Lucene search
+L

20289 matches found

Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.8 views

PT-2026-1828

Name of the Vulnerable Software and Affected Versions edu Business Solutions Print Shop Pro WebDesk version 18.34 Description The application does not implement proper Cross-Site Request Forgery CSRF tokens or other protective measures. This allows a remote attacker to trick authenticated users...

6.8CVSS6.4AI score0.00148EPSS
SaveExploits2References4
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.8 views

edu Business Solutions Print Shop Pro WebDesk 安全漏洞

edu Business Solutions Print Shop Pro WebDesk is a print order management system from US-based edu Business Solutions. A security vulnerability exists in edu Business Solutions Print Shop Pro WebDesk version 18.34, which originates from a misbehavior of the parameter LoginID in the file...

6.1CVSS6AI score0.00209EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.22 views

PT-2026-1829

Name of the Vulnerable Software and Affected Versions edu Business Solutions Print Shop Pro WebDesk versions 18.34 Description A SQL injection issue exists due to the improper handling of user-supplied data. Specifically, the hfInventoryDistFormID parameter within the...

9.8CVSS7.9AI score0.00473EPSS
SaveExploits2References4
Vulnrichment
Vulnrichment
added 2026/01/08 12:0 a.m.3 views

CVE-2025-61549

Cross-Site Scripting XSS is present on the LoginID parameter on the /PSP/app/web/reg/regdisplay.asp endpoint in edu Business Solutions Print Shop Pro WebDesk version 18.34. Unsanitized user input is reflected in HTTP responses without proper HTML encoding or escaping. This allows attackers to...

5.8AI score0.00209EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.7 views

edu Business Solutions Print Shop Pro WebDesk 安全漏洞

edu Business Solutions Print Shop Pro WebDesk is a print order management system from US-based edu Business Solutions. A security vulnerability exists in edu Business Solutions Print Shop Pro WebDesk version 18.34, which stems from a missing CSRF token and could lead to a cross-site request forge...

6.8CVSS6.5AI score0.00148EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.20 views

PT-2026-2073

Name of the Vulnerable Software and Affected Versions UBB-XG versions 1.2.2 and earlier UDB-Pro/UDB-Pro-Sector versions 1.4.1 and earlier UBB versions 3.1.5 and earlier Description A malicious actor within Wi-Fi range of the affected product could exploit a flaw in the airMAX Wireless Protocol to...

8.8CVSS7.7AI score0.00383EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.5 views

edu Business Solutions Print Shop Pro WebDesk 安全漏洞

edu Business Solutions Print Shop Pro WebDesk is a print order management system from edu Business Solutions, USA. A security vulnerability exists in edu Business Solutions Print Shop Pro WebDesk version 18.34, which stems from an incorrect operation of parameter ctl00Content01 in file...

5.4CVSS5.9AI score0.00187EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.9 views

Nitro PDF Pro 安全漏洞

Nitro PDF Pro is a PDF editing and management tool from Nitro USA. A security vulnerability exists in Nitro PDF Pro versions prior to 14.42.0.34, which stems from an inconsistency in the display of signature information that could lead to forged signature information...

5.5CVSS6.3AI score0.00085EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/01/08 12:0 a.m.3 views

CVE-2025-56424

An issue in Insiders Technologies GmbH e-invoice pro before release 1 Service Pack 2 allows a remote attacker to cause a denial of service via a crafted script...

6.3AI score0.005EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.7 views

WordPress plugin Real Estate Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

7.1CVSS6.2AI score0.00228EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/08 12:0 a.m.4 views

CVE-2025-67825

An issue was discovered in Nitro PDF Pro for Windows before 14.42.0.34. In certain cases, it displays signer information from a non-verified PDF field rather than from the verified certificate subject. This could allow a document to present inconsistent signer details. The display logic was updat...

6.2AI score0.00085EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.11 views

PT-2026-1704

Name of the Vulnerable Software and Affected Versions e-plugins Real Estate Pro versions through 2.1.4 Description The software contains a flaw related to improper input handling during web page generation, specifically a Reflected Cross-site Scripting issue. This allows for the execution of...

6.1CVSS6.5AI score0.00228EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/01/08 12:0 a.m.29 views

CVE-2025-67825

An issue was discovered in Nitro PDF Pro for Windows before 14.42.0.34. In certain cases, it displays signer information from a non-verified PDF field rather than from the verified certificate subject. This could allow a document to present inconsistent signer details. The display logic was updat...

0.00085EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.8 views

edu Business Solutions Print Shop Pro WebDesk 安全漏洞

edu Business Solutions Print Shop Pro WebDesk is a print order management system from US-based edu Business Solutions. A security vulnerability exists in edu Business Solutions Print Shop Pro WebDesk version 18.34, which stems from insufficient validation of client-side inputs and could lead to a...

9.1CVSS6.6AI score0.00488EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.19 views

PT-2026-1818

Name of the Vulnerable Software and Affected Versions Insiders Technologies GmbH e-invoice pro versions prior to release 1 Service Pack 2 Description A flaw exists in Insiders Technologies GmbH e-invoice pro that could allow a remote attacker to cause a denial of service by using a specially...

7.5CVSS6.5AI score0.005EPSS
SaveExploits1References4
CVE
CVE
added 2026/01/08 12:0 a.m.22 views

CVE-2025-61546

CVE-2025-61546 affects edu Business Solutions Print Shop Pro WebDesk 18.34. The issue is in the GetUnitPrice API at /PSP/appNET/Store/CartV12.aspx, caused by reliance on client-side input validation, allowing a remote attacker to create financial discrepancies by purchasing items with a negative ...

9.1CVSS5.6AI score0.00488EPSS
SaveExploits2References1Affected Software1
CVE
CVE
added 2026/01/08 12:0 a.m.13 views

CVE-2025-61550

CVE-2025-61550 affects edu Business Solutions Print Shop Pro WebDesk 18.34. The stored XSS occurs in ctl00_Content01_fieldValue parameters via /psp/appNet/TemplateOrder/TemplatePreview.aspx, where user input is stored and later rendered in HTML without proper output encoding or sanitization. This...

5.4CVSS5.7AI score0.00187EPSS
SaveExploits2References1Affected Software1
CVE
CVE
added 2026/01/08 12:0 a.m.22 views

CVE-2025-61549

CVE-2025-61549 affects edu Business Solutions Print Shop Pro WebDesk 18.34. The LoginID parameter on /PSP/app/web/reg/reg_display.asp is vulnerable to reflected XSS due to unsanitized input reflected in HTTP responses without proper HTML encoding. Impact: arbitrary JavaScript execution in a victi...

6.1CVSS5.9AI score0.00209EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2026/01/08 12:0 a.m.27 views

CVE-2025-56424

An issue in Insiders Technologies GmbH e-invoice pro before release 1 Service Pack 2 allows a remote attacker to cause a denial of service via a crafted script...

0.005EPSS
SaveExploits1References2
CVE
CVE
added 2026/01/08 12:0 a.m.15 views

CVE-2025-61548

CVE-2025-61548 affects edu Business Solutions Print Shop Pro WebDesk 18.34. The hfInventoryDistFormID parameter in /PSP/appNET/Store/CartV12.aspx/GetUnitPrice is susceptible to SQL injection due to unsanitized input concatenated into queries. Impact is remote arbitrary SQL execution with high con...

9.8CVSS6.5AI score0.00473EPSS
SaveExploits2References1Affected Software1
Rows per page
Query Builder