Lucene search
+L

90 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2020-21454

Malware in sbrugna...

6.1CVSS6.3AI score0.007EPSS
SaveExploits1References3
GithubExploit
GithubExploit
added 2025/10/05 1:15 p.m.238 views

Exploit for CVE-2025-56132

CVE-2025-56132 - LiquidFiles User Enumeration POC Vulnerab...

7.3CVSS6.4AI score0.00648EPSS
SaveExploits1
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2025-23563

Malicious code in bioql PyPI...

3.8CVSS6.6AI score0.00528EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.22 views

EUVD-2025-23554

Malicious code in bioql PyPI...

9.9CVSS6.6AI score0.0052EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2025-31771

Malicious code in bioql PyPI...

7.3CVSS6.6AI score0.00648EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2023-54257

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00309EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/01 12:42 a.m.9 views

CVE-2025-56132

LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality. The application returns distinguishable responses for valid and invalid email addresses, allowing unauthenticated attackers to determine the existence of user accounts. Version 4.2...

7.3CVSS7AI score0.00648EPSS
SaveExploits1References1
NVD
NVD
added 2025/09/30 7:15 p.m.9 views

CVE-2025-56132

LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality. The application returns distinguishable responses for valid and invalid email addresses, allowing unauthenticated attackers to determine the existence of user accounts. Version 4.2...

7.3CVSS0.00648EPSS
SaveExploits1References2
OSV
OSV
added 2025/09/30 7:15 p.m.4 views

CVE-2025-56132

LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality. The application returns distinguishable responses for valid and invalid email addresses, allowing unauthenticated attackers to determine the existence of user accounts. Version 4.2...

7.3CVSS5.8AI score0.00648EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/09/30 12:0 a.m.12 views

CVE-2025-56132

LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality. The application returns distinguishable responses for valid and invalid email addresses, allowing unauthenticated attackers to determine the existence of user accounts. Version 4.2...

0.00648EPSS
SaveExploits1References2
CVE
CVE
added 2025/09/30 12:0 a.m.24 views

CVE-2025-56132

LiquidFiles pre-4.2 is affected by a user-enumeration vulnerability in the password reset flow. Distinguishable responses to valid vs. invalid emails allow unauthenticated attackers to enumerate registered users. Upgrading to 4.2+ remedies this with user-based lockout and less informative errors;...

7.3CVSS6.6AI score0.00648EPSS
SaveIn wildExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/30 12:0 a.m.3 views

CVE-2025-56132

LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality. The application returns distinguishable responses for valid and invalid email addresses, allowing unauthenticated attackers to determine the existence of user accounts. Version 4.2...

6.6AI score0.00648EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/09/30 12:0 a.m.20 views

Liquidfiles 安全漏洞

Liquidfiles is a storage service for large, secure file transfers and sharing for companies and organizations from US-based Liquidfiles, Inc. A security vulnerability exists in Liquidfiles versions prior to 4.2, which stems from the password reset feature returning distinguishable responses that...

7.3CVSS6.5AI score0.00648EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/08/06 9:11 a.m.30 views

CVE-2025-46094

LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript...

3.8CVSS6.2AI score0.00528EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/08/06 12:14 a.m.25 views

CVE-2025-46093

LiquidFiles before 4.1.2 supports FTP SITE CHMOD for mode 6777 setuid and setgid, which allows FTPDrop users to execute arbitrary code as root by leveraging the Actionscript feature and the sudoers configuration...

9.9CVSS7.4AI score0.0052EPSS
SaveExploits1References1
NVD
NVD
added 2025/08/04 11:15 p.m.7 views

CVE-2025-46094

LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript...

3.8CVSS0.00528EPSS
SaveExploits1References2
OSV
OSV
added 2025/08/04 11:15 p.m.9 views

CVE-2025-46093

LiquidFiles before 4.1.2 supports FTP SITE CHMOD for mode 6777 setuid and setgid, which allows FTPDrop users to execute arbitrary code as root by leveraging the Actionscript feature and the sudoers configuration...

8.8CVSS6.2AI score0.0052EPSS
SaveExploits1References3
OSV
OSV
added 2025/08/04 11:15 p.m.7 views

CVE-2025-46094

LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript...

3.8CVSS5.8AI score0.00528EPSS
SaveExploits1References2
NVD
NVD
added 2025/08/04 11:15 p.m.53 views

CVE-2025-46093

LiquidFiles before 4.1.2 supports FTP SITE CHMOD for mode 6777 setuid and setgid, which allows FTPDrop users to execute arbitrary code as root by leveraging the Actionscript feature and the sudoers configuration...

9.9CVSS0.0052EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/08/04 12:0 a.m.5 views

Liquidfiles 安全漏洞

Liquidfiles is a storage service for large-scale secure file transfer and sharing for companies and organizations from US-based Liquidfiles, Inc. A security vulnerability exists in Liquidfiles versions prior to 4.1.2 that stems from directory traversal that can be achieved by configuring local...

3.8CVSS6.4AI score0.00528EPSS
SaveExploits1References2
Rows per page
Query Builder