Lucene search
+L

452 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/27 12:00 a.m.•9 views

CVE-2026-3270: Server-Side Request Forgery (SSRF)

A vulnerability has been found in psi-probe PSI Probe up to 5.3.0. This affects the function lookup of the file psi-probe-core/src/main/java/psiprobe/tools/Whois.java of the component Whois. The manipulation leads to server-side request forgery. The attack may be initiated remotely. The exploit h...

8.8CVSS5.9AI score0.00541EPSS
SaveExploits1References1
osv-cve
osv-cve
•added 2026/02/26 11:32 p.m.•17 views

CVE-2026-3270 psi-probe PSI Probe Whois Whois.java lookup server-side request forgery

A vulnerability has been found in psi-probe PSI Probe up to 5.3.0. This affects the function lookup of the file psi-probe-core/src/main/java/psiprobe/tools/Whois.java of the component Whois. The manipulation leads to server-side request forgery. The attack may be initiated remotely. The exploit h...

5.3CVSS5.8AI score
SaveExploits0References6
attackerkb
attackerkb
•added 2026/02/26 11:32 p.m.•12 views

CVE-2026-3270

A vulnerability has been found in psi-probe PSI Probe up to 5.3.0. This affects the function lookup of the file psi-probe-core/src/main/java/psiprobe/tools/Whois.java of the component Whois. The manipulation leads to server-side request forgery. The attack may be initiated remotely. The exploit h...

8.8CVSS5.9AI score0.00541EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2026/02/26 11:32 p.m.•65 views

CVE-2026-3270

PSI Probe up to version 5.3.0 has a server-side request forgery (SSRF) in the Whois component. The root cause is in Whois.java (psi-probe-core/src/main/java/psiprobe/tools/Whois.java) where lookup logic is manipulated, allowing remote initiation. Public exploits have been disclosed; multiple sour...

8.8CVSS5.9AI score0.00541EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/26 11:32 p.m.•5 views

CVE-2026-3270 psi-probe PSI Probe Whois Whois.java lookup server-side request forgery

A vulnerability has been found in psi-probe PSI Probe up to 5.3.0. This affects the function lookup of the file psi-probe-core/src/main/java/psiprobe/tools/Whois.java of the component Whois. The manipulation leads to server-side request forgery. The attack may be initiated remotely. The exploit h...

6.5CVSS5.9AI score0.00541EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/02/26 11:32 p.m.•50 views

CVE-2026-3270 psi-probe PSI Probe Whois Whois.java lookup server-side request forgery

A vulnerability has been found in psi-probe PSI Probe up to 5.3.0. This affects the function lookup of the file psi-probe-core/src/main/java/psiprobe/tools/Whois.java of the component Whois. The manipulation leads to server-side request forgery. The attack may be initiated remotely. The exploit h...

6.5CVSS0.00541EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/02/26 12:00 a.m.•40 views

PT-2026-22237

Name of the Vulnerable Software and Affected Versions PSI Probe versions up to 5.3.0 Description A flaw exists in PSI Probe that allows for server-side request forgery. This issue stems from the lookup function within the Whois.java file, located in the psi-probe-core/src/main/java/psiprobe/tools...

8.8CVSS6AI score0.00541EPSS
SaveExploits1References12
NVD
NVD
•added 2026/02/12 11:16 p.m.•21 views

CVE-2019-25341

iNetTools for iOS 8.20 contains a denial of service vulnerability in the Whois feature that allows attackers to crash the application by manipulating input. Attackers can paste a specially crafted 98-character buffer into the Domain Name field to trigger an application crash...

7.5CVSS0.00353EPSS
SaveExploits0References3
CVE
CVE
•added 2026/02/12 10:48 p.m.•27 views

CVE-2019-25341

CVE-2019-25341 affects iNetTools for iOS (version 8.20) where the Whois feature is vulnerable to a denial-of-service via a crafted 98-character input in the Domain Name field, causing the app to crash. The CVSS metrics indicate a high-severity impact with availability loss (AV:N/AC:L/PR:N/UI:N/S:...

7.5CVSS6AI score0.00353EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/02/12 10:48 p.m.•46 views

CVE-2019-25341 iNetTools for iOS 8.20 - 'Whois' Denial of Service

iNetTools for iOS 8.20 contains a denial of service vulnerability in the Whois feature that allows attackers to crash the application by manipulating input. Attackers can paste a specially crafted 98-character buffer into the Domain Name field to trigger an application crash...

7.5CVSS0.00353EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/02/12 10:48 p.m.•12 views

CVE-2019-25341

iNetTools for iOS 8.20 contains a denial of service vulnerability in the Whois feature that allows attackers to crash the application by manipulating input. Attackers can paste a specially crafted 98-character buffer into the Domain Name field to trigger an application crash...

7.5CVSS5.8AI score0.00353EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/12 10:48 p.m.•12 views

CVE-2019-25341 iNetTools for iOS 8.20 - 'Whois' Denial of Service

iNetTools for iOS 8.20 contains a denial of service vulnerability in the Whois feature that allows attackers to crash the application by manipulating input. Attackers can paste a specially crafted 98-character buffer into the Domain Name field to trigger an application crash...

7.5CVSS6AI score0.00353EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/02/12 12:00 a.m.•23 views

PT-2026-7940

iNetTools for iOS 8.20 contains a denial of service vulnerability in the Whois feature that allows attackers to crash the application by manipulating input. Attackers can paste a specially crafted 98-character buffer into the Domain Name field to trigger an application crash...

7.5CVSS5.8AI score0.00353EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/02/12 12:00 a.m.•20 views

iNetTools 安全漏洞

iNetTools is a network diagnosis and testing tool developed by iNetTools Corporation. Version 8.20 of iNetTools contains a security vulnerability. This vulnerability stems from a denial-of-service vulnerability in the Whois function, which could allow attackers to cause the application to crash b...

7.5CVSS5.8AI score0.00353EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/12 12:00 a.m.•5 views

CVE-2019-25341: Stack-based Buffer Overflow

iNetTools for iOS 8.20 contains a denial of service vulnerability in the Whois feature that allows attackers to crash the application by manipulating input. Attackers can paste a specially crafted 98-character buffer into the Domain Name field to trigger an application crash...

7.5CVSS6AI score0.00353EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 11:54 a.m.•18 views

CVE-2009-4233

Cross-site scripting XSS vulnerability in modules/modyjwhois.php in the YJ Whois component 1.0x and 1.5.x for Joomla! allows remote attackers to inject arbitrary web script or HTML via the domain parameter to index.php. NOTE: some of these details are obtained from third party information...

4.3CVSS6AI score0.01022EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2006-2962

Malware in sbrugna...

4.3CVSS6.4AI score0.01822EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2009-4202

Malware in sbrugna...

4.3CVSS6.4AI score0.01022EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-1999-0964

Malware in sbrugna...

7.5CVSS6.4AI score0.02744EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•36 views

EUVD-2021-19521

Malware in sbrugna...

8.1CVSS7.5AI score0.03621EPSS
SaveExploits1References11
Rows per page
Query Builder