Lucene search
+L

19 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2022-7060

Malicious code in bioql PyPI...

9.8CVSS9.3AI score0.01936EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2025-28436

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00492EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2020-25614

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at...

9.8CVSS8AI score0.01936EPSS
SaveExploits1References2
NVD
NVD
•added 2025/05/27 3:15 p.m.•55 views

CVE-2025-5247

A vulnerability, which was classified as critical, has been found in Gowabby HFish 0.1. This issue affects the function LoadUrl of the file \view\url.go. The manipulation of the argument r leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed to th...

7.5CVSS0.00492EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/05/27 3:00 p.m.•18 views

CVE-2025-5247 Gowabby HFish url.go LoadUrl improper authentication

A vulnerability, which was classified as critical, has been found in Gowabby HFish 0.1. This issue affects the function LoadUrl of the file \view\url.go. The manipulation of the argument r leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed to th...

7.5CVSS7.3AI score0.00492EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/05/27 3:00 p.m.•52 views

CVE-2025-5247 Gowabby HFish url.go LoadUrl improper authentication

A vulnerability, which was classified as critical, has been found in Gowabby HFish 0.1. This issue affects the function LoadUrl of the file \view\url.go. The manipulation of the argument r leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed to th...

7.5CVSS0.00492EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/27 12:00 a.m.•2 views

CVE-2025-5247: Improper Authentication

A vulnerability, which was classified as critical, has been found in Gowabby HFish 0.1. This issue affects the function LoadUrl of the file \view\url.go. The manipulation of the argument r leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed to th...

7.5CVSS6.9AI score0.00492EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/27 12:00 a.m.•17 views

PT-2025-23007 · Unknown · Gowabby Hfish

Name of the Vulnerable Software and Affected Versions: Gowabby HFish version 0.1 Description: A critical issue has been found in Gowabby HFish, affecting the LoadUrl function of the file viewurl.go. The manipulation of the argument r leads to improper authentication. This issue can be exploited...

7.5CVSS7.2AI score0.00492EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2025/05/27 12:00 a.m.•10 views

HFish 授权问题漏洞

HFish is a community-based free honeypot by Zachary Individual Developer. An authorization issue vulnerability exists in HFish version 0.1, which stems from improper authentication of parameter r by function LoadUrl in file viewurl.go...

7.5CVSS7.6AI score0.00492EPSS
SaveExploits0References6
OSV
OSV
•added 2023/02/23 7:03 p.m.•14 views

MAL-2023-4696 Malicious code in loadurl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 07a7de66a6f12492bfd80b1ccc245055129a97ccd5096f9a9f0c8e38d1e9bde2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

7.2AI score
SaveExploits0References1
OSV
OSV
•added 2022/10/07 7:20 a.m.•76 views

GHSA-93M7-C69F-5CFJ xmlquery lacks check for whether LoadURL response is in XML format, causing denial of service

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

7.5CVSS9.7AI score0.01936EPSS
SaveExploits1References6
OSV
OSV
•added 2020/09/16 3:15 p.m.•13 views

DEBIAN-CVE-2020-25614

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

9.8CVSS8.7AI score0.01936EPSS
SaveExploits1References1
Prion
Prion
•added 2020/09/16 3:15 p.m.•22 views

Format string

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

7.5CVSS9.7AI score0.01936EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2020/09/16 3:15 p.m.•14 views

UBUNTU-CVE-2020-25614

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

9.8CVSS5.8AI score0.01936EPSS
SaveExploits1References5
Debian CVE
Debian CVE
•added 2020/09/16 2:41 p.m.•99 views

CVE-2020-25614

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

9.8CVSS9.8AI score0.01936EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2020/09/16 12:00 a.m.•10 views

PT-2020-16128 · Xmlquery · Xmlquery

Name of the Vulnerable Software and Affected Versions: xmlquery versions prior to 1.3.1 Description: The issue allows attackers to cause a denial of service SIGSEGV or possibly have other unspecified impacts due to the lack of a check for whether a LoadURL response is in the XML format. This can...

9.8CVSS9.5AI score0.01936EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/16 12:00 a.m.•3 views

CVE-2020-25614: Improper Input Validation

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

9.8CVSS5.8AI score0.01936EPSS
SaveExploits1References3
GitLab Advisory Database
GitLab Advisory Database
•added 2020/09/16 12:00 a.m.•63 views

Improper Input Validation

xmlquery lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

9.8CVSS6.4AI score0.01936EPSS
SaveExploits1References1Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2014/04/08 12:00 a.m.•35 views

SolarWinds Server and Application Monitor C1Chart3D8 Array Indexing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Server and Application Monitor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exis...

7.1AI score
SaveExploits0References1
Rows per page
Query Builder