Lucene search
+L

4521 matches found

RedhatCVE
RedhatCVE
•added 2026/01/01 4:26 p.m.•30 views

CVE-2025-62084

Cross-Site Request Forgery CSRF vulnerability in Imdad Next Web iNext Woo Pincode Checker inext-woo-pincode-checker allows Cross Site Request Forgery.This issue affects iNext Woo Pincode Checker: from n/a through = 2.3.1...

4.3CVSS5.9AI score0.00119EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•18 views

PT-2026-26115

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to RCU Read-Copy-Update protection in the /proc/net/ptype interface. Specifically, the functions ptype seq next and ptype seq show do not adhere ...

5.5CVSS5.5AI score0.00119EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•18 views

PT-2026-25770

Name of the Vulnerable Software and Affected Versions GoBGP versions 4.2.0 Description An issue allows a remote attacker to cause a denial of service via the NEXT HOP path attribute. The issue resides in the handling of the NEXT HOP path attribute within the GoBGP software. Recommendations At the...

7.5CVSS7.9AI score0.00568EPSS
SaveExploits1
NVD
NVD
•added 2025/12/31 4:15 p.m.•20 views

CVE-2025-62084

Cross-Site Request Forgery CSRF vulnerability in Imdad Next Web iNext Woo Pincode Checker inext-woo-pincode-checker allows Cross Site Request Forgery.This issue affects iNext Woo Pincode Checker: from n/a through = 2.3.1...

4.3CVSS0.00119EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/31 3:50 p.m.•21 views

EUVD-2025-206025

Cross-Site Request Forgery CSRF vulnerability in Imdad Next Web iNext Woo Pincode Checker allows Cross Site Request Forgery.This issue affects iNext Woo Pincode Checker: from n/a through 2.3.1...

4.3CVSS6.3AI score0.00119EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/31 12:00 a.m.•20 views

PT-2025-54375

Cross-Site Request Forgery CSRF vulnerability in Imdad Next Web iNext Woo Pincode Checker allows Cross Site Request Forgery.This issue affects iNext Woo Pincode Checker: from n/a through 2.3.1...

4.3CVSS6.8AI score0.00119EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/31 12:00 a.m.•6 views

CVE-2025-62084: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Imdad Next Web iNext Woo Pincode Checker inext-woo-pincode-checker allows Cross Site Request Forgery.This issue affects iNext Woo Pincode Checker: from n/a through = 2.3.1...

4.3CVSS5.8AI score0.00119EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/30 12:11 p.m.•56 views

CVE-2023-54242

CVE-2023-54242 affects the Linux kernel in the block bfq I/O elevator. The issue is a division by zero when the weighted sum (wsum) equals zero, causing an invalid calculation of the limit during bfq_limit_depth. The vulnerability could trigger a divide error as observed in a stress-ng stress tes...

5.9AI score0.00198EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/12/29 3:30 p.m.•18 views

EUVD-2025-205581

A type confusion in jsish 2.0 allows incorrect control flow during execution of the OPNEXT opcode. When an “instanceof” expression uses an array element access as the left-hand operand inside a for-in loop, the instructions implementation leaves an additional array reference on the stack rather...

7.1AI score0.00528EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/12/29 12:00 a.m.•27 views

PT-2025-53725

A type confusion in jsish 2.0 allows incorrect control flow during execution of the OP NEXT opcode. When an “instanceof” expression uses an array element access as the left-hand operand inside a for-in loop, the instructions implementation leaves an additional array reference on the stack rather...

7.6AI score0.00528EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/12/29 12:00 a.m.•50 views

CVE-2025-65570

A type confusion in jsish 2.0 allows incorrect control flow during execution of the OPNEXT opcode. When an “instanceof” expression uses an array element access as the left-hand operand inside a for-in loop, the instructions implementation leaves an additional array reference on the stack rather...

0.00528EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/12/29 12:00 a.m.•14 views

CVE-2025-65570

A type confusion in jsish 2.0 allows incorrect control flow during execution of the OPNEXT opcode. When an “instanceof” expression uses an array element access as the left-hand operand inside a for-in loop, the instructions implementation leaves an additional array reference on the stack rather...

6.1AI score0.00528EPSS
SaveExploits1References1
NVD
NVD
•added 2025/12/24 3:16 p.m.•20 views

CVE-2025-60935

An open redirect vulnerability in the login endpoint of Blitz Panel v1.17.0 allows attackers to redirect users to malicious domains via a crafted URL. This issue affects the nexturl parameter in the login endpoint and could lead to phishing or token theft after successful authentication...

6.5CVSS0.0019EPSS
SaveExploits0References2
osv-cve
osv-cve
•added 2025/12/24 10:32 a.m.•12 views

CVE-2025-68363 bpf: Check skb->transport_header is set in bpf_skb_check_mtu

In the Linux kernel, the following vulnerability has been resolved: bpf: Check skb-transportheader is set in bpfskbcheckmtu The bpfskbcheckmtu helper needs to use skb-transportheader when the BPFMTUCHKSEGS flag is used: bpfskbcheckmtuskb, ifindex, &mtulen, 0, BPFMTUCHKSEGS The transportheader is...

6.2AI score
SaveExploits0References11
Vulnrichment
Vulnrichment
•added 2025/12/24 12:00 a.m.•8 views

CVE-2025-60935

An open redirect vulnerability in the login endpoint of Blitz Panel v1.17.0 allows attackers to redirect users to malicious domains via a crafted URL. This issue affects the nexturl parameter in the login endpoint and could lead to phishing or token theft after successful authentication...

5.9AI score0.0019EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•18 views

PT-2025-53299

Name of the Vulnerable Software and Affected Versions Blitz Panel version 1.17.0 Description An open redirect issue exists in the login functionality of Blitz Panel. The issue is located in the /login endpoint and involves the next url parameter. Successful exploitation could allow an attacker to...

6.5CVSS5.9AI score0.0019EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2025/12/24 12:00 a.m.•51 views

CVE-2025-60935

An open redirect vulnerability in the login endpoint of Blitz Panel v1.17.0 allows attackers to redirect users to malicious domains via a crafted URL. This issue affects the nexturl parameter in the login endpoint and could lead to phishing or token theft after successful authentication...

0.0019EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/12/24 12:00 a.m.•16 views

Vulnerability of software for managing IBM Engineering Requirements Management DOORS: Next, the existing structure of the web page, due to lack of protective measures, allows attackers to disclose protected information.

The vulnerability of the IBM Engineering Requirements Management DOORS Next software exists because measures to protect the website structure have not been implemented. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...

5.5CVSS5.7AI score0.00177EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2025/12/19 9:06 p.m.•27 views

Security Bulletin: Components with known vulnerabilities in IBM Security QRadar Analyst Workflow for IBM QRadar SIEM

Summary Multiple components with known vulnerabilities were addressed in a IBM Security QRadar Analyst Workflow for IBM QRadar SIEM release Vulnerability Details CVEID:CVE-2025-64756 DESCRIPTION: Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior to versions...

9.4CVSS5.3AI score0.99225EPSS
SaveExploits72Affected Software1
GithubExploit
GithubExploit
•added 2025/12/19 11:40 a.m.•212 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell: CVE-2025-55182 – Comprehensive Vulnerability Scan...

10CVSS8.1AI score0.99802EPSS
SaveExploits400
Rows per page
Query Builder