Lucene search
+L

2895 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•8 views

CVE-2025-58226: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in iberezansky 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery interactive-3d-flipbook-powered-physics-engine allows Retrieve Embedded Sensitive Data.This issue affects 3D FlipBook – PDF Flipbook Viewer, Flipbook Image...

5.3CVSS5.8AI score0.00719EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
•added 2025/09/18 9:28 a.m.•32 views

CVE-2025-4688

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection. This issue affects SINAV.LINK Exam Result Module: before 1.2...

9.8CVSS5.6AI score0.00441EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/16 9:15 a.m.•17 views

CVE-2025-4688

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection. This issue affects SINAV.LINK Exam Result Module: before 1.2...

9.8CVSS0.00441EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2025/09/16 8:38 a.m.•8 views

CVE-2025-4688

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection. This issue affects SINAV.LINK Exam Result Module: before 1.2...

9.8CVSS5.9AI score0.00441EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/09/16 8:38 a.m.•27 views

CVE-2025-4688 SQLi in BGS Interactive's SINAV.LINK Exam Result Module

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection. This issue affects SINAV.LINK Exam Result Module: before 1.2...

9.8CVSS0.00441EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/09/16 8:38 a.m.•11 views

CVE-2025-4688 SQLi in BGS Interactive's SINAV.LINK Exam Result Module

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection. This issue affects SINAV.LINK Exam Result Module: before 1.2...

9.8CVSS5.8AI score0.00441EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/16 12:00 a.m.•5 views

CVE-2025-4688: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection. This issue affects SINAV.LINK Exam Result Module: before 1.2...

9.8CVSS5.9AI score0.00441EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/09/16 12:00 a.m.•15 views

BGS Interactive SINAV.LINK Exam Result Module SQL Injection Vulnerability

BGS Interactive SINAV.LINK Exam Result Module is a system component of BGS Interactive that manages exam results. A SQL injection vulnerability exists in BGS Interactive SINAV.LINK Exam Result Module versions prior to 1.2, which stems from improper neutralization of a special element and could le...

9.8CVSS5.7AI score0.00441EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
•added 2025/09/15 12:00 a.m.•18 views

Cyber Threat Hunting: Non-Parametric Mining of Attack Patterns from Cyber Threat Intelligence for Precise Threats Attribution

With the ever-changing landscape of cyber threats, identifying their origin has become paramount, surpassing the simple task of attack classification. Cyber threat attribution gives security analysts the insights they need to device effective threat mitigation strategies. Such strategies empower...

6.6AI score
SaveExploits0
Gitee
Gitee
•added 2025/09/14 5:14 p.m.•164 views

fimap

fimap is a Python tool designed to find, prepare, audit, exploit, and even automatically Google for local and remote file inclusion LFI/RFI bugs in web applications. It can identify and exploit file inclusion bugs, including include, includeonce, require, and requireonce functions. The tool has a...

7.1AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/09/11 11:24 p.m.•36 views

CVE-2025-59046

The npm package interactive-git-checkout is an interactive command-line tool that allows users to checkout a git branch while it prompts for the branch name on the command-line. It is available as an npm package and can be installed via npm install -g interactive-git-checkout. Versions up to and...

9.8CVSS8.3AI score0.01187EPSS
SaveExploits0References1
Snyk
Snyk
•added 2025/09/10 9:37 p.m.•17 views

Arbitrary Command Injection

Overview interactive-git-checkout is a CLI for simple branch switching Affected versions of this package are vulnerable to Arbitrary Command Injection due to using exec function without proper input validation or sanitization. An attacker can execute arbitrary system commands by supplying special...

9.8CVSS8.6AI score0.01187EPSS
SaveExploits0References2
osv_ghsa
osv_ghsa
•added 2025/09/10 9:37 p.m.•19 views

GHSA-4WCM-7HJF-6XW5 interactive-git-checkout has a Command Injection vulnerability

The npm package interactive-git-checkout is an interactive command-line tool that allows users to checkout a git branch while it prompts for the branch name on the command-line. It is available as an npm package and can be installed via npm install -g interactive-git-checkout. Resources: Project'...

9.8CVSS8.2AI score0.01187EPSS
SaveExploits0References4
Mend
Mend
•added 2025/09/09 10:33 p.m.•9 views

CVE-2025-59046

The npm package "interactive-git-checkout" is an interactive command-line tool that allows users to checkout a git branch while it prompts for the branch name on the command-line. It is available as an npm package and can be installed via "npm install -g interactive-git-checkout". Versions up to...

9.8CVSS8.2AI score0.01187EPSS
SaveExploits0References4
CVE
CVE
•added 2025/09/09 10:33 p.m.•63 views

CVE-2025-59046

The CVE-2025-59046 entry concerns the npm package interactive-git-checkout. Affected versions (up to and including 1.1.4) are vulnerable because the code passes the user-provided branch name directly to git checkout via Node.js child_process.exec() without input validation or sanitization, enabli...

9.8CVSS8.2AI score0.01187EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/09/09 10:33 p.m.•19 views

CVE-2025-59046 interactive-git-checkout has Command Injection vulnerability

The npm package interactive-git-checkout is an interactive command-line tool that allows users to checkout a git branch while it prompts for the branch name on the command-line. It is available as an npm package and can be installed via npm install -g interactive-git-checkout. Versions up to and...

9.8CVSS7.3AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/09 12:00 a.m.•6 views

CVE-2025-59046: Improper Neutralization of Special Elements used in a Command

The npm package interactive-git-checkout is an interactive command-line tool that allows users to checkout a git branch while it prompts for the branch name on the command-line. It is available as an npm package and can be installed via npm install -g interactive-git-checkout. Versions up to and...

9.8CVSS8.3AI score0.01187EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/09 12:00 a.m.•29 views

Interactive-git-checkout command injection vulnerability

interactive-git-checkout is a branch switching software by the individual developer Nino Filiu. A command injection vulnerability exists in interactive-git-checkout 1.1.4 and earlier versions, which stems from a failure to validate input or clean up branch names, which could lead to a command...

9.8CVSS8.3AI score0.01187EPSS
SaveExploits0References3
Packet Storm News
Packet Storm News
•added 2025/09/09 12:00 a.m.•26 views

A Decade-Long Landscape of Advanced Persistent Threats: Longitudinal Analysis and Global Trends

An advanced persistent threat APT refers to a covert, long-term cyberattack, typically conducted by state-sponsored actors, targeting critical sectors and often remaining undetected for long periods. In response, collective intelligence from around the globe collaborates to identify and trace...

6.6AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2025/09/07 10:52 p.m.•201 views

Exploit for Improper Handling of Parameters in Fortinet Fortiweb

CVE-2025-52970 FortiWeb Authentication Bypass to Remote Code E...

8.1CVSS8.4AI score0.10084EPSS
SaveExploits4
Rows per page
Query Builder