Lucene search
+L

1960 matches found

Positive Technologies
Positive Technologies
added 2024/01/12 12:00 a.m.14 views

PT-2024-15592 · Code Projects · Dormitory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Dormitory Management System version 1.0 Description: A critical issue has been found in the Dormitory Management System, affecting some unknown functionality of the file modifyuser.php. The manipulation of the user id argument...

9.8CVSS7.9AI score0.005EPSS
SaveExploits0References8
Circl
Circl
added 2024/01/11 6:02 p.m.15 views

CVE-2023-39340

creationtimestamp| type| source ---|---|--- 2024-01-11 18:02:24+00:00| seen| https://t.me/ctinow/166679...

7.5CVSS7.3AI score0.02376EPSS
SaveExploits0References1
Circl
Circl
added 2024/01/11 8:56 a.m.8 views

GHSA-MGQJ-HPHF-9588

creationtimestamp| type| source ---|---|--- 2024-01-11 08:56:59+00:00| seen| https://t.me/ctinow/166369...

4.8AI score
SaveExploits0References1
Circl
Circl
added 2024/01/10 1:37 p.m.9 views

CVE-2023-50771

creationtimestamp| type| source ---|---|--- 2024-01-10 13:37:24+00:00| seen| https://t.me/ctinow/165779...

6.1CVSS6.1AI score0.006EPSS
SaveExploits0References1
Circl
Circl
added 2024/01/04 11:06 p.m.6 views

GHSA-WF2X-8W6J-QW37

creationtimestamp| type| source ---|---|--- 2024-01-04 23:06:32+00:00| seen| https://t.me/ctinow/163286...

4.8AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2024/01/03 2:10 p.m.15 views

glibc: buffer overflow in ld.so leading to privilege escalation

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBCTUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBCTUNABLES environment variables when launching binaries with SUID permission to execute code...

7.8CVSS7.2AI score0.81422EPSS
SaveExploits28References7
OSV
OSV
added 2024/01/02 10:15 p.m.5 views

CVE-2020-26625

A SQL injection vulnerability was discovered in Gila CMS 1.15.4 and earlier which allows a remote attacker to execute arbitrary web scripts via the 'userid' parameter after the login portal...

3.8CVSS6.1AI score0.00668EPSS
SaveExploits3References4
Circl
Circl
added 2024/01/01 5:41 p.m.14 views

CVE-2023-50422

creationtimestamp| type| source ---|---|--- 2024-01-01 17:41:37+00:00| seen| https://t.me/ctinow/161386...

9.8CVSS8.7AI score0.01355EPSS
SaveExploits0References1
Circl
Circl
added 2023/12/31 5:41 p.m.12 views

CVE-2023-46495

creationtimestamp| type| source ---|---|--- 2023-12-31 17:41:51+00:00| seen| https://t.me/ctinow/161147...

6.1CVSS6AI score0.00494EPSS
SaveExploits0References1
Circl
Circl
added 2023/12/31 5:11 p.m.13 views

CVE-2023-46497

creationtimestamp| type| source ---|---|--- 2023-12-31 17:11:33+00:00| seen| https://t.me/ctinow/161140...

5.4CVSS5.5AI score0.00793EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/29 2:15 a.m.6 views

CVE-2023-31298

Cross Site Scripting XSS vulnerability in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user...

4.8CVSS6.1AI score0.00436EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/29 2:15 a.m.19 views

CVE-2023-31298

Cross Site Scripting XSS vulnerability in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user...

4.8CVSS0.00436EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/29 2:15 a.m.18 views

Cross site scripting

Cross Site Scripting XSS vulnerability in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user...

4.3CVSS6.6AI score0.00436EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/12/29 12:15 a.m.9 views

CVE-2023-7141

A vulnerability was found in code-projects Client Details System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/update-clients.php. The manipulation of the argument uid leads to sql injection. The exploit has been disclosed to the public and may be...

9.8CVSS5AI score0.00644EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/12/29 12:00 a.m.27 views

CVE-2023-31298

Cross Site Scripting XSS vulnerability in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user...

5.5AI score0.00436EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/12/29 12:00 a.m.14 views

CVE-2023-31298

Cross Site Scripting XSS vulnerability in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user...

6.5AI score0.00436EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/12/28 12:00 a.m.10 views

PT-2023-23284 · Unknown · Sesami Cash Point & Transport Optimizer

Name of the Vulnerable Software and Affected Versions: Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 Description: The issue allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user. This is a Cross Site...

4.8CVSS5.4AI score0.00436EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/12/27 12:00 a.m.11 views

PT-2023-11748 · Gila Cms · Gila Cms

Name of the Vulnerable Software and Affected Versions: Gila CMS versions 1.15.4 and earlier Description: A SQL injection issue was discovered that allows a remote attacker to execute arbitrary web scripts via the user id parameter after the login portal. This enables the attacker to potentially...

3.8CVSS5AI score0.00668EPSS
SaveExploits3References10
Positive Technologies
Positive Technologies
added 2023/12/24 12:00 a.m.13 views

PT-2023-27412 · Centralsquare · Centralsquare Click2Gov Building Permit

Name of the Vulnerable Software and Affected Versions: CentralSquare Click2Gov Building Permit versions prior to October 2023 Description: An issue was discovered in CentralSquare Click2Gov Building Permit, where lack of access control protections allows remote attackers to arbitrarily delete...

4.3CVSS4.4AI score0.00667EPSS
SaveExploits1References8
Circl
Circl
added 2023/12/22 8:51 a.m.11 views

GHSA-WQQW-R8C5-J67C

creationtimestamp| type| source ---|---|--- 2023-12-22 08:51:31+00:00| seen| https://t.me/ctinow/158244...

4.8AI score
SaveExploits0References1
Rows per page
Query Builder