Lucene search
+L

1109 matches found

Packet Storm
Packet Storm
•added 2025/03/04 12:00 a.m.•308 views

DIAEnergie 1.10 SQL Injection

DIAEnergie version 1.10 proof of concept remote SQL injection exploit. ============================================================================================================================================= | Title : DIAEnergie 1.10 PHP Code Injection Vulnerability | | Author : indoushka | ...

9.8CVSS10AI score0.29425EPSS
SaveExploits5
CNNVD
CNNVD
•added 2025/02/24 12:00 a.m.•15 views

Moodle 安全漏洞

Moodle is a free e-learning software platform open-sourced by Moodle, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle that stems from a filter that is not adequately cleaned, resulting in arbitrary fil...

8.6CVSS8.4AI score0.00443EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/02/22 12:35 a.m.•19 views

CVE-2023-51327

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

6.5CVSS6.7AI score0.00469EPSS
SaveExploits2References4
RedhatCVE
RedhatCVE
•added 2025/02/22 12:33 a.m.•17 views

CVE-2023-51326

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

6.5CVSS6.7AI score0.00469EPSS
SaveExploits2References4
CNNVD
CNNVD
•added 2025/02/21 12:00 a.m.•18 views

WordPress plugin 3D Photo Gallery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

6.4CVSS6.6AI score0.00246EPSS
SaveExploits0References3
NVD
NVD
•added 2025/02/20 4:15 p.m.•22 views

CVE-2023-51327

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

6.5CVSS0.00469EPSS
SaveExploits2References3
NVD
NVD
•added 2025/02/20 4:15 p.m.•17 views

CVE-2023-51326

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

6.5CVSS0.00469EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2025/02/20 12:00 a.m.•25 views

CVE-2023-51327

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

0.00469EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2025/02/20 12:00 a.m.•25 views

CVE-2023-51331

PHPJabbers Cleaning Business Software v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...

0.00514EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/20 12:00 a.m.•4 views

CVE-2023-51331: Improper Control of Generation of Code

PHPJabbers Cleaning Business Software v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...

6.5CVSS6.3AI score0.00514EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/20 12:00 a.m.•7 views

CVE-2023-51327: Authentication Bypass by Spoofing

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

6.5CVSS5.8AI score0.00469EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/20 12:00 a.m.•5 views

CVE-2023-51326: Authentication Bypass by Spoofing

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

6.5CVSS5.8AI score0.00469EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2025/02/20 12:00 a.m.•5 views

PT-2025-7309

Name of the Vulnerable Software and Affected Versions PHPJabbers Cleaning Business Software version 1.0 Description The issue is related to a lack of rate limiting in the 'Forgot Password' feature, allowing attackers to send an excessive amount of email to a legitimate user. This can lead to a...

6.5CVSS0.00469EPSS
SaveExploits2References8
CVE
CVE
•added 2025/02/20 12:00 a.m.•73 views

CVE-2023-51326

The PHPJabbers Cleaning Business Software v1.0 is vulnerable to a Denial of Service (DoS) attack due to a lack of rate limiting in the 'Forgot Password' feature. An attacker can exploit this to send an excessive volume of emails for a legitimate user, potentially exhausting resources or overwhelm...

6.5CVSS6.4AI score0.00469EPSS
SaveExploits2References3Affected Software1
Positive Technologies
Positive Technologies
•added 2025/02/20 12:00 a.m.•2 views

PT-2025-7308

Name of the Vulnerable Software and Affected Versions PHPJabbers Cleaning Business Software version 1.0 Description A lack of rate limiting in the 'Forgot Password' feature allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via...

6.5CVSS0.00469EPSS
SaveExploits2References8
Cvelist
Cvelist
•added 2025/02/20 12:00 a.m.•24 views

CVE-2023-51326

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

0.00469EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2025/02/17 12:00 a.m.•18 views

WordPress plugin Themes Coder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.6CVSS9.1AI score0.01987EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/02/17 12:00 a.m.•13 views

WordPress plugin Wise Forms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.1CVSS8.1AI score0.0038EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/02/11 12:00 a.m.•18 views

WordPress plugin SuperSaaS 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

4.9CVSS7.5AI score0.00426EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/01/27 12:00 a.m.•17 views

The vulnerability of the Azure Database for PostgreSQL Flexible Server’s database management system lies in the lack of measures taken at the control level to clean data. This allows attackers to execute arbitrary code and increase their privileges.

The vulnerability of the Azure Database for PostgreSQL Flexible Server database management system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code and increase their...

9CVSS6AI score0.01192EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder