Lucene search
+L

1934 matches found

Positive Technologies
Positive Technologies
•added 2025/05/01 12:00 a.m.•12 views

PT-2025-24447

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A logic error in the code may allow a lock screen bypass, potentially leading to local privilege escalation without requiring additional execution privileges or user interaction. The...

10CVSS6.8AI score0.00099EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2025/05/01 12:00 a.m.•20 views

PT-2025-24453

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The vulnerability resides within the System component of the Android operating system, stemming from improper code generation management. Remote attackers can potentially execute arbitrary co...

10CVSS7AI score0.00088EPSS
SaveExploits0References9
NVD
NVD
•added 2025/04/30 8:15 p.m.•43 views

CVE-2024-6032

Tesla Model S Iris Modem qlatfwd Command Injection Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code on the target system in order to exploit this...

7.8CVSS0.00534EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/30 12:00 a.m.•15 views

PT-2025-18282 · Unknown · Phpgurukul Park Ticketing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Park Ticketing Management System version 2.0 Description: A HTML Injection issue was discovered in the normal-bwdates-reports-details.php file. This issue allows remote attackers to execute arbitrary code via the fromdate and todat...

5.3CVSS7.5AI score0.00345EPSS
SaveExploits1References4
OSV
OSV
•added 2025/04/28 8:15 p.m.•20 views

CVE-2025-45949

A critical vulnerability was found in PHPGurukul User Registration & Login and User Management System V3.3 in the /loginsystem/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely and...

9.8CVSS5.8AI score0.00521EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/04/27 4:31 a.m.•37 views

CVE-2025-3959 withstars Books-Management-System reader_delete.html cross-site request forgery

A vulnerability was found in withstars Books-Management-System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /readerdelete.html. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploi...

5.3CVSS0.00302EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/04/27 1:07 a.m.•35 views

CVE-2025-46574 ZTE GoldenDB Database product has an input validation vulnerability

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information...

4.1CVSS0.00236EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/25 12:00 a.m.•13 views

CVE-2025-28128

An issue in Mytel Telecom Online Account System v1.0 allows attackers to bypass the OTP verification process via a crafted request...

6.8AI score0.00422EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/04/18 12:00 a.m.•15 views

Orban OPTIMOD 5950 Firmware和Orban OPTIMOD 5950 System 安全漏洞

The Orban OPTIMOD 5950 Firmware and the Orban OPTIMOD 5950 System are both products of Orban Corporation.The Orban OPTIMOD 5950 Firmware is an audio processor firmware.The Orban OPTIMOD 5950 System is an audio processor system. A security vulnerability exists in the Orban OPTIMOD 5950 Firmware an...

9.8CVSS7.1AI score0.00779EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/04/18 12:00 a.m.•14 views

Huawei HarmonyOS Buffer Overflow Vulnerability Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a buffer overflow vulnerability that can be exploited by attackers to affect availability...

7.5CVSS7.6AI score0.00258EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•12 views

Nullsoft Scriptable Install System 安全漏洞

Nullsoft Scriptable Install System is a specialized open source system from the Nullsoft team for creating Windows installers. A security vulnerability exists in Nullsoft Scriptable Install System versions prior to 3.11, which stems from an improperly created temporary plug-in directory that coul...

8.1CVSS6.1AI score0.002EPSS
SaveExploits0References2
NVD
NVD
•added 2025/04/16 5:15 p.m.•24 views

CVE-2024-40070

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

5.1CVSS0.00258EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2025/04/16 3:16 p.m.•11 views

CVE-2025-22114

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't clobber ret in btrfsvalidatesuper Commit 2a9bb78cfd36 "btrfs: validate system chunk array at btrfsvalidatesuper" introduces a call to validatesyschunkarray in btrfsvalidatesuper, which clobbers the value of ret set...

7.8CVSS5.9AI score0.00181EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2025/04/15 4:32 p.m.•70 views

CVE-2025-32776

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. By writing specially crafted data to the matrixcustomframe file, an attacker can cause the custom kernel driver to read more bytes than provided by user space. This data will...

5.5CVSS5.2AI score0.00189EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/04/15 12:00 a.m.•28 views

The vulnerability of the BIOS microprogramming system in Dell laptops allows a hacker to execute arbitrary code.

The vulnerability of the BIOS microprogramming system in Dell laptops is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.5CVSS8.2AI score0.00166EPSS
SaveExploits0References4Affected Software51
CNVD
CNVD
•added 2025/04/14 12:00 a.m.•29 views

Dell PowerScale OneFS Authorization Logic Error Vulnerability

PowerScale OneFS is a distributed storage operating system developed by Dell to provide unified file system management and high availability services for enterprise-class storage environments. Dell PowerScale OneFS suffers from an authorization logic error vulnerability that stems from not proper...

7CVSS6.3AI score0.0015EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/04/14 12:00 a.m.•32 views

The vulnerability of the fs component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the fs component in the Linux operating system’s kernel is related to the use of an uninitialized resource in the ocfs2setattr function. Exploiting this vulnerability could allow a attacker to cause a service failure...

5.5CVSS6.7AI score0.00249EPSS
SaveExploits0References17Affected Software8
NVD
NVD
•added 2025/04/13 12:15 a.m.•38 views

CVE-2025-2814

Crypt::CBC versions between 1.21 and 3.05 for Perl may use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. This issue affects operating systems where "/dev/urandom'" is unavailable. In that case, Crypt::CBC will fallback to...

4CVSS0.00197EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/04/10 12:00 a.m.•18 views

The vulnerability of the NTFS file system of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the NTFS file system in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

6.8CVSS7.6AI score0.03254EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/04/10 12:00 a.m.•16 views

The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the NTFS file system in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS8AI score0.00729EPSS
SaveExploits0References2
Rows per page
Query Builder