Lucene search
+L

1147 matches found

EUVD
EUVD
added 2026/01/16 2:0 p.m.11 views

EUVD-2026-2919

Nu Html Checker validator.nu contains a restriction bypass that allows remote attackers to make the server perform arbitrary HTTP/HTTPS requests to internal resources, including localhost services. While the validator implements hostname-based protections to block direct access to localhost and...

6.9CVSS6.7AI score0.00425EPSS
SaveExploits1References3
CVE
CVE
added 2026/01/16 2:0 p.m.52 views

CVE-2025-15104

Nu Html Checker (validator.nu) — SSRF via restriction bypass in vnu (latest commit 23f090a11bab8d0d4e698f1ffc197a4fe226a9cd). The issue allows remote attackers to induce the server to make arbitrary HTTP/HTTPS requests to internal resources, including localhost services. Protective hostname check...

6.9CVSS6.8AI score0.00425EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2026/01/16 2:0 p.m.30 views

CVE-2025-15104 Nu Html Checker (validator.nu) - Restriction bypass vulnerability allowing local SSRF

Nu Html Checker validator.nu contains a restriction bypass that allows remote attackers to make the server perform arbitrary HTTP/HTTPS requests to internal resources, including localhost services. While the validator implements hostname-based protections to block direct access to localhost and...

6.9CVSS0.00425EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/01/16 12:0 a.m.6 views

PT-2026-3253

Name of the Vulnerable Software and Affected Versions Nu Html Checker versions prior to commit 23f090a11bab8d0d4e698f1ffc197a4fe226a9cd Description The Nu Html Checker validator.nu is susceptible to a restriction bypass that enables remote attackers to initiate arbitrary HTTP/HTTPS requests to...

6.9CVSS6AI score0.00425EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2026/01/16 12:0 a.m.6 views

The Nu Html Checker security vulnerability

The Nu Html Checker is an open-source tool developed by The Nu Html Checker vnu that verifies whether HTML documents comply with modern web standards. The Nu Html Checker has a security vulnerability, which stems from a limitation that can be bypassed. This vulnerability could allow remote...

6.9CVSS5.9AI score0.00425EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.6 views

MiracleLinux 7 : ghostscript-9.07-31.el7.1 (AXSA:2019-3605:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3605:01 advisory. ghostscript: .tempfile file permission issues 699657 CVE-2018-15908 ghostscript: shadingparam incomplete type checking 699660 CVE-2018-15909...

7.8CVSS6.7AI score0.03019EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.2 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003035)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003035 advisory. An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in ioctlmappage when mounting and operating a crafted btrfs imag...

7.1CVSS6.3AI score0.02512EPSS
SaveExploits1References14
AstraLinux
AstraLinux
added 2026/01/13 2:1 p.m.5 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: wilc1000 – Avoid buffer overflow in WID string configuration. Fixed the copy overflow warning identified by the Smatch checker. drivers/net/wireless/microchip/wilc1000/wlancfg.c:184 wilcwlanparseresponseframe Error:...

7.8CVSS6AI score0.00158EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 10:21 a.m.13 views

CVE-2008-6549

The passwordchecker function in config/multiconfig.py in MoinMoin 1.6.1 uses the cracklib and python-crack features even though they are not thread-safe, which allows remote attackers to cause a denial of service segmentation fault and crash via unknown vectors...

5CVSS6.8AI score0.01484EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:33 a.m.15 views

CVE-2019-16521

The broken-link-checker plugin through 1.11.8 for WordPress aka Broken Link Checker is susceptible to Reflected XSS due to improper encoding and insertion of an HTTP GET parameter into HTML. The filter function on the page listing all detected broken links can be exploited by providing an XSS...

6.1CVSS6.2AI score0.01395EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2026/01/01 6:11 p.m.190 views

Exploit for Improper Handling of Length Parameter Inconsistency in Mongodb

MongoBleed CVE-2025-14847 – Vulnerability Checker Systemhaus Sc...

8.7CVSS6.7AI score0.83007EPSS
SaveExploits39
RedhatCVE
RedhatCVE
added 2026/01/01 4:26 p.m.13 views

CVE-2025-62084

Cross-Site Request Forgery CSRF vulnerability in Imdad Next Web iNext Woo Pincode Checker inext-woo-pincode-checker allows Cross Site Request Forgery.This issue affects iNext Woo Pincode Checker: from n/a through = 2.3.1...

4.3CVSS5.9AI score0.001EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/31 4:15 p.m.6 views

CVE-2025-62084

Cross-Site Request Forgery CSRF vulnerability in Imdad Next Web iNext Woo Pincode Checker inext-woo-pincode-checker allows Cross Site Request Forgery.This issue affects iNext Woo Pincode Checker: from n/a through = 2.3.1...

4.3CVSS0.001EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/31 3:50 p.m.3 views

CVE-2025-62084 WordPress iNext Woo Pincode Checker plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Imdad Next Web iNext Woo Pincode Checker inext-woo-pincode-checker allows Cross Site Request Forgery.This issue affects iNext Woo Pincode Checker: from n/a through = 2.3.1...

4.3CVSS5.9AI score0.001EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/31 3:50 p.m.11 views

CVE-2025-62084

CVE-2025-62084: CSRF flaw in Imdad Next Web iNext Woo Pincode Checker affecting up to 2.3.1. No technical details are provided in connected documents; monitor for updates on affected versions, impact, and fixes.

4.3CVSS5.9AI score0.001EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/31 3:50 p.m.8 views

EUVD-2025-206025

Cross-Site Request Forgery CSRF vulnerability in Imdad Next Web iNext Woo Pincode Checker allows Cross Site Request Forgery.This issue affects iNext Woo Pincode Checker: from n/a through 2.3.1...

4.3CVSS6.3AI score0.001EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/31 3:50 p.m.31 views

CVE-2025-62084 WordPress iNext Woo Pincode Checker plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Imdad Next Web iNext Woo Pincode Checker inext-woo-pincode-checker allows Cross Site Request Forgery.This issue affects iNext Woo Pincode Checker: from n/a through = 2.3.1...

4.3CVSS0.001EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/31 3:47 p.m.12 views

WordPress iNext Woo Pincode Checker plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Muhammad Nur Ibnu Hubab in WordPress Plugin iNext Woo Pincode Checker versions = 2.3.1...

4.3CVSS6.7AI score0.001EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/31 12:0 a.m.7 views

PT-2025-54375

Cross-Site Request Forgery CSRF vulnerability in Imdad Next Web iNext Woo Pincode Checker allows Cross Site Request Forgery.This issue affects iNext Woo Pincode Checker: from n/a through 2.3.1...

4.3CVSS6.8AI score0.001EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.5 views

WordPress plugin iNext Woo Pincode Checker 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.5AI score0.001EPSS
SaveExploits0References1
Rows per page
Query Builder