Lucene search
K

51 matches found

Kaspersky
Kaspersky
added 2026/03/12 12:0 a.m.1 views

KLA90937 OSI vulnerability in Microsoft Browser

An information disclosure vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2026-26133 Exploitation Related products Microsoft-Edge CVE list CVE-2026-26133 high Solution Install necessary updates...

7.1CVSS5.8AI score0.00054EPSS
Exploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/06 2:33 a.m.10 views

Malicious code in oj-sp-about-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88af67380622acfe95b416c0349a87adf700798459b1b7794578e38d057a2bf6 The package oj-sp-about-page was found to contain malicious code. Source: ghsa-malware 4bece5a0063e69e6b490afd2ca5d92fce9ce26e5c729f5f550f9acca50eb10...

6.9AI score
Exploits0References1
OSV
OSV
added 2026/01/06 2:33 a.m.2 views

MAL-2026-60 Malicious code in oj-sp-about-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88af67380622acfe95b416c0349a87adf700798459b1b7794578e38d057a2bf6 The package oj-sp-about-page was found to contain malicious code. Source: ghsa-malware 4bece5a0063e69e6b490afd2ca5d92fce9ce26e5c729f5f550f9acca50eb10...

6.8AI score
Exploits0References1
EUVD
EUVD
added 2026/01/06 2:33 a.m.3 views

EUVD-2026-1137

Malicious code in oj-sp-about-page npm...

6.6AI score
Exploits0References1
Snyk
Snyk
added 2026/01/06 2:33 a.m.2 views

Malicious Package

Overview oj-sp-about-page is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/12/10 9:16 p.m.2 views

CVE-2023-53772

MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter. Attackers can exploit the about page by supplying file paths to disclose arbitrary file contents on the affected device...

8.7CVSS6.6AI score0.01178EPSS
Exploits1References1
EUVD
EUVD
added 2025/12/09 9:31 p.m.5 views

EUVD-2023-60180

MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter. Attackers can exploit the about page by supplying file paths to disclose arbitrary file contents on the affected device...

8.7CVSS6.1AI score0.01178EPSS
Exploits1References5
NVD
NVD
added 2025/12/09 9:15 p.m.2 views

CVE-2023-53772

MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter. Attackers can exploit the about page by supplying file paths to disclose arbitrary file contents on the affected device...

8.7CVSS0.01178EPSS
Exploits1References4
OSV
OSV
added 2025/12/09 9:15 p.m.2 views

CVE-2023-53772

MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter. Attackers can exploit the about page by supplying file paths to disclose arbitrary file contents on the affected device...

7.5CVSS5.9AI score0.01178EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/12/09 8:55 p.m.19 views

CVE-2023-53772 MiniDVBLinux 5.4 Arbitrary File Read Vulnerability via About Page

MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter. Attackers can exploit the about page by supplying file paths to disclose arbitrary file contents on the affected device...

8.7CVSS0.01178EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/12/09 8:55 p.m.2 views

CVE-2023-53772 MiniDVBLinux 5.4 Arbitrary File Read Vulnerability via About Page

MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter. Attackers can exploit the about page by supplying file paths to disclose arbitrary file contents on the affected device...

8.7CVSS6.2AI score0.01178EPSS
Exploits1References4
CVE
CVE
added 2025/12/09 8:55 p.m.11 views

CVE-2023-53772

CVE-2023-53772 concerns MiniDVBLinux 5.4 with an arbitrary file disclosure via the about page. The vulnerability arises from improper handling of the GET parameter file used to disclose arbitrary file contents, enabling path traversal to read system files. Public descriptions from multiple source...

8.7CVSS6.2AI score0.01178EPSS
Exploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.2 views

PT-2025-50269

Name of the Vulnerable Software and Affected Versions MiniDVBLinux version 5.4 Description MiniDVBLinux version 5.4 contains a flaw that allows attackers to read sensitive system files. This is possible through the 'file' GET parameter on the about page, enabling disclosure of arbitrary file...

8.7CVSS6.2AI score0.01178EPSS
Exploits1References8
CVE
CVE
added 2025/11/17 10:32 a.m.11 views

CVE-2025-13275

CVE-2025-13275 concerns the Iqbolshoh php-business-website up to a rolling release build. All connected sources describe an issue in the file /admin/about.php that permits unrestricted file upload, with exploitation possible remotely. The vulnerability is widely reported as already disclosed publ...

5.8CVSS6.4AI score0.00038EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/10/29 10:51 a.m.4 views

CVE-2025-12461 Unprotected access to parts of the application in Epsilon RH by Grupo Castilla

This vulnerability allows an attacker to access parts of the application that are not protected by any type of access control. The attacker could access this path ‘…/epsilonnet/License/About.aspx’ and obtain information on both the licence and the configuration of the product by knowing which...

6.9CVSS0.0006EPSS
Exploits0References1
CVE
CVE
added 2025/10/29 10:51 a.m.5 views

CVE-2025-12461

CVE-2025-12461 affects Grupo Castilla Epsilon RH. The issue allows an attacker to access the unprotected path …/epsilonnet/License/About.aspx and disclose license details and product configuration, including installed modules. The root cause is lack of access control on that path. Impact is infor...

6.9CVSS6.2AI score0.0006EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2021-31876

Malicious code in bioql PyPI...

6.1CVSS6.2AI score0.00288EPSS
Exploits1References7
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-45085

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a user visits an XSS...

6.1CVSS6AI score0.00288EPSS
Exploits1References2
OSV
OSV
added 2024/12/16 10:18 p.m.8 views

GHSA-6PFC-W86R-54Q6 Welcome and About GeoServer pages communicate version and revision information

Impact The welcome and about page includes version and revision information about the software in use including library and components used. This information is sensitive from a security point of view because it allows software used by the server to be easily identified. Proof of Concept 1. Welco...

5.3CVSS5.4AI score0.00232EPSS
Exploits1References6
GithubExploit
GithubExploit
added 2024/03/09 10:24 p.m.307 views

Exploit for CVE-2024-27697

FuguHub 8.4 Authenticated RCE Fuguhub is a Cloud Media Serve...

8.8CVSS8.7AI score0.6714EPSS
Exploits9
Rows per page
Query Builder