Lucene search
+L

459 matches found

EUVD
EUVD
•added 2026/01/26 7:02 a.m.•18 views

EUVD-2026-4705

A vulnerability was identified in PHPGurukul News Portal 1.0. This affects an unknown part of the component Profile Pic Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit is publicly available and might be used...

7.2CVSS5.5AI score0.00474EPSS
SaveExploits1References5
CVE
CVE
•added 2026/01/26 6:32 a.m.•50 views

CVE-2026-1423

The CVE-2026-1423 entry concerns code-projects Online Examination System 1.0. Affected is the file /admin_pic.php, where a manipulation can lead to unrestricted file uploads via remote access. Multiple sources confirm an in-the-wild risk with publicly disclosed exploit details. The Red Hat, CIRCL...

9.8CVSS6.2AI score0.00422EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2026/01/26 12:00 a.m.•33 views

PT-2026-4728

Name of the Vulnerable Software and Affected Versions code-projects Online Examination System version 1.0 Description A flaw exists in code-projects Online Examination System 1.0 related to functionality within the /admin pic.php file. This allows for unrestricted file uploads, potentially...

9.8CVSS6.6AI score0.00422EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/26 12:00 a.m.•1 views

CVE-2026-1424: Unrestricted Upload of File with Dangerous Type

A vulnerability was identified in PHPGurukul News Portal 1.0. This affects an unknown part of the component Profile Pic Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit is publicly available and might be used...

7.2CVSS5.2AI score0.00474EPSS
SaveExploits1References1
OSV
OSV
•added 2026/01/15 9:16 p.m.•14 views

CVE-2026-21910

An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine PFE of Juniper Networks Junos OS on EX4k Series and QFX5k Series platforms allows an unauthenticated network-adjacent attacker flapping an interface to cause traffic between VXLAN Network...

6.5CVSS5.8AI score0.0027EPSS
SaveExploits0References2
NVD
NVD
•added 2026/01/07 5:16 p.m.•17 views

CVE-2026-20029

A vulnerability in the licensing features of Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker with administrative privileges to gain access to sensitive information. This vulnerability is due to improper parsing of X...

4.9CVSS0.06075EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:29 a.m.•14 views

CVE-2019-12893

Alternate Pic View 2.600 has a User Mode Write AV starting at PicViewer!PerfgrapFinalize+0x00000000000a8868...

7.5CVSS7AI score0.01543EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:28 a.m.•16 views

CVE-2019-12895

In Alternate Pic View 2.600, the Exception Handler Chain is Corrupted starting at PicViewer!PerfgrapFinalize+0x00000000000b916d...

7.5CVSS7AI score0.01501EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•10 views

PT-2026-5530

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the Linux kernel related to KVM functionality on LoongArch architecture. Specifically, the kvm device structure is not properly freed within the kvm pch pic destr...

5.5CVSS5.5AI score0.00219EPSS
SaveExploits0References20
RedhatCVE
RedhatCVE
•added 2025/12/15 3:17 a.m.•23 views

CVE-2025-14641

A flaw has been found in code-projects Computer Laboratory System 1.0. This issue affects some unknown processing of the file admin/adminpic.php. This manipulation of the argument image causes unrestricted upload. The attack may be initiated remotely. The exploit has been published and may be use...

7.2CVSS6.6AI score0.00392EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/12/14 3:30 a.m.•21 views

EUVD-2025-203277

A vulnerability has been found in code-projects Computer Laboratory System 1.0. Impacted is an unknown function of the file technicalstaffpic.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the publi...

5.8CVSS6.4AI score0.00392EPSS
SaveExploits1References7
NVD
NVD
•added 2025/12/14 3:15 a.m.•21 views

CVE-2025-14642

A vulnerability has been found in code-projects Computer Laboratory System 1.0. Impacted is an unknown function of the file technicalstaffpic.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the publi...

7.2CVSS0.00392EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/14 3:15 a.m.•20 views

CVE-2025-14641

A flaw has been found in code-projects Computer Laboratory System 1.0. This issue affects some unknown processing of the file admin/adminpic.php. This manipulation of the argument image causes unrestricted upload. The attack may be initiated remotely. The exploit has been published and may be use...

7.2CVSS0.00392EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/14 2:32 a.m.•43 views

CVE-2025-14642

Affects: code-projects Computer Laboratory System 1.0. The vulnerability is in the file technical_staff_pic.php, where manipulation of the image parameter can lead to unrestricted file upload. This is described across CNVD/CNVD-derived entries and other references as a remote vulnerability with a...

7.2CVSS6.6AI score0.00392EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2025/12/14 12:00 a.m.•29 views

PT-2025-51141

A vulnerability has been found in code-projects Computer Laboratory System 1.0. Impacted is an unknown function of the file technical staff pic.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the...

5.8CVSS6.8AI score0.00392EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/12/14 12:00 a.m.•18 views

PT-2025-51140

A flaw has been found in code-projects Computer Laboratory System 1.0. This issue affects some unknown processing of the file admin/admin pic.php. This manipulation of the argument image causes unrestricted upload. The attack may be initiated remotely. The exploit has been published and may be us...

5.8CVSS6.8AI score0.00392EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2025/11/06 4:41 p.m.•22 views

CVE-2025-20304

Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

5.4CVSS6.7AI score0.00198EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/11/06 12:00 a.m.•4 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990497)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990497 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/i8259: Mark legacy PIC interrupts with IRQLEVEL Baoquan reported that after triggering a cras...

5.5CVSS6.2AI score0.00264EPSS
SaveExploits0References4
NVD
NVD
•added 2025/11/05 5:15 p.m.•39 views

CVE-2025-20304

Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

5.4CVSS0.00198EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/05 4:32 p.m.•31 views

CVE-2025-20289

Cisco ISE and Cisco ISE-PIC's web-based management interface authenticate to users and are affected by multiple vulnerabilities allowing reflected XSS due to insufficient input validation. An authenticated, low-privilege attacker can exploit specific pages to run arbitrary script code in the user...

5.4CVSS6.5AI score0.002EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder