Lucene search
+L

33785 matches found

Vulnrichment
Vulnrichment
added 2026/02/10 5:43 p.m.10 views

CVE-2026-25993 EverShop has a Second-Order SQL Injection in URL Rewrite Processing Derived from Category URL Keys

EverShop is a TypeScript-first eCommerce platform. During category update and deletion event handling, the application embeds path / requestpath values—derived from the urlkey stored in the database—into SQL statements via string concatenation and passes them to execute. As a result, if a malicio...

9.3CVSS5.8AI score0.0032EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/10 5:43 p.m.5 views

CVE-2026-25993

EverShop is a TypeScript-first eCommerce platform. During category update and deletion event handling, the application embeds path / requestpath values—derived from the urlkey stored in the database—into SQL statements via string concatenation and passes them to execute. As a result, if a malicio...

9.3CVSS5.8AI score0.0032EPSS
SaveExploits0References3Affected Software1
Microsoft CVE
Microsoft CVE
added 2026/02/10 4:00 p.m.16 views

Azure IoT Explorer Information Disclosure Vulnerability

Binding to an unrestricted ip address in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...

6.5CVSS5.4AI score0.00512EPSS
SaveExploits0
Circl
Circl
added 2026/02/10 10:17 a.m.13 views

CVE-2026-23720

creationtimestamp| type| source ---|---|--- 2026-02-10 10:17:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meiqbm6tvf22 2026-02-17 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-048-01...

7.8CVSS4.8AI score0.00162EPSS
SaveExploits0References2
Circl
Circl
added 2026/02/10 7:34 a.m.8 views

GHSA-G8HP-MQ4H-RQM3

creationtimestamp| type| source ---|---|--- 2026-02-10 07:34:51+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/116045177891975357...

5.1AI score
SaveExploits0References1
OSV
OSV
added 2026/02/10 4:16 a.m.11 views

CVE-2026-24323

The BSP applications allow an unauthenticated user to inject malicious script content via user-controlled URL parameters that are not sufficiently sanitized. When a victim accesses a crafted URL, the injected script is executed in the victim�s browser, leading to a low impact on confidentiality a...

6.1CVSS5.8AI score0.00206EPSS
SaveExploits0References2
NVD
NVD
added 2026/02/10 4:16 a.m.16 views

CVE-2026-24323

The BSP applications allow an unauthenticated user to inject malicious script content via user-controlled URL parameters that are not sufficiently sanitized. When a victim accesses a crafted URL, the injected script is executed in the victim�s browser, leading to a low impact on confidentiality a...

6.1CVSS0.00206EPSS
SaveExploits0References2
NVD
NVD
added 2026/02/10 4:16 a.m.19 views

CVE-2026-0505

The BSP applications allow an unauthenticated user to manipulate user-controlled URL parameters that are not sufficiently validated. This could result in unvalidated redirection to attacker-controlled websites, leading to a low impact on confidentiality and integrity, and no impact on the...

6.1CVSS0.00211EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/02/10 12:00 a.m.18 views

PT-2026-7409

Name of the Vulnerable Software and Affected Versions Azure IoT SDK affected versions not specified Description An issue exists where binding to an unrestricted IP address in the Azure IoT SDK can allow an unauthorized attacker to disclose information over a network. Recommendations At the moment...

6.5CVSS5.4AI score0.00512EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/02/10 12:00 a.m.29 views

PT-2026-7470

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A security issue exists where an attacker with Event Log Reader S-1-5-32-573 privileges may be able to obtain proxy details, including the URL and proxy credentials, from PI to CONNECT event log file...

6.5CVSS5.4AI score0.00112EPSS
SaveExploits0References4
FreeBSD
FreeBSD
added 2026/02/10 12:00 a.m.8 views

FreeBSD -- blocklistd(8) socket leak

Problem Description: Due to a programming error, blocklistd leaks a socket descriptor for each adverse event report it receives. Once a certain number of leaked sockets is reached, blocklistd becomes unable to run the helper script: a child process is forked, but this child dereferences a null...

7.5CVSS5.6AI score0.00359EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/02/10 12:00 a.m.19 views

PT-2026-7205

The BSP applications allow an unauthenticated user to manipulate user-controlled URL parameters that are not sufficiently validated. This could result in unvalidated redirection to attacker-controlled websites, leading to a low impact on confidentiality and integrity, and no impact on the...

6.1CVSS5.5AI score0.00211EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/02/10 12:00 a.m.14 views

Siemens SCALANCE and RUGGEDCOM Double Free (CVE-2023-7256)

In affected libpcap versions during the setup of a remote packet capture the internal function sockinitaddress calls getaddrinfo and possibly freeaddrinfo, but does not clearly indicate to the caller function whether freeaddrinfo still remains to be called after the function returns. This makes i...

9.8CVSS6.7AI score0.01765EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/02/10 12:00 a.m.21 views

PT-2026-7418

Name of the Vulnerable Software and Affected Versions EverShop versions prior to 2.1.1 Description EverShop is a TypeScript-first eCommerce platform susceptible to a second-order SQL injection. During category update and deletion event handling, the application incorporates values from the url...

9.8CVSS5.8AI score0.0032EPSS
SaveExploits0References12
Veracode
Veracode
added 2026/02/09 8:52 p.m.14 views

Sensitive Information Disclosure

openmage/magento-lts is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper handling of the X-Original-Url header in certain configurations, which allows an attacker to discover the admin URL without prior knowledge of its location...

5.3CVSS5.5AI score0.003EPSS
SaveExploits0References3Affected Software1
Snyk
Snyk
added 2026/02/09 8:35 p.m.9 views

Server-side Request Forgery (SSRF)

Overview craftcms/cms is a content management system. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the saveAsset mutation in GraphQL when alternative IP notations are used in the URL parameter. An attacker can access internal cloud metadata services by...

6.9CVSS5.6AI score0.00373EPSS
SaveExploits1References2
Veracode
Veracode
added 2026/02/09 8:07 p.m.11 views

Cross-site Scripting (XSS)

craftcms/commerce is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper sanitization of the “Address Line 1” field in Inventory Locations, which allows an attacker to store and execute malicious JavaScript in an administrator’s browser via the admin panel...

6.3CVSS5.5AI score0.00209EPSS
SaveExploits1References9Affected Software3
Cvelist
Cvelist
added 2026/02/09 7:41 p.m.41 views

CVE-2026-25494 Craft has a SSRF in GraphQL Asset Mutation via Alternative IP Notation

Craft is a platform for creating digital experiences. In Craft versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through 5.8.21, the saveAsset GraphQL mutation uses filtervar..., FILTERVALIDATEIP to block a specific list of IP addresses. However, alternative IP notations hexadecimal, mixed are not...

6.9CVSS0.00373EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2026/02/09 7:23 p.m.14 views

CVE-2026-2141

A security flaw has been discovered in WuKongOpenSource WukongCRM up to 11.3.3. This affects an unknown part of the file gateway/src/main/java/com/kakarote/gateway/service/impl/PermissionServiceImpl.java of the component URL Handler. Performing a manipulation results in improper authorization...

8.8CVSS5AI score0.00377EPSS
SaveExploits1References1
NVD
NVD
added 2026/02/09 7:15 p.m.18 views

CVE-2026-24680

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, sdlPointerNew frees data on failure, then pointerfree calls sdlPointerFree and frees it again, triggering ASan UAF. This vulnerability is fixed in 3.22.0...

8.7CVSS0.00439EPSS
SaveExploits0References2
Rows per page
Query Builder