Lucene search
+L

280 matches found

Vulnrichment
Vulnrichment
added 2026/04/02 1:27 p.m.7 views

CVE-2026-3692 Unintended command execution during report generation in Progress Flowmon

In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the report generation process that results in unintended commands being executed on the server...

8.7CVSS5.9AI score0.0042EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/02 1:27 p.m.4 views

CVE-2026-3692

In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the report generation process that results in unintended commands being executed on the server...

8.7CVSS5.9AI score0.0042EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/04/02 1:27 p.m.38 views

CVE-2026-3692 Unintended command execution during report generation in Progress Flowmon

In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the report generation process that results in unintended commands being executed on the server...

8.7CVSS0.0042EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/02 12:00 a.m.26 views

PT-2026-29738

In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the report generation process that results in unintended commands being executed on the server...

8.7CVSS5.9AI score0.0042EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/04/02 12:00 a.m.17 views

Progress Flowmon 操作系统命令注入漏洞

Progress Flowmon is a real-time network traffic monitoring tool developed by Progress Corporation. Versions of Progress Flowmon prior to 12.5.8 contained an operating system command injection vulnerability. This vulnerability stemmed from requests created by authenticated, low-privilege users...

8.8CVSS5.8AI score0.0042EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/03/25 4:21 p.m.160 views

NightOwl

NightOwl Advanced Penetration Testing Framework A modula...

5.9AI score
SaveExploits0
Cvelist
Cvelist
added 2026/03/20 8:00 p.m.35 views

CVE-2026-33140 PySpector: Stored XSS in PySpector HTML Report Generation leads to Javascript Code Execution

PySpector is a static analysis security testing SAST Framework engineered for modern Python development workflows. PySpector versions 0.1.6 and prior are affected by a stored Cross-Site Scripting XSS vulnerability in the HTML report generator. When PySpector scans a Python file containing...

5.3CVSS0.00217EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2026/03/18 4:29 p.m.330 views

Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Openssl

🔐 SSH Exploit Tool Educational Use Only 📌 Description Th...

7.8CVSS7AI score0.70721EPSS
SaveExploits11
GithubExploit
GithubExploit
added 2026/03/18 3:11 p.m.253 views

Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Openssl

🔐 SSH Exploit Tool Educational Use Only 📌 Description Th...

7.8CVSS6AI score0.70721EPSS
SaveExploits11
GithubExploit
GithubExploit
added 2026/03/18 12:29 p.m.268 views

Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Openssl

🔐 SSH Exploit Tool Educational Use Only 📌 Description Th...

7.8CVSS7AI score0.70721EPSS
SaveExploits11
GithubExploit
GithubExploit
added 2026/03/12 4:33 p.m.168 views

VulnEye---Lightweight-Vulnerability-Scanner

VulnEye - Lightweight Vulnerability Scanner VulnEye is a modu...

5.9AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/03/08 2:31 a.m.240 views

Plasma

Plasma !Pythonhttps://img.shields.io/badge/python-3.10%2B-...

6.3AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/02/18 1:28 p.m.13 views

CVE-2026-2247

SQL injection vulnerability SQLi in Clicldeu SaaS, specifically in the generation of reports, which occurs when a previously authenticated remote attacker executes a malicious payload in the URL generated after downloading the student's report card in the ‘Day-to-day’ section from the mobile...

8.3CVSS5.9AI score0.00248EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/17 12:16 p.m.18 views

CVE-2026-2247

SQL injection vulnerability SQLi in Clicldeu SaaS, specifically in the generation of reports, which occurs when a previously authenticated remote attacker executes a malicious payload in the URL generated after downloading the student's report card in the ‘Day-to-day’ section from the mobile...

8.3CVSS0.00248EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/17 11:35 a.m.7 views

CVE-2026-2247 SQL Injection in Clickedu's SaaS platform

SQL injection vulnerability SQLi in Clicldeu SaaS, specifically in the generation of reports, which occurs when a previously authenticated remote attacker executes a malicious payload in the URL generated after downloading the student's report card in the ‘Day-to-day’ section from the mobile...

8.3CVSS5.9AI score0.00248EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/17 11:35 a.m.44 views

CVE-2026-2247 SQL Injection in Clickedu's SaaS platform

SQL injection vulnerability SQLi in Clicldeu SaaS, specifically in the generation of reports, which occurs when a previously authenticated remote attacker executes a malicious payload in the URL generated after downloading the student's report card in the ‘Day-to-day’ section from the mobile...

8.3CVSS0.00248EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/17 11:35 a.m.10 views

CVE-2026-2247

SQL injection vulnerability SQLi in Clicldeu SaaS, specifically in the generation of reports, which occurs when a previously authenticated remote attacker executes a malicious payload in the URL generated after downloading the student's report card in the ‘Day-to-day’ section from the mobile...

8.3CVSS5.9AI score0.00248EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/02/17 12:00 a.m.21 views

Clicldeu SaaS SQL注入漏洞

Clicldeu SaaS is a cloud-based education management platform developed by the Spanish company Clicldeu. Clicldeu SaaS has a SQL injection vulnerability. This vulnerability arises from the fact that session tokens are not expired during the report generation process, and insufficient validation is...

8.3CVSS5.9AI score0.00248EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/17 12:00 a.m.19 views

PT-2026-8402

SQL injection vulnerability SQLi in Clicldeu SaaS, specifically in the generation of reports, which occurs when a previously authenticated remote attacker executes a malicious payload in the URL generated after downloading the student's report card in the ‘Day-to-day’ section from the mobile...

8.3CVSS5.9AI score0.00248EPSS
SaveExploits0References2
Fedora
Fedora
added 2026/02/11 1:00 a.m.16 views

[SECURITY] Fedora 42 Update: rust-resctl-bench-2.2.5-10.fc42

resctl-bench is a collection of whole-system benchmarks to evaluate resource control and hardware behaviors using realistic simulated workloads. Comprehensive resource control involves the whole system. Furthermore, testing resource control end-to-end requires scenarios involving realistic...

7.5CVSS5.5AI score0.00461EPSS
SaveExploits1
Rows per page
Query Builder