Lucene search
+L

4053 matches found

Cvelist
Cvelist
•added 2025/10/18 4:42 a.m.•20 views

CVE-2025-62667 Stored XSS through article extracts in GrowthExperiments

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Stored XSS.This issue affects Mediawiki - GrowthExperiments Extension: from master before 1.39...

6.9CVSS0.00449EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/18 4:42 a.m.•26 views

CVE-2025-62667

CVE-2025-62667 is a stored XSS vulnerability in the MediaWiki GrowthExperiments Extension. The issue arises from improper neutralization of user-supplied input during web page generation, allowing injected scripts/HTML via the extension’s handling of article extracts. Affected component: GrowthEx...

6.9CVSS5.8AI score0.00449EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/17 3:32 p.m.•28 views

CVE-2025-11905 yanyutao0402 ChanCMS gather.js getArticle code injection

A vulnerability was found in yanyutao0402 ChanCMS up to 3.3.2. This vulnerability affects the function getArticle of the file app\modules\cms\controller\gather.js. The manipulation results in code injection. The attack may be launched remotely. The exploit has been made public and could be used...

6.5CVSS0.00823EPSS
SaveExploits1References5
OSV
OSV
•added 2025/10/17 2:15 p.m.•11 views

CVE-2025-11903

A flaw has been found in yanyutao0402 ChanCMS up to 3.3.2. Affected by this issue is the function update of the file /cms/article/update. Executing a manipulation of the argument cid can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used. Th...

7.2CVSS6.3AI score0.00633EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/10/17 2:02 p.m.•26 views

CVE-2025-11903 yanyutao0402 ChanCMS update sql injection

A flaw has been found in yanyutao0402 ChanCMS up to 3.3.2. Affected by this issue is the function update of the file /cms/article/update. Executing a manipulation of the argument cid can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used. Th...

6.5CVSS0.00633EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2025/10/17 2:02 p.m.•9 views

CVE-2025-11903

A flaw has been found in yanyutao0402 ChanCMS up to 3.3.2. Affected by this issue is the function update of the file /cms/article/update. Executing a manipulation of the argument cid can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used. Th...

7.2CVSS6.3AI score0.00633EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
•added 2025/10/17 2:02 p.m.•15 views

EUVD-2025-34879

A flaw has been found in yanyutao0402 ChanCMS up to 3.3.2. Affected by this issue is the function update of the file /cms/article/update. Executing manipulation of the argument cid can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used. The...

6.5CVSS6.3AI score0.00633EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/10/17 12:00 a.m.•15 views

ChanCMS SQL注入漏洞

ChanCMS is a content management system. A SQL injection vulnerability exists in ChanCMS 3.3.2 and earlier versions, which originates from the lack of validation of the parameter cid in the file /cms/article/update for externally entered SQL statements. An attacker can exploit this vulnerability t...

7.2CVSS6.8AI score0.00633EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/17 12:00 a.m.•1 views

CVE-2025-11903: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in yanyutao0402 ChanCMS up to 3.3.2. Affected by this issue is the function update of the file /cms/article/update. Executing a manipulation of the argument cid can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used. Th...

7.2CVSS6.3AI score0.00633EPSS
SaveExploits1References1
Patchstack
Patchstack
•added 2025/10/16 11:11 a.m.•23 views

WordPress UPC/EAN/GTIN Code Generator plugin <= 2.0.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin UPC/EAN/GTIN Code Generator versions = 2.0.2...

4.3CVSS5.8AI score0.00149EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
•added 2025/10/15 12:00 a.m.•16 views

Microsoft Windows Multiple Vulnerabilities (KB5066836)

This host is missing an important security update according to Microsoft KB5066836 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

9.8CVSS7.3AI score0.9998EPSS
SaveExploits31References3
Microsoft Security Update
Microsoft Security Update
•added 2025/10/14 5:00 p.m.•80 views

2025-10 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5066836)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

6.7AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2025/10/14 5:00 p.m.•27 views

2025-10 Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5066791)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

7AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2008-4881

Malware in sbrugna...

7.5CVSS6.4AI score0.00999EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2007-3281

Malware in sbrugna...

4.3CVSS6.4AI score0.01573EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2019-18437

Malware in sbrugna...

6.5CVSS6.7AI score0.00556EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2009-2393

Malware in sbrugna...

5CVSS6.4AI score0.02922EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2010-2266

Malware in sbrugna...

7.5CVSS6.4AI score0.00973EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2017-16286

Malware in sbrugna...

5.4CVSS5.6AI score0.0052EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2008-6136

Malware in sbrugna...

7.5CVSS6.4AI score0.00967EPSS
SaveExploits2References5
Rows per page
Query Builder