Lucene search
+L

5932 matches found

EUVD
EUVD
•added 2026/01/22 4:51 p.m.•19 views

EUVD-2026-4087

Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes News Event news-event.This issue affects News Event: from n/a through = 1.0.1...

5.4AI score0.00536EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/22 4:51 p.m.•15 views

EUVD-2026-4110

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in flexostudio flexo-posts-manager flexo-posts-manager allows Reflected XSS.This issue affects flexo-posts-manager: from n/a through = 1.0001...

5.4AI score0.003EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/22 4:51 p.m.•23 views

EUVD-2026-4116

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tagDiv tagDiv Composer td-composer allows DOM-Based XSS.This issue affects tagDiv Composer: from n/a through = 5.4.2...

5.4AI score0.00258EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/22 4:51 p.m.•18 views

EUVD-2026-4090

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Amuli amuli allows PHP Local File Inclusion.This issue affects Amuli: from n/a through = 2.3.0...

5.5AI score0.00605EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/22 4:16 p.m.•27 views

EUVD-2026-3888

Dell PowerScale OneFS versions prior to 9.13.0.0 contains an improper restriction of excessive authentication attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

8.1CVSS5.6AI score0.00399EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/22 2:35 p.m.•21 views

EUVD-2026-4143

SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails to verify the existing password or a reset token when resetting system administrator accounts. An...

9.3CVSS5.6AI score0.96432EPSS
SaveExploits3References5
EUVD
EUVD
•added 2026/01/22 2:32 p.m.•21 views

EUVD-2026-4144

A vulnerability was detected in Totolink NR1800X 9.1.0u.6279B20210910. Impacted is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Performing a manipulation of the argument ssid results in buffer overflow. The attack may be initiated remotely. The...

9CVSS6.1AI score0.0084EPSS
SaveExploits1References7
EUVD
EUVD
•added 2026/01/22 12:13 p.m.•18 views

EUVD-2026-4158

Authorization Bypass Through User-Controlled Key vulnerability in Solvera Software Services Trade Inc. Teknoera allows Exploitation of Trusted Identifiers.This issue affects Teknoera: through 01102025...

7.5CVSS5.4AI score0.00415EPSS
SaveExploits0References2
Circl
Circl
•added 2026/01/22 10:55 a.m.•20 views

CVE-2025-67683

creationtimestamp| type| source ---|---|--- 2026-01-22 10:55:00+00:00| seen| https://cert.pl/en/posts/2026/01/CVE-2025-67683/ 2026-01-22 15:15:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mczi3mk3cg2t...

6.1CVSS5.8AI score0.00282EPSS
SaveExploits0References2
Circl
Circl
•added 2026/01/22 7:03 a.m.•21 views

CVE-2026-24036

creationtimestamp| type| source ---|---|--- 2026-01-22 07:03:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcymlqaygm2m...

5.3CVSS5.8AI score0.00503EPSS
SaveExploits1References1
GithubExploit
GithubExploit
•added 2026/01/21 10:47 p.m.•231 views

Exploit for Out-of-bounds Write in Ffmpeg

Synthetic Test Case: CVE-2020-12284 CWE: CWE-787 Orig...

10CVSS7.4AI score0.0385EPSS
SaveExploits2
GithubExploit
GithubExploit
•added 2026/01/21 10:18 p.m.•236 views

Exploit for SQL Injection in Agentejo Cockpit

Synthetic Test Case: CVE-2020-35846 CWE: CWE-89 Origi...

9.8CVSS8.7AI score0.93292EPSS
SaveExploits12
GithubExploit
GithubExploit
•added 2026/01/21 10:17 p.m.•228 views

Exploit for Cross-site Scripting in Exponentcms Exponent_Cms

Synthetic Test Case: CVE-2017-8085 CWE: CWE-79 Origin...

6.1CVSS6.5AI score0.01147EPSS
SaveExploits1
Circl
Circl
•added 2026/01/21 4:25 p.m.•17 views

CVE-2025-13927

creationtimestamp| type| source ---|---|--- 2026-01-21 16:25:05+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mcx3ixs35a2l 2026-01-22 12:33:56+00:00| seen| https://t.me/techb0ltGenona/6069 2026-01-22 15:13:16+00:00| seen|...

7.5CVSS7.5AI score0.00831EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/01/21 4:30 a.m.•12 views

CVE-2026-24022

Not used...

5.3AI score
SaveExploits0References1
EUVD
EUVD
•added 2026/01/21 1:05 a.m.•19 views

EUVD-2026-3595

Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS...

8.8CVSS6AI score0.00264EPSS
SaveExploits1References3
EUVD
EUVD
•added 2026/01/20 8:48 p.m.•13 views

EUVD-2026-3330

HackerOne community member Patrick Lang 7yr has reported a reflected XSS vulnerability in the banner-acl.php script of Revive Adserver. An attacker can craft a specific URL that includes an HTML payload in a parameter. If a logged in administrator visits the URL, the HTML is sent to the browser a...

6.1CVSS6.2AI score0.00201EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/20 8:41 p.m.•8 views

EUVD-2026-3323

A malformed HTTP/2 HEADERS frame with oversized, invalid HPACK data can cause Node.js to crash by triggering an unhandled TLSSocket error ECONNRESET. Instead of safely closing the connection, the process crashes, enabling a remote denial of service. This primarily affects applications that do not...

7.5CVSS7.6AI score0.03962EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/20 3:14 p.m.•23 views

EUVD-2026-3371

IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadi...

6.1CVSS5.1AI score0.0021EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/20 3:02 p.m.•21 views

EUVD-2026-3436

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...

5.9CVSS5.5AI score0.00397EPSS
SaveExploits0References2
Rows per page
Query Builder