Lucene search
+L

193073 matches found

Kitploit
Kitploit
•added 2026/09/23 11:35 p.m.•9 views

CVE-2025-12758

CVE-2025-12758: Validator.js isLength Unicode Variation Selector Bypass CVE ID: CVE-2025-12758 CVSS Score: 8.7 HIGH Severity: HIGH CWE: CWE-792 Incomplete Filtering of One or More Instances of Special Elements Published: November 26, 2025 Disclosed: October 19, 2025 Vulnerability Overview This...

8.7CVSS7.1AI score0.00517EPSS
SaveExploits2
RedHat Linux
RedHat Linux
•added 2026/09/23 10:13 p.m.•4 views

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

6.1CVSS5.8AI score0.0031EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/09/23 10:13 p.m.•4 views

sqlparse: sqlparse: Denial of Service via quadratic CPU consumption in comment grouping

A flaw was found in sqlparse, a Python module for parsing SQL. A remote attacker could exploit this vulnerability by providing specially crafted SQL input that contains numerous comment-only statements. This could cause the groupcomments function to repeatedly rescan these statements, leading to...

8.7CVSS5.9AI score0.00263EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/09/23 9:13 p.m.•5 views

nanoid: nanoid: Denial of Service via negative size input in non-secure module functions

A flaw was found in nanoid Nano ID, a JavaScript library used for generating unique identifiers. This vulnerability allows an attacker to cause a Denial of Service DoS by providing a negative size input to the customAlphabet or nanoid functions within the library's non-secure module. When a...

8.2CVSS5.8AI score0.0033EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2026/09/23 9:13 p.m.•6 views

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

6.1CVSS5.8AI score0.0031EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/09/23 9:07 p.m.•8 views

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

6.1CVSS5.8AI score0.0031EPSS
SaveExploits0References8
Kitploit
Kitploit
•added 2026/09/23 9:04 p.m.•11 views

CVE-2025-25347

CVE-2025-25347 Overview This tool is used to test the vulnerability CVE-2025-25347 in QingLong Panel, an open-source platform for task automation management. This vulnerability allows Remote Code Execution RCE because the panel does not implement adequate input validation and access control on...

6.6AI score
SaveExploits0
NVD
NVD
•added 2026/09/23 8:17 p.m.•9 views

CVE-2026-84714

A flaw was found in the automation-controller input-validation guard sanitizejinja. The function uses two regular expressions to reject user-supplied Jinja, but the patterns stop at the first interior '' or '%' character, so a Jinja expression containing an inner brace for example an empty dict i...

7.1CVSS0.00293EPSS
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/23 6:26 p.m.•7 views

CVE-2025-50565

CVE-2025-50565 Description Doubo ERP 1.0 has an SQL injection vulnerability due to a lack of filtering of user input, which can be remotely initiated by an attacker. Vulnerability Type SQL Injection Attack Type Remote Impact Information Disclosure true Has vendor confirmed true Discoverer...

6AI score0.00249EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/09/23 5:52 p.m.•4 views

CVE-2026-71300

A flaw was found in Apache Camel Atmosphere Websocket. This improper input validation vulnerability allows a remote attacker to inject specific Exchange headers, such as websocket.connectionKey.list, which are not properly filtered. By manipulating these headers, an attacker can take control of t...

7.3CVSS5.9AI score0.00738EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2026/09/23 5:12 p.m.•3 views

postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump

A vulnerability in PostgreSQL allows a malicious origin-server superuser to achieve client-side arbitrary code execution during a database restore. By injecting untrusted data into a pgdump export, the attacker can exploit the input expansion of the psql \restrict meta-command. When a victim...

8.8CVSS6.3AI score0.00355EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/23 5:07 p.m.•11 views

CVE-2023-32692-CodeIgniter4

CVE-2023-32692 — CodeIgniter 4 Validation Rule Injection CVE-2023-32692 is a code injection vulnerability in the CodeIgniter 4 PHP framework, affecting versions 4.0.0 through 4.3.4. It was fixed in 4.3.5 released June 2023. This is a demo environment for anyone that wants to play with it...

9.8CVSS8.2AI score0.01126EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/23 4:47 p.m.•7 views

Security Bulletin: This Power System update is being released to address CVE-2026-17503

Summary Power Systems Firmware is affected by a vulnerability in the partition firmware runtime boot configuration. An attacker with root access to a partition can maliciously alter partition nvram, causing the partition to fail to boot. This condition persists until operator intervention —...

5.1CVSS6AI score0.00105EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2026/09/23 2:08 p.m.•4 views

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

6.1CVSS5.8AI score0.0031EPSS
SaveExploits0References8
NCSC
NCSC
•added 2026/09/23 1:28 p.m.•5 views

vulnerabilities in Adobe Experience Manager Forms JEE

Adobe has identified 6 vulnerabilities in Adobe Experience Manager AEM Forms for Java Enterprise Edition JEE, including AEM 6.5 Forms and AEM 6.5 LTS Forms. These vulnerabilities concern various security issues, such as improper authorization, inadequate input validation, Server-Side Request...

10CVSS6.7AI score0.01494EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/23 12:17 p.m.•10 views

CVE-2026-80444

URL redirection to untrusted site 'open redirect' vulnerability in Abis Technology Ltd. Co. AVESİS allows Input Data Manipulation. This issue affects AVESİS: from 202608201331 before 202608240351...

5.4CVSS0.00141EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/23 11:42 a.m.•6 views

EUVD-2026-85259

URL redirection to untrusted site 'open redirect' vulnerability in Abis Technology Ltd. Co. AVESİS allows Input Data Manipulation. This issue affects AVESİS: from 202608201331 before 202608240351...

5.4CVSS5.6AI score0.00141EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/23 11:42 a.m.•35 views

CVE-2026-80444 Unauthenticated Open Redirect Vulnerability in Abis Technology's AVESİS

URL redirection to untrusted site 'open redirect' vulnerability in Abis Technology Ltd. Co. AVESİS allows Input Data Manipulation. This issue affects AVESİS: from 202608201331 before 202608240351...

5.4CVSS0.00141EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/23 11:42 a.m.•3 views

CVE-2026-80444

Abis Technology Ltd. Co. AVESİS is vulnerable to an open redirect vulnerability caused by Input Data Manipulation . This flaw allows an attacker to redirect users to an untrusted site. The issue specifically affects versions from 202608201331 before 202608240351 . Exploitation details are not pro...

5.4CVSS5.6AI score0.00141EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/23 9:37 a.m.•43 views

CVE-2026-91928 Apache Sling XSS: Sanitizer bypass, uncontrolled resource consumption and failure pf protection mechanisms

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache Sling XSS. This issue affects Apache Sling XSS: before 2.4.12. Users are recommended to upgrade to version 2.4.12, which fixes the issue...

0.0017EPSS
SaveExploits0References1
Rows per page
Query Builder