Lucene search
+L

2418 matches found

OSV
OSV
added 2025/12/22 4:16 a.m.6 views

CVE-2025-15011

A vulnerability was found in code-projects Simple Stock System 1.0. Impacted is an unknown function of the file /logout.php. The manipulation of the argument uname results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

9.8CVSS6.9AI score0.00335EPSS
SaveExploits1References5
NVD
NVD
added 2025/12/22 4:16 a.m.18 views

CVE-2025-15011

A vulnerability was found in code-projects Simple Stock System 1.0. Impacted is an unknown function of the file /logout.php. The manipulation of the argument uname results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

9.8CVSS0.00335EPSS
SaveExploits1References5
CVE
CVE
added 2025/12/22 3:32 a.m.17 views

CVE-2025-15011

CVE-2025-15011 affects Simple Stock System 1.0. The vulnerability resides in /logout.php where manipulating the uname parameter triggers a SQL injection. Multiple connected sources confirm remote exposure and that the exploit is public, enabling potential unauthorized access and data impact (CVE ...

9.8CVSS7.2AI score0.00335EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
added 2025/12/22 3:32 a.m.13 views

EUVD-2025-204687

A vulnerability was found in code-projects Simple Stock System 1.0. Impacted is an unknown function of the file /logout.php. The manipulation of the argument uname results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

7.5CVSS7.2AI score0.00335EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/12/22 12:0 a.m.7 views

Code-Projects Simple Stock System SQL注入漏洞

Code-Projects Simple Stock System is a Code-Projects open source simple stock system. Code-Projects Simple Stock System version 1.0 suffers from a SQL injection vulnerability that stems from a misuse of the parameter uname in file /logout.php, which could lead to a SQL injection attack...

9.8CVSS7.8AI score0.00335EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/12/22 12:0 a.m.13 views

PT-2025-52623

Name of the Vulnerable Software and Affected Versions Simple Stock System version 1.0 Description A SQL injection issue exists in Simple Stock System 1.0. The issue is due to the manipulation of the uname argument in the /logout.php file. This allows for remote execution of attacks. The exploit h...

9.8CVSS7.3AI score0.00335EPSS
SaveExploits1References11
RedhatCVE
RedhatCVE
added 2025/12/19 7:9 p.m.6 views

CVE-2025-59949

FreshRSS is a free, self-hostable RSS aggregator. Versions prior to 1.27.1 have a logout cross-site request forgery vulnerability that can lead to denial of service via . Version 1.27.1 patches the issue...

6.5CVSS6.8AI score0.00379EPSS
SaveExploits1References1
CVE
CVE
added 2025/12/18 6:31 p.m.12 views

CVE-2025-59949

CVE-2025-59949 affects FreshRSS prior to version 1.27.1. The root cause is a logout-related cross-site request forgery (CSRF) flaw that can lead to a denial of service (DoS) via the logout process (described as vulnerability via ). The affected component is the logout flow in FreshRSS’s web inter...

6.5CVSS6.3AI score0.00379EPSS
SaveExploits1References4Affected Software1
EUVD
EUVD
added 2025/12/18 6:31 p.m.8 views

EUVD-2025-204403

FreshRSS is a free, self-hostable RSS aggregator. Versions prior to 1.27.1 have a logout cross-site request forgery vulnerability that can lead to denial of service via . Version 1.27.1 patches the issue...

5.3CVSS6.2AI score0.00379EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/12/18 6:31 p.m.29 views

CVE-2025-59949 FreshRSS has Logout CSRF that Leads to DoS via <track src>

FreshRSS is a free, self-hostable RSS aggregator. Versions prior to 1.27.1 have a logout cross-site request forgery vulnerability that can lead to denial of service via . Version 1.27.1 patches the issue...

5.3CVSS0.00379EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.6 views

FreshRSS 安全漏洞

FreshRSS is a free, self-hosted RSS aggregator from FreshRSS Open Source. A security vulnerability exists in FreshRSS versions prior to 1.27.1, which stems from a cross-site request forgery vulnerability in the logout feature that could lead to a denial of service attack...

6.5CVSS6.5AI score0.00379EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.6 views

PT-2025-52281

FreshRSS is a free, self-hostable RSS aggregator. Versions prior to 1.27.1 have a logout cross-site request forgery vulnerability that can lead to denial of service via . Version 1.27.1 patches the issue...

5.3CVSS6.7AI score0.00379EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/12/16 12:26 a.m.9 views

CVE-2025-66963

An issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in the index.html...

5.5CVSS6.3AI score0.00106EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/15 6:30 p.m.8 views

EUVD-2025-203402

An issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in the index.html...

5.8AI score0.00106EPSS
SaveExploits0References3
OSV
OSV
added 2025/12/15 4:15 p.m.6 views

CVE-2025-66963

An issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in the index.html...

5.5CVSS5.8AI score0.00106EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/15 4:15 p.m.9 views

CVE-2025-66963

An issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in the index.html...

5.5CVSS0.00106EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/15 12:0 a.m.3 views

CVE-2025-66963

An issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in the index.html...

5.9AI score0.00106EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/15 12:0 a.m.4 views

Hitron HI3120 安全漏洞

Hitron HI3120 is a cable modem from Hitron Corporation of Taiwan, China. A security vulnerability exists in Hitron HI3120 version 7.2.4.5.2b1, which stems from improper handling of the Logout option and could lead to the disclosure of sensitive information...

5.5CVSS6.4AI score0.00106EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/15 12:0 a.m.17 views

CVE-2025-66963

CVE-2025-66963 : A vulnerability in Hitron HI3120 firmware v7.2.4.5.2b1 allows a local attacker to disclose sensitive information via the Logout option in the router’s index.html page. The connected sources consistently reference this model/version and the logout-handling flow as the issue origin...

5.5CVSS5.9AI score0.00106EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/12/15 12:0 a.m.33 views

CVE-2025-66963

An issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in the index.html...

0.00106EPSS
SaveExploits0References1
Rows per page
Query Builder