Lucene search
+L

345 matches found

GithubExploit
GithubExploit
•added 2026/06/26 3:46 p.m.•90 views

Sql-injection-scanner

Sql-injection-scanner Developing a security scanning tool that...

5.8AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2026/06/22 4:29 a.m.•124 views

lynx

LYNX — Layered Network eXploit Suite LYNX is a CLI-driven pla...

5.9AI score
SaveExploits0
EUVD
EUVD
•added 2026/06/22 12:31 a.m.•40 views

EUVD-2026-38198

A security vulnerability has been detected in Radware Cyber Controller up to 10.11.0. This affects an unknown part of the component HTML Report Generation. The manipulation leads to HTML injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be...

5.1CVSS5.3AI score0.00331EPSS
SaveExploits0References5
NVD
NVD
•added 2026/06/21 11:16 p.m.•22 views

CVE-2026-12812

A security vulnerability has been detected in Radware Cyber Controller up to 10.11.0. This affects an unknown part of the component HTML Report Generation. The manipulation leads to HTML injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be...

5.1CVSS0.00331EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/06/21 10:15 p.m.•44 views

CVE-2026-12812 Radware Cyber Controller HTML Report Generation HTML injection

A security vulnerability has been detected in Radware Cyber Controller up to 10.11.0. This affects an unknown part of the component HTML Report Generation. The manipulation leads to HTML injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be...

5.1CVSS0.00331EPSS
SaveExploits0References4
CVE
CVE
•added 2026/06/21 10:15 p.m.•56 views

CVE-2026-12812

Radware Cyber Controller (up to 10.11.0) is affected in the HTML Report Generation component, with HTML injection due to the underlying issue. The vulnerability allows remote exploitation, and the exploit has been publicly disclosed. No remediation details are provided in the documents. Affected ...

5.1CVSS5AI score0.00331EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/06/21 10:15 p.m.•13 views

CVE-2026-12812

A security vulnerability has been detected in Radware Cyber Controller up to 10.11.0. This affects an unknown part of the component HTML Report Generation. The manipulation leads to HTML injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be...

5.1CVSS5.3AI score0.00331EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
•added 2026/06/21 10:15 p.m.•11 views

CVE-2026-12812 Radware Cyber Controller HTML Report Generation HTML injection

A security vulnerability has been detected in Radware Cyber Controller up to 10.11.0. This affects an unknown part of the component HTML Report Generation. The manipulation leads to HTML injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be...

5.1CVSS5AI score0.00331EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/21 12:00 a.m.•4 views

CVE-2026-12812: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A security vulnerability has been detected in Radware Cyber Controller up to 10.11.0. This affects an unknown part of the component HTML Report Generation. The manipulation leads to HTML injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be...

5.1CVSS4.9AI score0.00331EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2026/06/14 7:26 p.m.•144 views

VulnPilot

VulnPilot VulnPilot is an automation framework for vulnerabil...

5.4AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2026/06/12 8:52 p.m.•128 views

webstrike-framework

WebStrike — Automated Web Pentesting Framework Created by...

5.6AI score
SaveExploits0
Cvelist
Cvelist
•added 2026/06/09 12:21 a.m.•68 views

CVE-2026-44751 Missing Authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform

Application server ABAP does not perform necessary authorization checks for an authenticated user allowing an attacker to execute a report generation command which could overwrite information belonging to another user, resulting in escalation of privileges. This has high impact on integrity with...

7.1CVSS0.00352EPSS
SaveExploits0References2
CVE
CVE
•added 2026/06/09 12:21 a.m.•97 views

CVE-2026-44751

CVE-2026-44751 affects the SAP NetWeaver ABAP Platform/application server ABAP. The issue is a missing authorization check for authenticated users, enabling a user to execute a report generation command and potentially overwrite another user’s information, resulting in privilege escalation. Impac...

7.1CVSS7.2AI score0.00352EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/06/09 12:21 a.m.•34 views

EUVD-2026-35285

Application server ABAP does not perform necessary authorization checks for an authenticated user allowing an attacker to execute a report generation command which could overwrite information belonging to another user, resulting in escalation of privileges. This has high impact on integrity with...

7.1CVSS5.6AI score0.00352EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/06/09 12:21 a.m.•17 views

CVE-2026-44751

Application server ABAP does not perform necessary authorization checks for an authenticated user allowing an attacker to execute a report generation command which could overwrite information belonging to another user, resulting in escalation of privileges. This has high impact on integrity with...

7.1CVSS5.6AI score0.00352EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/06/09 12:21 a.m.•15 views

CVE-2026-44751 Missing Authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform

Application server ABAP does not perform necessary authorization checks for an authenticated user allowing an attacker to execute a report generation command which could overwrite information belonging to another user, resulting in escalation of privileges. This has high impact on integrity with...

7.1CVSS7.2AI score0.00352EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•1 views

CVE-2026-44751: Missing Authorization

Application server ABAP does not perform necessary authorization checks for an authenticated user allowing an attacker to execute a report generation command which could overwrite information belonging to another user, resulting in escalation of privileges. This has high impact on integrity with...

7.1CVSS7.1AI score0.00352EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/09 12:00 a.m.•39 views

PT-2026-47536

Application server ABAP does not perform necessary authorization checks for an authenticated user allowing an attacker to execute a report generation command which could overwrite information belonging to another user, resulting in escalation of privileges. This has high impact on integrity with...

7.1CVSS5.6AI score0.00352EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•33 views

SAP NetWeaver ABAP Platform 安全漏洞

SAP NetWeaver ABAP Platform is an integrated technology platform developed by the German company SAP. There is a security vulnerability in SAP NetWeaver ABAP Platform, which stems from the lack of necessary authorization checks for authenticated users. This vulnerability could allow attackers to...

7.1CVSS5.5AI score0.00352EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/21 6:16 p.m.•24 views

CVE-2026-48246

Open ISES Tickets before 3.44.2 disables TLS certificate verification in ajax/reports.php by setting CURLOPTSSLVERIFYPEER to false and not setting CURLOPTSSLVERIFYHOST when issuing outbound HTTPS requests for Google Maps Directions API lookups during incident report generation. An attacker...

8.2CVSS0.00265EPSS
SaveExploits0References3
Rows per page
Query Builder