSS5.1AI score0.00176EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2026/02/02 5:02 a.m.•12 views

CVE-2026-1745

A vulnerability was determined in SourceCodester Medical Certificate Generator App 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized...

5.3CVSS5.5AI score0.00176EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/02 12:00 a.m.•7 views

CVE-2026-1745: Cross-Site Request Forgery (CSRF)

A vulnerability was determined in SourceCodester Medical Certificate Generator App 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized...

5.3CVSS5.1AI score0.00176EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/02/02 12:00 a.m.•27 views

SourceCodester Medical Certificate Generator App 安全漏洞

The SourceCodester Medical Certificate Generator App is an open-source medical certification generator developed by SourceCodester. Version 1.0 of the SourceCodester Medical Certificate Generator App contains a security vulnerability. This vulnerability stems from an unknown issue involving...

5.3CVSS5.7AI score0.00176EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2026/02/02 12:00 a.m.•17 views

EulerOS 2.0 SP13 : bind (EulerOS-SA-2026-1217)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In specific circumstances, due to a weakness in the Pseudo Random Number Generator PRNG that is used, it is possible for an attacker to predict the...

8.6CVSS7AI score0.00667EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2026/01/30 9:51 p.m.•14 views

CVE-2026-25152 @backstage/plugin-techdocs-node vulnerable to possible Path Traversal in TechDocs Local Generator

Backstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node provides common node.js functionalities for TechDocs. In versions of @backstage/plugin-techdocs-node prior to 1.13.11 and 1.14.1, a path traversal vulnerability in the TechDocs local generator allow...

5.3CVSS5.9AI score0.0044EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/30 9:51 p.m.•10 views

CVE-2026-25152

Backstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node provides common node.js functionalities for TechDocs. In versions of @backstage/plugin-techdocs-node prior to 1.13.11 and 1.14.1, a path traversal vulnerability in the TechDocs local generator allow...

5.3CVSS5.9AI score0.0044EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2026/01/30 9:51 p.m.•25 views

CVE-2026-25152 @backstage/plugin-techdocs-node vulnerable to possible Path Traversal in TechDocs Local Generator

Backstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node provides common node.js functionalities for TechDocs. In versions of @backstage/plugin-techdocs-node prior to 1.13.11 and 1.14.1, a path traversal vulnerability in the TechDocs local generator allow...

5.3CVSS6AI score
SaveExploits0References3
Snyk
Snyk
•added 2026/01/30 9:51 p.m.•18 views

Directory Traversal

Overview @backstage/plugin-techdocs-node is a Common node.js functionalities for TechDocs, to be shared between techdocs-backend plugin and techdocs-cli Affected versions of this package are vulnerable to Directory Traversal via the TechdocsGenerator function when processing documentation from...

7CVSS6.1AI score0.0044EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/30 9:51 p.m.•41 views

CVE-2026-25152 @backstage/plugin-techdocs-node vulnerable to possible Path Traversal in TechDocs Local Generator

Backstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node provides common node.js functionalities for TechDocs. In versions of @backstage/plugin-techdocs-node prior to 1.13.11 and 1.14.1, a path traversal vulnerability in the TechDocs local generator allow...

5.3CVSS0.0044EPSS
SaveExploits0References1
Mend
Mend
•added 2026/01/30 9:51 p.m.•5 views

CVE-2026-25152

Backstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node provides common node.js functionalities for TechDocs. In versions of @backstage/plugin-techdocs-node prior to 1.13.11 and 1.14.1, a path traversal vulnerability in the TechDocs local generator allow...

6.5CVSS5.9AI score0.0044EPSS
SaveExploits0References5
CVE
CVE
•added 2026/01/30 9:51 p.m.•59 views

CVE-2026-25152

The CVE-2026-25152 entry concerns the Backstage @backstage/plugin-techdocs-node, where versions before 1.13.11 and 1.14.1 allow path traversal via the TechDocs local generator when techdocs.generator.runIn is set to local. This permits reading arbitrary host files as MkDocs follows symlinks in do...

6.5CVSS5.9AI score0.0044EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2026/01/30 6:21 a.m.•24 views

WordPress Favicon Generator plugin < 2.1 - Arbitrary File Deletion via CSRF vulnerability

Arbitrary File Deletion via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Favicon Generator versions 2.1...

6.5CVSS5.9AI score0.00253EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/30 12:00 a.m.•10 views

CVE-2026-25152: Improper Limitation of a Pathname to a Restricted Directory

Backstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node provides common node.js functionalities for TechDocs. In versions of @backstage/plugin-techdocs-node prior to 1.13.11 and 1.14.1, a path traversal vulnerability in the TechDocs local generator allow...

6.5CVSS5.9AI score0.0044EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/30 12:00 a.m.•27 views

Backstage path traversal vulnerability

Backstage is an open-source application developed by Backstage. It serves as an open platform for building developer portals. Versions of Backstage prior to 1.13.11 and 1.14.1 contained a path traversal vulnerability. This vulnerability stemmed from the local generator’s inability to prevent path...

6.5CVSS6AI score0.0044EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
•added 2026/01/29 12:00 a.m.•15 views

QCL-IDS: Quantum Continual Learning for Intrusion Detection with Fidelity-Anchored Stability and Generative Replay

Continual intrusion detection must absorb newly emerging attack stages while retaining legacy detection capability under strict operational constraints, including bounded compute and qubit budgets and privacy rules that preclude long-term storage of raw telemetry. We propose QCL-IDS, a...

5.9AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/01/29 12:00 a.m.•24 views

Microsoft Windows Script Host 5.812 File Generator

Microsoft Windows Script Host version 5.812 .vbs file generation tool that can be used to establish persistence on Windows systems...

5.9AI score
SaveExploits0
Rows per page
Query Builder