Lucene search
+L

1981 matches found

OSV
OSV
added 2025/05/01 3:16 p.m.17 views

UBUNTU-CVE-2022-49782

In the Linux kernel, the following vulnerability has been resolved: perf: Improve missing SIGTRAP checking To catch missing SIGTRAP we employ a WARN in perfeventoverflow, which fires if pendingsigtrap was already set: returning to user space without consuming pendingsigtrap, and then having the...

5.5CVSS5.7AI score0.00186EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/04/26 5:7 a.m.22 views

CVE-2025-28009

A SQL Injection vulnerability exists in the u parameter of the progress-body-weight.php endpoint of Dietiqa App v1.0.20...

9.8CVSS8.2AI score0.00493EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/04/25 11:7 p.m.24 views

CVE-2025-39516

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alan Petersen Author WIP Progress Bar author-work-in-progress-bar allows DOM-Based XSS.This issue affects Author WIP Progress Bar: from n/a through = 1.0...

6.5CVSS7.2AI score0.00331EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/04/25 3:45 a.m.257 views

Exploit for Code Injection in Foxcms

CVE-2025-29306 - FoxCMS Remote Code Execution Exploit !Pytho...

9.8CVSS10AI score0.45675EPSS
SaveExploits11
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/04/23 3:40 p.m.6 views

Malicious code in @sporta-technology/d11-web-components.progress-line (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/04/23 3:40 p.m.7 views

Malicious code in @sporta-technology/d11-web-components.progress-circle (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
Kitploit
Kitploit
added 2025/04/21 12:30 p.m.54 views

Bytesrevealer - Online Reverse Enginerring Viewer

Bytes Revealer is a powerful reverse engineering and binary analysis tool designed for security researchers, forensic analysts, and developers. With features like hex view, visual representation, string extraction, entropy calculation, and file signature detection, it helps users uncover hidden...

7.1AI score
SaveExploits0References3
NVD
NVD
added 2025/04/17 6:15 p.m.34 views

CVE-2025-28009

A SQL Injection vulnerability exists in the u parameter of the progress-body-weight.php endpoint of Dietiqa App v1.0.20...

9.8CVSS0.00493EPSS
SaveExploits1References1
OSV
OSV
added 2025/04/17 6:15 p.m.13 views

CVE-2025-28009

A SQL Injection vulnerability exists in the u parameter of the progress-body-weight.php endpoint of Dietiqa App v1.0.20...

9.8CVSS5.8AI score0.00493EPSS
SaveExploits1References1
CVE
CVE
added 2025/04/17 12:0 a.m.76 views

CVE-2025-28009

CVE-2025-28009 affects Dietiqa App v1.0.20. A SQL injection exists in the progress-body-weight.php endpoint via the u parameter, enabling arbitrary SQL execution with remote access (attack vector: network; no privileges; user interaction not required). This yields high confidentiality, integrity,...

9.8CVSS8AI score0.00493EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/04/17 12:0 a.m.8 views

PT-2025-17222 · Unknown · Dietiqa App

Name of the Vulnerable Software and Affected Versions: Dietiqa App version 1.0.20 Description: A SQL Injection issue exists in the u parameter of the "progress-body-weight.php" endpoint. Recommendations: For Dietiqa App version 1.0.20, avoid using the u parameter in the "progress-body-weight.php"...

9.8CVSS7.6AI score0.00493EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2025/04/17 12:0 a.m.40 views

CVE-2025-28009

A SQL Injection vulnerability exists in the u parameter of the progress-body-weight.php endpoint of Dietiqa App v1.0.20...

0.00493EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.10 views

Belanjawan Dietiqa 安全漏洞

Belanjawan Dietiqa is a mobile weight loss application from Belanjawan. A security vulnerability exists in Belanjawan Dietiqa version 1.0.20, which stems from improper handling of parameter u in the progress-body-weight.php endpoint, which could lead to SQL injection...

9.8CVSS7.2AI score0.00493EPSS
SaveExploits1References1
NVD
NVD
added 2025/04/16 1:15 p.m.19 views

CVE-2025-39516

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alan Petersen Author WIP Progress Bar author-work-in-progress-bar allows DOM-Based XSS.This issue affects Author WIP Progress Bar: from n/a through = 1.0...

6.5CVSS0.00331EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/16 12:45 p.m.35 views

CVE-2025-39516 WordPress Author WIP Progress Bar plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alan Petersen Author WIP Progress Bar author-work-in-progress-bar allows DOM-Based XSS.This issue affects Author WIP Progress Bar: from n/a through = 1.0...

6.5CVSS0.00331EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/16 12:45 p.m.7 views

CVE-2025-39516 WordPress Author WIP Progress Bar <= 1.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alan Petersen Author WIP Progress Bar allows DOM-Based XSS. This issue affects Author WIP Progress Bar: from n/a through 1.0...

6.5CVSS7.1AI score0.00331EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/16 12:45 p.m.48 views

CVE-2025-39516

The CVE-2025-39516 entry is tied to the WordPress plugin Author WIP Progress Bar. The connected sources specify a DOM-based XSS due to improper input neutralization during web page generation, affecting Author WIP Progress Bar versions from n/a through 1.0. The initial and related records do not ...

6.5CVSS7.2AI score0.00331EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/04/16 12:0 a.m.7 views

Progress WhatsUp Gold < 24.0.3 Database Manipulation (CVE-2025-2572)

The version of Progress WhatsUp Gold installed on the remote host is prior to 24.0.3. It is, therefore, affected by a database manipulation vulnerability: - In WhatsUp Gold versions released before 2024.0.3, a database manipulation vulnerability allows an unauthenticated attacker to modify the...

5.6CVSS5.6AI score0.00245EPSS
SaveExploits0References3
NVD
NVD
added 2025/04/09 2:15 p.m.22 views

CVE-2025-1968

Insufficient Session Expiration vulnerability in Progress Software Corporation Sitefinity under some specific and uncommon circumstances allows reusing Session IDs Session Replay Attacks.This issue affects Sitefinity: from 14.0 through 14.3, from 14.4 before 14.4.8145, from 15.0 before 15.0.8231,...

7.7CVSS0.00305EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/09 1:33 p.m.5 views

CVE-2025-1968

Insufficient Session Expiration vulnerability in Progress Software Corporation Sitefinity under some specific and uncommon circumstances allows reusing Session IDs Session Replay Attacks.This issue affects Sitefinity: from 14.0 through 14.3, from 14.4 before 14.4.8145, from 15.0 before 15.0.8231,...

7.7CVSS7.6AI score0.00305EPSS
SaveExploits0References1
Rows per page
Query Builder