Lucene search
+L

74995 matches found

CNNVD
CNNVD
added 2026/02/11 12:00 a.m.14 views

Nsasoft SpotOutlook 安全漏洞

Nsasoft SpotOutlook is a tool developed by the US company Nsasoft, designed for retrieving and restoring the passwords of Microsoft Outlook email accounts. Version 1.2.6 of Nsasoft SpotOutlook contains a security vulnerability; this vulnerability stems from a buffer overflow in the Name input...

7.5CVSS6.1AI score0.0041EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/02/11 12:00 a.m.16 views

Top Password Dialup Password Recovery 安全漏洞

Top Password Dialup Password Recovery is a password recovery tool developed by Top Password Inc. Version 1.30 of Top Password Dialup Password Recovery has a security vulnerability; this vulnerability stems from a buffer overflow in the input fields, which could lead to a denial-of-service attack...

7.5CVSS6.1AI score0.00293EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/02/11 12:00 a.m.8 views

PT-2026-7691

ZIP Password Recovery 2.30 contains a denial of service vulnerability that allows attackers to crash the application by providing maliciously crafted input. Attackers can create a specially prepared text file with specific characters to trigger an application crash when selecting a ZIP file...

7.5CVSS5.5AI score0.00398EPSS
SaveExploits0References4
Packet Storm
Packet Storm
added 2026/02/11 12:00 a.m.200 views

📄 libuser Denial of Service / Privilege Escalation

This is an old proof of concept from 2015 that demonstrates userhelper chfn newline filtering and libuser passwd file handling vulnerabilities. / roothelper.c - an unusual local root exploit against: CVE-2015-3245 userhelper chfn newline filtering CVE-2015-3246 libuser passwd file handling...

7.2CVSS7AI score0.08799EPSS
SaveExploits11
BDU FSTEC
BDU FSTEC
added 2026/02/11 12:00 a.m.29 views

The vulnerability of the KLogic SCADA system’s virtual controller “KASCAD” allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the KLogic SCADA system “KASKAD”’s virtual controller is related to the use of a password hash instead of the actual password for authentication. Exploiting this vulnerability allows an intruder to compromise the confidentiality, integrity, and accessibility of the protected...

10CVSS5.8AI score
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/11 12:00 a.m.26 views

PT-2026-7689

Top Password Software Dialup Password Recovery 1.30 contains a denial of service vulnerability that allows attackers to crash the application by overflowing input fields. Attackers can trigger the vulnerability by inserting a large 5000-character payload into the User Name and Registration Code...

7.5CVSS5.6AI score0.00293EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/02/11 12:00 a.m.12 views

PT-2026-7512

Name of the Vulnerable Software and Affected Versions Videospirecore Theme Plugin versions prior to 1.0.7 Description The 'Videospirecore Theme Plugin' for WordPress is susceptible to privilege escalation, potentially leading to account takeover. The issue arises from insufficient validation of a...

8.8CVSS5.5AI score0.00328EPSS
SaveExploits0References10
ATTACKERKB
ATTACKERKB
added 2026/02/11 12:00 a.m.8 views

CVE-2025-65128

A missing authentication mechanism in the web management API components of Shenzhen Zhibotong Electronics ZBT WE2001 23.09.27 allows unauthenticated attackers on the local network to modify router and network configurations. By invoking operations whose names end with "nocommit" and supplying the...

5.6AI score0.00275EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/02/11 12:00 a.m.14 views

AVideo 授权问题漏洞

AVideo is an open-source broadcast network creation tool developed by the World Wide Broadcast Network. Version 8.1 of AVideo contains an authorization vulnerability, which stems from cross-site request forgery attacks. This vulnerability could allow attackers to exploit the password recovery...

9.8CVSS5.7AI score0.00702EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2026/02/11 12:00 a.m.20 views

KeePass Password Safe 代码注入漏洞

KeePass Password Safe is a local password management tool developed by the KeePass company. Versions of KeePass Password Safe prior to 2.44 contained a code injection vulnerability. This vulnerability stemmed from improper handling of HTML in the help system, which could lead to denial-of-service...

7.5CVSS5.9AI score0.00293EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/02/11 12:00 a.m.15 views

ZLAN5143D 访问控制错误漏洞

ZLAN5143D is a serial port server from the Chinese company ZLAN. ZLAN5143D has an access control vulnerability, which stems from unprotected API endpoints. This vulnerability could allow attackers to remotely change device passwords without requiring authentication...

9.8CVSS7.5AI score0.00696EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/02/11 12:00 a.m.13 views

Top Password ZIP Password Recovery 安全漏洞

Top Password ZIP Password Recovery is a ZIP file password recovery tool developed by Top Password. Version 2.30 of Top Password ZIP Password Recovery contains a security vulnerability, which stems from improper input processing and could lead to denial-of-service attacks...

7.5CVSS5.8AI score0.00398EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/02/11 12:00 a.m.16 views

Top Password Firefox Password Recovery 安全漏洞

Top Password Firefox Password Recovery is a password recovery tool developed by Top Password Inc. Version 2.8 of Top Password Firefox Password Recovery has a security vulnerability; this vulnerability stems from a buffer overflow in the input fields, which could lead to a denial-of-service attack...

7.5CVSS6.1AI score0.00293EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/02/11 12:00 a.m.18 views

Top Password MSN Password Recovery 代码问题漏洞

Top Password MSN Password Recovery is a MSN password recovery tool developed by Top Password Inc. Version 1.30 of Top Password MSN Password Recovery has a code vulnerability that stems from XML external entity injection, which may lead to the reading of local system files...

6.7CVSS5.9AI score0.00215EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/02/11 12:00 a.m.13 views

PT-2026-7678

GTalk Password Finder 2.2.1 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-character payload and paste it into the 'Key' field to trigger an application crash...

7.5CVSS5.5AI score0.00293EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/02/11 12:00 a.m.39 views

PT-2026-7676

KeePass Password Safe versions before 2.44 contain a denial of service vulnerability in the help system's HTML handling. Attackers can trigger the vulnerability by dragging and dropping malicious HTML files into the help area, potentially causing application instability or crash...

7.5CVSS5.5AI score0.00293EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/02/11 12:00 a.m.18 views

PT-2026-7508

An attacker with access to the web application ZeusWeb of the provider Microcom in this case, registration is not necessary, but the action must be performed who has the vulnerable software could introduce arbitrary JavaScript by injecting an XSS payload into the ‘Email’ parameters within the...

5.1CVSS5.7AI score0.00236EPSS
SaveExploits0References5
NVD
NVD
added 2026/02/10 10:15 a.m.14 views

CVE-2024-52334

A vulnerability has been identified in syngo.plaza VB30E All versions VB30EHF07. The affected application does not encrypt the passwords properly. This could allow an attacker to recover the original passwords and might gain unauthorized access...

6.3CVSS0.00278EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/10 9:58 a.m.30 views

CVE-2024-52334

CVE-2024-52334 concerns syngo.plaza VB30E (all versions

6.3CVSS5.4AI score0.00278EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/10 9:58 a.m.5 views

CVE-2024-52334

A vulnerability has been identified in syngo.plaza VB30E All versions VB30EHF07. The affected application does not encrypt the passwords properly. This could allow an attacker to recover the original passwords and might gain unauthorized access...

6.3CVSS5.4AI score0.00278EPSS
SaveExploits0References1
Rows per page
Query Builder