Lucene search
+L

345 matches found

attackerkb
attackerkb
•added 2026/04/02 1:27 p.m.•10 views

CVE-2026-3692

In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the report generation process that results in unintended commands being executed on the server...

8.7CVSS5.9AI score0.00569EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2026/04/02 12:00 a.m.•25 views

Progress Flowmon 操作系统命令注入漏洞

Progress Flowmon is a real-time network traffic monitoring tool developed by Progress Corporation. Versions of Progress Flowmon prior to 12.5.8 contained an operating system command injection vulnerability. This vulnerability stemmed from requests created by authenticated, low-privilege users...

8.8CVSS5.8AI score0.00569EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/02 12:00 a.m.•35 views

PT-2026-29738

In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the report generation process that results in unintended commands being executed on the server...

8.7CVSS5.9AI score0.00569EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/02 12:00 a.m.•7 views

CVE-2026-3692: Improper Neutralization of Special Elements used in an OS Command

In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the report generation process that results in unintended commands being executed on the server...

8.8CVSS5.8AI score0.00569EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2026/03/25 4:21 p.m.•163 views

NightOwl

NightOwl Advanced Penetration Testing Framework A modula...

5.9AI score
SaveExploits0
Cvelist
Cvelist
•added 2026/03/20 8:00 p.m.•38 views

CVE-2026-33140 PySpector: Stored XSS in PySpector HTML Report Generation leads to Javascript Code Execution

PySpector is a static analysis security testing SAST Framework engineered for modern Python development workflows. PySpector versions 0.1.6 and prior are affected by a stored Cross-Site Scripting XSS vulnerability in the HTML report generator. When PySpector scans a Python file containing...

5.3CVSS0.00261EPSS
SaveExploits1References1
GithubExploit
GithubExploit
•added 2026/03/18 4:29 p.m.•333 views

Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Openssl

🔐 SSH Exploit Tool Educational Use Only 📌 Description Th...

7.8CVSS7.3AI score0.70721EPSS
SaveExploits11
GithubExploit
GithubExploit
•added 2026/03/18 3:11 p.m.•259 views

Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Openssl

🔐 SSH Exploit Tool Educational Use Only 📌 Description Th...

7.8CVSS7.3AI score0.70721EPSS
SaveExploits11
GithubExploit
GithubExploit
•added 2026/03/18 12:29 p.m.•274 views

Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Openssl

🔐 SSH Exploit Tool Educational Use Only 📌 Description Th...

7.8CVSS7.3AI score0.70721EPSS
SaveExploits11
GithubExploit
GithubExploit
•added 2026/03/12 4:33 p.m.•169 views

VulnEye---Lightweight-Vulnerability-Scanner

VulnEye - Lightweight Vulnerability Scanner VulnEye is a modu...

5.9AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2026/03/08 2:31 a.m.•244 views

Plasma

Plasma !Pythonhttps://img.shields.io/badge/python-3.10%2B-...

6.3AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/02/18 1:28 p.m.•17 views

CVE-2026-2247

SQL injection vulnerability SQLi in Clicldeu SaaS, specifically in the generation of reports, which occurs when a previously authenticated remote attacker executes a malicious payload in the URL generated after downloading the student's report card in the ‘Day-to-day’ section from the mobile...

8.3CVSS5.9AI score0.00263EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/17 12:16 p.m.•22 views

CVE-2026-2247

SQL injection vulnerability SQLi in Clicldeu SaaS, specifically in the generation of reports, which occurs when a previously authenticated remote attacker executes a malicious payload in the URL generated after downloading the student's report card in the ‘Day-to-day’ section from the mobile...

8.3CVSS0.00263EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/17 11:35 a.m.•49 views

CVE-2026-2247 SQL Injection in Clickedu's SaaS platform

SQL injection vulnerability SQLi in Clicldeu SaaS, specifically in the generation of reports, which occurs when a previously authenticated remote attacker executes a malicious payload in the URL generated after downloading the student's report card in the ‘Day-to-day’ section from the mobile...

8.3CVSS0.00263EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/02/17 11:35 a.m.•11 views

CVE-2026-2247 SQL Injection in Clickedu's SaaS platform

SQL injection vulnerability SQLi in Clicldeu SaaS, specifically in the generation of reports, which occurs when a previously authenticated remote attacker executes a malicious payload in the URL generated after downloading the student's report card in the ‘Day-to-day’ section from the mobile...

8.3CVSS6.2AI score0.00263EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/17 11:35 a.m.•14 views

CVE-2026-2247

SQL injection vulnerability SQLi in Clicldeu SaaS, specifically in the generation of reports, which occurs when a previously authenticated remote attacker executes a malicious payload in the URL generated after downloading the student's report card in the ‘Day-to-day’ section from the mobile...

8.3CVSS5.9AI score0.00263EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/02/17 12:00 a.m.•25 views

PT-2026-8402

SQL injection vulnerability SQLi in Clicldeu SaaS, specifically in the generation of reports, which occurs when a previously authenticated remote attacker executes a malicious payload in the URL generated after downloading the student's report card in the ‘Day-to-day’ section from the mobile...

8.3CVSS5.9AI score0.00263EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/02/17 12:00 a.m.•27 views

Clicldeu SaaS SQL注入漏洞

Clicldeu SaaS is a cloud-based education management platform developed by the Spanish company Clicldeu. Clicldeu SaaS has a SQL injection vulnerability. This vulnerability arises from the fact that session tokens are not expired during the report generation process, and insufficient validation is...

8.3CVSS5.9AI score0.00263EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/17 12:00 a.m.•6 views

CVE-2026-2247: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability SQLi in Clicldeu SaaS, specifically in the generation of reports, which occurs when a previously authenticated remote attacker executes a malicious payload in the URL generated after downloading the student's report card in the ‘Day-to-day’ section from the mobile...

8.3CVSS6.2AI score0.00263EPSS
SaveExploits0References1
Fedora
Fedora
•added 2026/02/11 1:00 a.m.•22 views

[SECURITY] Fedora 42 Update: rust-resctl-bench-2.2.5-10.fc42

resctl-bench is a collection of whole-system benchmarks to evaluate resource control and hardware behaviors using realistic simulated workloads. Comprehensive resource control involves the whole system. Furthermore, testing resource control end-to-end requires scenarios involving realistic...

7.5CVSS6.2AI score0.00622EPSS
SaveExploits1
Rows per page
Query Builder