Lucene search
K

34 matches found

OSV
OSV
added 2025/12/29 6:15 a.m.2 views

CVE-2025-15175

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. Affected by this issue is the function doAppList/appCommandAnalysis of the file src/main/java/com/sohu/cache/web/controller/AppController.java. Performing manipulation results in cross site scripting. It is possible to initiate the...

5.4CVSS5.8AI score
Exploits0References6
Circl
Circl
added 2025/07/08 1:16 a.m.3 views

CVE-2025-42980

creationtimestamp| type| source ---|---|--- 2025-07-08 01:16:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114814969134379111 2025-07-16 17:11:07+00:00| seen| https://bsky.app/profile/fraustief.bsky.social/post/3lu3vx5gtfk2k 2025-07-16 17:11:10+00:00| seen|...

9.1CVSS9.1AI score0.00645EPSS
Exploits0References3
Circl
Circl
added 2025/07/04 11:16 p.m.2 views

GHSA-J975-95F5-7WQH

creationtimestamp| type| source ---|---|--- 2025-07-04 23:16:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114797511485377082...

7.3AI score
Exploits0References1
Circl
Circl
added 2025/07/03 11:35 a.m.5 views

CVE-2025-6587

creationtimestamp| type| source ---|---|--- 2025-07-03 11:35:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt2n5p6moi2r...

5.2CVSS4.8AI score0.00103EPSS
Exploits0References1
Circl
Circl
added 2025/05/03 5:17 p.m.15 views

CVE-2025-4238

creationtimestamp| type| source ---|---|--- 2025-05-03 17:17:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14700 2025-05-03 18:06:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lobwjls6gk2j 2025-05-03 19:00:35+00:00| published-proof-of-concept|...

9.8CVSS7.3AI score0.00649EPSS
Exploits1References4
Circl
Circl
added 2025/04/10 9:49 a.m.11 views

CVE-2025-32140

creationtimestamp| type| source ---|---|--- 2025-04-10 09:49:04+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114313038004475519 2025-04-23 05:00:06+00:00| published-proof-of-concept| Telegram/qDzkx44siSc8n4X8sjQ5ZjiFphGSFajZZfESRCa-0oTFNSE 2025-04-23 09:00:07+00:00|...

9.9CVSS8.7AI score0.00204EPSS
Exploits1References2
Github Security Blog
Github Security Blog
added 2025/04/09 1:1 p.m.8 views

tendermint-rs's Light Client Verifier allows malicious validators to spoof votes from other validators

Name: ISA-2025-003: Malicious validator can spoof votes from other validators Component: tendermint-rs Criticality: High Catastrophic Impact; Rare Likelihood per ACMv1.2 Affected versions: = v0.40.2 Affected users: Everyone Description tendermint-rs contains a critical vulnerability in its light...

7.1AI score
Exploits0References3Affected Software1
OSV
OSV
added 2025/03/25 4:36 p.m.6 views

GHSA-3HJ6-R5C9-Q8F3 Frappe has possibility of SQL injection due to improper validations

Impact An SQL Injection vulnerability has been identified in Frappe Framework which could allow a malicious actor to access sensitive information. Workarounds Upgrading is required, no other workaround is present. Credits Thanks to Thanh of Calif.io for reporting the issue...

8.7CVSS7.4AI score0.00151EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/12/05 12:0 a.m.2 views

PT-2024-17425 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue was initially reported but later rejected as a candidate, and its usage was prevented. No further details are available about the natu...

7AI score
Exploits0References3
Circl
Circl
added 2024/11/11 6:56 a.m.4 views

CVE-2024-11017

creationtimestamp| type| source ---|---|--- 2024-11-11 06:56:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113463013134342227 2024-11-11 09:24:51+00:00| seen| https://t.me/cvedetector/10480...

8.8CVSS4.8AI score0.02056EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/11/17 11:50 a.m.1 views

CVE-2022-44577

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

5.8AI score
Exploits0References2
Hacker One
Hacker One
added 2020/07/16 2:34 p.m.18 views

Node.js third-party modules: [systeminformation] Command Injection via insecure command formatting

I would like to report a Command Injection vulnerability in the systeminformation package. It allows an attacker to inject arbitrary OS commands. Module Module name: systeminformation Version: 4.26.10 npm page: https://www.npmjs.com/package/systeminformation Module Description System and OS...

1.2AI score
Exploits0
securityvulns
securityvulns
added 2012/06/18 12:0 a.m.52 views

Arbitrary File Upload/Execution in Collabtive

TITLE: Arbitrary File Upload/Execution in Collabtive DATE: 06-04-2012 PRODUCT: Collabtive Web-Based Project Management Software http://collabtive.o-dyn.de/ VERSIONS: 0.7.5, 0.6.1 confirmed. All versions = 0.7.5 probable RESEARCHER: Mark Hoopes [email protected]/ ADDITIONAL INFORMATION:...

0.7AI score
Exploits0
0day.today
0day.today
added 2011/10/22 12:0 a.m.13 views

phpLDAPadmin <= 1.2.1.1 (query_engine) Remote PHP Code Injection

Exploit for php platform in category web applications ?php / ------------------------------------------------------------------------ phpLDAPadmin = 1.2.1.1 queryengine Remote PHP Code Injection Exploit ------------------------------------------------------------------------ author..................

7.1AI score
Exploits0
Rows per page
Query Builder