Lucene search
+L

184 matches found

OSV
OSV
•added 2025/11/17 4:15 p.m.•15 views

CVE-2025-63747

QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web application login page. Because the account provides administrative privileges in the default configuration, an attacker who can reach the login page can ga...

9.8CVSS5.8AI score0.00435EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/11/17 12:00 a.m.•16 views

CVE-2025-63747

QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web application login page. Because the account provides administrative privileges in the default configuration, an attacker who can reach the login page can ga...

5.8AI score0.00435EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•23 views

PT-2025-47157

Name of the Vulnerable Software and Affected Versions QaTraq version 6.9.2 Description QaTraq version 6.9.2 is shipped with default administrative account credentials enabled, allowing immediate login via the web application login page. An attacker reaching the login page can gain administrative...

9.8CVSS5.9AI score0.00435EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2025/11/17 12:00 a.m.•31 views

CVE-2025-63747

QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web application login page. Because the account provides administrative privileges in the default configuration, an attacker who can reach the login page can ga...

0.00435EPSS
SaveExploits1References1
CVE
CVE
•added 2025/11/17 12:00 a.m.•48 views

CVE-2025-63747

SourceForge QaTraq version 6.9.2 is shipped with enabled default administrative account credentials , allowing for immediate login via the web application login page. An attacker capable of reaching the login page can exploit this to gain administrative access due to the account's default privile...

9.8CVSS5.8AI score0.00435EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2025/11/12 6:15 p.m.•16 views

CVE-2025-20378

In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, 9.2.9, and Splunk Cloud Platform versions below 10.0.2503.5, 9.3.2411.111, and 9.3.2408.121, an unauthenticated attacker could craft a malicious URL using the returnto parameter of the Splunk Web login endpoint. When an authenticated user...

6.1CVSS5.8AI score0.00235EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/12 5:22 p.m.•28 views

CVE-2025-20378 Open Redirect on Web Login endpoint in Splunk Enterprise

In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, 9.2.9, and Splunk Cloud Platform versions below 10.0.2503.5, 9.3.2411.111, and 9.3.2408.121, an unauthenticated attacker could craft a malicious URL using the returnto parameter of the Splunk Web login endpoint. When an authenticated user...

3.1CVSS0.00235EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/12 5:22 p.m.•34 views

CVE-2025-20378

CVE-2025-20378 affects Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, 9.2.9 and Splunk Cloud Platform below 10.0.2503.5, 9.3.2411.111, 9.3.2408.121. An unauthenticated attacker can craft a malicious URL using the return_to parameter of the Splunk Web login endpoint; when an authenticated ...

6.1CVSS5.5AI score0.00235EPSS
SaveExploits0References1Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/12 12:00 a.m.•2 views

CVE-2025-20378: URL Redirection to Untrusted Site

In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, 9.2.9, and Splunk Cloud Platform versions below 10.0.2503.5, 9.3.2411.111, and 9.3.2408.121, an unauthenticated attacker could craft a malicious URL using the returnto parameter of the Splunk Web login endpoint. When an authenticated user...

6.1CVSS5.8AI score0.00235EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/31 12:00 a.m.•21 views

PT-2025-44580

Name of the Vulnerable Software and Affected Versions FutureNet MA and IP-K series Description A flaw exists in FutureNet MA and IP-K series routers that allows a user who logs in to the Web UI to execute arbitrary OS commands. This is due to an OS command injection issue. Recommendations At the...

8.6CVSS7.3AI score0.0123EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2020-6227

Malware in sbrugna...

9.8CVSS9.4AI score0.01146EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2006-6623

Malware in sbrugna...

6.8CVSS6.4AI score0.02049EPSS
SaveExploits1References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2021-21890

Malware in sbrugna...

5.3CVSS7.3AI score0.03453EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2019-1990

Malware in sbrugna...

9.8CVSS9.5AI score0.01421EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2021-27073

Malware in sbrugna...

6.1CVSS6.3AI score0.00746EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2020-6229

Malware in sbrugna...

10CVSS9.4AI score0.01825EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2009-1291

Malware in sbrugna...

5CVSS6.4AI score0.01818EPSS
SaveExploits2References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2020-20619

Malware in sbrugna...

9.8CVSS9.5AI score0.02107EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2023-33788

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00422EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2022-34744

Malicious code in bioql PyPI...

9.6CVSS7.5AI score0.00522EPSS
SaveExploits0References2
Rows per page
Query Builder