Lucene search
K

4197 matches found

CNNVD
CNNVD
•added 2025/09/11 12:0 a.m.•1 views

OpenPrinting CUPS 授权问题漏洞

OpenPrinting CUPS is a standards-based open source printing system for LinuxÂŽ and other UnixÂŽ-like operating systems from OpenPrinting, Inc. An authorization issue vulnerability exists in OpenPrinting CUPS versions 2.4.12 and earlier, which stems from a failure to check the password in the...

8CVSS8.3AI score0.00964EPSS
Exploits1References2
OSV
OSV
•added 2025/09/11 12:0 a.m.•6 views

ALSA-2025:15687 Moderate: php:8.2 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: Leak partial content of the heap through heap buffer over-read in mysqlnd CVE-2024-8929 php: Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 php: Configuring ...

9.8CVSS7.1AI score0.02286EPSS
Exploits5References18
Tenable Nessus
Tenable Nessus
•added 2025/09/10 12:0 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2011-0160

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle redirects in conjunction with HTTP Basic Authentication, which might...

5CVSS5.4AI score0.01549EPSS
Exploits0References2
NVD
NVD
•added 2025/09/09 2:15 a.m.•6 views

CVE-2025-42915

Fiori app Manage Payment Blocks does not perform the necessary authorization checks, allowing an attacker with basic user privileges to abuse functionalities that should be restricted to specific user groups.This issue could impact both the confidentiality and integrity of the application without...

5.4CVSS0.0017EPSS
Exploits0References2
Vulnrichment
Vulnrichment
•added 2025/09/09 2:6 a.m.•3 views

CVE-2025-42915 Missing Authorization Check in Fiori app (Manage Payment Blocks)

Fiori app Manage Payment Blocks does not perform the necessary authorization checks, allowing an attacker with basic user privileges to abuse functionalities that should be restricted to specific user groups.This issue could impact both the confidentiality and integrity of the application without...

5.4CVSS6.2AI score0.0017EPSS
Exploits0References2
Cvelist
Cvelist
•added 2025/09/09 2:6 a.m.•20 views

CVE-2025-42915 Missing Authorization Check in Fiori app (Manage Payment Blocks)

Fiori app Manage Payment Blocks does not perform the necessary authorization checks, allowing an attacker with basic user privileges to abuse functionalities that should be restricted to specific user groups.This issue could impact both the confidentiality and integrity of the application without...

5.4CVSS0.0017EPSS
Exploits0References2
Positive Technologies
Positive Technologies
•added 2025/09/09 12:0 a.m.•4 views

PT-2025-36548

Name of the Vulnerable Software and Affected Versions: Fiori app Manage Payment Blocks affected versions not specified Description: The Fiori app Manage Payment Blocks does not perform the necessary authorization checks. This allows an attacker with basic user privileges to abuse functionalities...

5.4CVSS6.1AI score0.0017EPSS
Exploits0References6
Debian
Debian
•added 2025/09/08 4:54 p.m.•4 views

[SECURITY] [DLA 4168-2] openafs regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4168-2 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz September 08, 2025 https://wiki.debian.org/LTS -...

6.7AI score
Exploits0
Fedora
Fedora
•added 2025/09/08 12:55 a.m.•11 views

[SECURITY] Fedora 42 Update: tcpreplay-4.5.2-1.fc42

Tcpreplay is a tool to replay captured network traffic. Currently, tcpreplay supports pcap tcpdump and snoop capture formats. Also included, is tcpprep a tool to pre-process capture files to allow increased performance under certain conditions as well as capinfo which provides basic information...

5.9CVSS5AI score0.00918EPSS
Exploits4
Gitee
Gitee
•added 2025/09/06 12:38 a.m.•236 views

Exploit for CVE-2017-0143

💬 README中文 • Compile/Install/Run • Parameter Description • How to use • Scenario • POC List • Custom Scan • Best Practices Features - Free one id Multi-target web netcat for reverse shell - What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent。re...

9.3CVSS8.4AI score0.99693EPSS
Exploits93
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/09/05 5:10 p.m.•3 views

Malicious code in kssd-vol1-basic (npm)

The package kssd-vol1-basic was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
•added 2025/09/05 5:10 p.m.•2 views

MAL-2025-44908 Malicious code in kssd-vol1-basic (npm)

The package kssd-vol1-basic was found to contain malicious code...

7AI score
Exploits0
CNVD
CNVD
•added 2025/09/05 12:0 a.m.•4 views

Tenda AC8 formWifiBasicSet function buffer overflow vulnerability

Tenda AC8 is a dual gigabit wireless router from Tenda designed for fiber optic homes up to 1000 megabytes, supporting IPv6 protocol with intelligent network management. A buffer overflow vulnerability exists in the Tenda AC8, which is caused by the formWifiBasicSet function failing to correctly...

7.5CVSS7.4AI score0.0037EPSS
Exploits1References1
GithubExploit
GithubExploit
•added 2025/09/04 1:16 p.m.•111 views

DXPLOIT1_ScannerTools

It is an offensive tool for system scanning and pentesting. The...

7AI score
Exploits0
Microsoft CVE
Microsoft CVE
•added 2025/09/04 11:9 a.m.•7 views

RabbitMQ Node can log Basic Auth header from an HTTP request

...

6.7CVSS7AI score0.00194EPSS
Exploits1
NVD
NVD
•added 2025/09/03 4:15 p.m.•6 views

CVE-2025-55852

Tenda AC8 v16.03.34.06 is vulnerable to Buffer Overflow in the formWifiBasicSet function via the parameter security or security5g...

7.5CVSS0.0037EPSS
Exploits1References1
RedhatCVE
RedhatCVE
•added 2025/09/03 5:34 a.m.•7 views

CVE-2025-54857

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in SkyBridge BASIC MB-A130 Ver.1.5.8 and earlier. If exploited, a remote unauthenticated attacker may execute arbitrary OS commands with root privileges...

9.8CVSS8AI score0.03214EPSS
Exploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/03 12:0 a.m.•5 views

PT-2025-35775

Name of the Vulnerable Software and Affected Versions: Tenda AC8 version 16.03.34.06 Description: The Tenda AC8 version 16.03.34.06 is susceptible to a buffer overflow issue in the formWifiBasicSet function. The vulnerability is triggered through the security or security 5g parameter...

7.5CVSS6.9AI score0.0037EPSS
Exploits1References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/09/01 7:21 a.m.•4 views

Seiko Solutions SkyBridge BASIC MB-A130 vulnerable to OS command injection

Overview SkyBridge BASIC MB-A130 provided by Seiko Solutions Inc. contains the following vulnerability. OS command injection CWE-78 - CVE-2025-54857 Tsutomu Aramaki of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

9.8CVSS8AI score0.03214EPSS
Exploits0References4
NVD
NVD
•added 2025/09/01 6:15 a.m.•5 views

CVE-2025-54857

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in SkyBridge BASIC MB-A130 Ver.1.5.8 and earlier. If exploited, a remote unauthenticated attacker may execute arbitrary OS commands with root privileges...

9.8CVSS0.03214EPSS
Exploits0References2
Rows per page
Query Builder