Lucene search
+L

3016 matches found

CVE
CVE
added 2025/09/12 11:19 a.m.27 views

CVE-2025-8699

CVE-2025-8699 affects KioSoft’s Stored Value Unattended Payment Solutions. The flaw centers on insecure MiFare Classic NFC cards storing account balances that can be read and written, enabling an attacker to identify value fields and a checksum (calculated by XOR-ing cash with an unknown field) a...

9.1CVSS6.3AI score0.0074EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/12 11:19 a.m.20 views

CVE-2025-8699

Some "Stored Value" Unattended Payment Solutions of KioSoft use vulnerable NFC cards. Attackers could potentially use this vulnerability to change the balance on the cards and generate money. The account balance is stored on an insecure MiFare Classic NFC card and can be read and written back. By...

0.0074EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/12 12:00 a.m.9 views

KioSoft Stored Value Unattended Payment Solutions 安全漏洞

KioSoft Stored Value Unattended Payment Solutions is a self-service payment solution from KioSoft USA. A security vulnerability exists in KioSoft Stored Value Unattended Payment Solutions that stems from the use of an insecure MiFare Classic NFC card to store account balances, which could allow a...

9.1CVSS6.5AI score0.0074EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2015-8010

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject...

6.1CVSS6.3AI score0.01486EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
added 2025/09/09 7:00 a.m.18 views

Description of the security update for SharePoint Server 2019 Language Pack: September 9, 2025 (KB5002774)

None None...

7.1CVSS7AI score0.00626EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2025/09/08 9:03 p.m.253 views

Exploit for Deserialization of Untrusted Data in Apache Activemq

Project-Vuln-Detection-N-Mitigation101 Apache ActiveMQ D...

10CVSS9.1AI score0.99723EPSS
SaveExploits33
Tenable Nessus
Tenable Nessus
added 2025/09/02 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2020-12648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A cross-site scripting XSS vulnerability in TinyMCE 5.2.1 and earlier allows remote attackers to inject arbitrary web script when configured in classic editing...

6.1CVSS6.1AI score0.01811EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2021-34147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 does not properly handle the reception of a malformed LMP timing...

6.5CVSS6.4AI score0.00581EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/29 3:53 p.m.61 views

CVE-2025-55750 Gitpod Classic Affected by Bitbucket OAuth Token Exposure via Redirect Fragment

Gitpod is a developer platform for cloud development environments. In versions before main-gha.33628 for both Gitpod Classic and Gitpod Classic Enterprise, OAuth integration with Bitbucket in certain conditions allowed a crafted link to expose a valid Bitbucket access token via the URL fragment...

6.5CVSS0.00329EPSS
SaveExploits0References3
OSV
OSV
added 2025/08/29 3:53 p.m.18 views

CVE-2025-55750 Gitpod Classic Affected by Bitbucket OAuth Token Exposure via Redirect Fragment

Gitpod is a developer platform for cloud development environments. In versions before main-gha.33628 for both Gitpod Classic and Gitpod Classic Enterprise, OAuth integration with Bitbucket in certain conditions allowed a crafted link to expose a valid Bitbucket access token via the URL fragment...

6.5CVSS6.5AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/08/29 12:00 a.m.21 views

PT-2025-35245

Name of the Vulnerable Software and Affected Versions: Gitpod versions prior to main-gha.33628 Description: Gitpod, a developer platform for cloud development environments, experienced an issue where OAuth integration with Bitbucket, under specific conditions, could expose a valid Bitbucket acces...

6.5CVSS6.2AI score0.00329EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2021-34148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMPmaxslot wit...

6.5CVSS6.4AI score0.00581EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2021-34146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Bluetooth Classic implementation in the Cypress CYW920735Q60EVB does not properly handle the reception of continuous unsolicited LMP responses, allowing...

6.5CVSS6.4AI score0.00581EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/26 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2024-38807

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Applications that use spring-boot-loader or spring-boot-loader-classic and contain custom code that performs signature verification of nested jar files may be...

6.3CVSS7.2AI score0.00123EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/08/15 9:29 p.m.22 views

CVE-2011-10016

Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The vulnerability is triggered when the application attempts to process a file name within the archive that exceeds the expected buffer size. Exploitation...

9.3CVSS8.3AI score0.00427EPSS
SaveExploits1References1
NVD
NVD
added 2025/08/13 9:15 p.m.16 views

CVE-2011-10016

Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The vulnerability is triggered when the application attempts to process a file name within the archive that exceeds the expected buffer size. Exploitation...

9.3CVSS0.00427EPSS
SaveExploits1References5
CVE
CVE
added 2025/08/13 8:52 p.m.33 views

CVE-2011-10016

CVE-2011-10016 affects Real Networks Netzip Classic 7.5.1.86. A stack-based buffer overflow occurs while parsing a specially crafted ZIP archive, triggered by a file name exceeding the expected buffer size. Exploitation allows arbitrary code execution under the victim user's context when the ZIP ...

9.3CVSS8.2AI score0.00427EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/08/13 8:52 p.m.9 views

CVE-2011-10016 Real Networks Netzip Classic 7.5.1.86 File Parsing Buffer Overflow

Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The vulnerability is triggered when the application attempts to process a file name within the archive that exceeds the expected buffer size. Exploitation...

9.3CVSS8.2AI score0.00427EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/08/13 8:52 p.m.18 views

CVE-2011-10016 Real Networks Netzip Classic 7.5.1.86 File Parsing Buffer Overflow

Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The vulnerability is triggered when the application attempts to process a file name within the archive that exceeds the expected buffer size. Exploitation...

9.3CVSS0.00427EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/08/13 12:00 a.m.12 views

PT-2025-33085 · Realnetworks · Netzip Classic

Name of the Vulnerable Software and Affected Versions: Real Networks Netzip Classic version 7.5.1.86 Description: Real Networks Netzip Classic version 7.5.1.86 is susceptible to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The issue occurs when the application...

9.3CVSS7.4AI score0.00427EPSS
SaveExploits1References7
Rows per page
Query Builder