Lucene search
+L

175 matches found

Github Security Blog
Github Security Blog
•added 2025/09/16 5:28 a.m.•4 views

Malware in zarabotok-na-obmenakh-bitkoinakh-d7rqlq46s

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/09/16 5:28 a.m.•8 views

Malicious code in zarabotok-na-kriptovaliute-dlia-nachinaiushchikh-forum-5vff29khr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aedf613f47b3557e94c05e4616c8964f6d4cd5fa415f68cf8695fe4bb8f999bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/09/16 5:28 a.m.•7 views

Malware in zarabotok-na-kriptovaliute-dlia-nachinaiushchikh-forum-5vff29khr

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_suse
osv_suse
•added 2025/09/08 4:09 p.m.•4 views

SUSE-SU-2025:03096-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2023-45229: Fixed integer underflow when processing IANA/IATA options in a DHCPv6 Advertise message bsc1218879 - CVE-2023-45230: Fixed buffer overflow in the DHCPv6 client via a long Server ID option bsc1218880...

8.8CVSS7.4AI score0.01213EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•16 views

PT-2025-34336 · Undefined · Undefined

CVE-2025-57745 - Cisco Router Unvalidated Input CVE ID : CVE-2025-57745 Published : Aug. 20, 2025, 4:16 a.m. | 3 hours, 58 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

7.3AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 7:12 a.m.•18 views

CVE-2018-17555

The web component on ARRIS TG2492LG-NA 061213 devices allows remote attackers to obtain sensitive information via the /snmpGet oids parameter...

7.5CVSS6.7AI score0.01978EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
•added 2025/03/25 8:15 a.m.•24 views

CVE-2025-2751

A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation of the argument na...

8.8CVSS7.3AI score0.00822EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/03/25 12:00 a.m.•20 views

Open Asset Import Library (assimp) buffer error vulnerability

Open Asset Import Library assimp is a library in the Open Asset Import Library open source. A buffer error vulnerability exists in Open Asset Import Library assimp version 5.4.3, which stems from the fact that incorrect manipulation of the parameter na can lead to out-of-bounds reads...

8.8CVSS4.9AI score0.00822EPSS
SaveExploits1References7
Openbugbounty
Openbugbounty
•added 2024/04/15 8:20 a.m.•15 views

russkiy-na-5.ru Cross Site Scripting vulnerability OBB-3918154

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/04/10 12:00 a.m.•9 views

PT-2024-26469

Name of the Vulnerable Software and Affected Versions Campcodes Church Management System version 1.0 Description A critical issue has been found in the system, affecting an unknown function of the file /admin/addTithes.php. The manipulation of the na argument leads to sql injection. It is possibl...

8.8CVSS5.5AI score0.00882EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/10 12:00 a.m.•6 views

CVE-2024-3538: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Church Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/addTithes.php. The manipulation of the argument na leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

8.8CVSS5.5AI score0.00882EPSS
SaveExploits1References2
Malwarebytes
Malwarebytes
•added 2024/03/20 9:49 p.m.•50 views

[updated] Apex Legends Global Series plagued by hackers

The North American finals of online shooter game Apex Legends has been postponed after games were disrupted by hacking incidents. Apex Legends, published by EA, is currently in an important stage of its Global Series, the regional finals mode. This is a big deal for the top players since there is...

7.6AI score
SaveExploits0
osv_azl
osv_azl
•added 2024/01/16 4:15 p.m.•27 views

AZL-38455 CVE-2023-45229 affecting package edk2 for versions less than 20240223gitedc6681206c1-1

EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IANA or IATA option in a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality...

6.5CVSS6.7AI score0.00937EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/01/16 12:00 a.m.•11 views

EDK2 Security Vulnerability

EDK2 is a cross-platform firmware development environment from the Tianocore community based on the UEFI and PI specifications. A security vulnerability exists in EDK2 that stems from the Network Package's susceptibility to an out-of-bounds read vulnerability when processing the IANA or IATA opti...

6.5CVSS7.1AI score0.00937EPSS
SaveExploits1References6
Openbugbounty
Openbugbounty
•added 2023/12/11 8:28 a.m.•10 views

russkiy-na-5.ru Cross Site Scripting vulnerability OBB-3809860

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2023/12/07 7:37 p.m.•5 views

na-no.com Improper Access Control vulnerability OBB-3805852

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2023/11/30 12:59 p.m.•10 views

a-na-me.ocnk.net Cross Site Scripting vulnerability OBB-3798731

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2023/10/08 2:29 p.m.•20 views

na-plite.ru Cross Site Scripting vulnerability OBB-3732545

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
zdt
zdt
•added 2023/04/06 12:00 a.m.•246 views

Best pos Management System v1.0 - SQL Injection Vulnerability

Exploit Title: Best pos Management System v1.0 - SQL Injection Exploit Author: Ahmed Ismail @MrOz1l Vendor Homepage: https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html Software Link: https://www.sourcecodester.com/sites/default/files/download/mayurik/kruxton.zip Version:...

6.8AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2023/04/03 7:57 a.m.•9 views

pravo-na-dom.net Cross Site Scripting vulnerability OBB-3245094

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

5.9AI score
SaveExploits0
Rows per page
Query Builder