Lucene search
+L

59597 matches found

HackRead
HackRead
added 2026/06/03 9:27 p.m.26 views

How to Recover Data from iCloud Backup Without Resetting Your iPhone

Restore data from an iCloud backup without the necessity of resetting your iPhone. Discover proven methods to get back your photos, messages, contacts, and many more things in a very easy way...

5.8AI score
SaveExploits0
OSV
OSV
added 2026/06/03 4:10 p.m.20 views

DRUPAL-CONTRIB-2026-039

This module configures default editorial workflows for LocalGov Drupal content types. It provides a Drupal content moderation workflow, a content approvals dashboard, content scheduling and content preview. The module doesn't sufficiently restrict access to a view of Service Contacts at which...

9.8CVSS5.8AI score0.02126EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/03 10:01 a.m.25 views

CVE-2026-0075

In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6AI score0.00101EPSS
SaveExploits1References1
Drupal
Drupal
added 2026/06/03 12:00 a.m.25 views

LocalGov Workflows - Moderately critical - Information disclosure - SA-CONTRIB-2026-039

This module configures default editorial workflows for LocalGov Drupal content types. It provides a Drupal content moderation workflow, a content approvals dashboard, content scheduling and content preview. The module doesn't sufficiently restrict access to a view of Service Contacts at which...

9.8CVSS5.8AI score0.02126EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/03 12:00 a.m.41 views

PT-2026-46112

Name of the Vulnerable Software and Affected Versions LocalGov Workflows versions 0.0.0 through 1.6.0 Description Missing authorization allows forceful browsing within the module, which configures default editorial workflows for content types, including content moderation, approvals dashboards,...

6.1AI score0.02126EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/03 12:00 a.m.19 views

PT-2026-46079

This module configures default editorial workflows for LocalGov Drupal content types. It provides a Drupal content moderation workflow, a content approvals dashboard, content scheduling and content preview. The module doesn't sufficiently restrict access to a view of Service Contacts at which...

5.8AI score
SaveExploits0References2
EUVD
EUVD
added 2026/06/02 12:31 a.m.30 views

EUVD-2026-33791

In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6AI score0.00101EPSS
SaveExploits1References2
NVD
NVD
added 2026/06/01 10:16 p.m.33 views

CVE-2026-0075

In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00101EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/06/01 9:14 p.m.56 views

CVE-2026-0075

In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00101EPSS
SaveExploits1References1
attackerkb
attackerkb
added 2026/06/01 9:14 p.m.59 views

CVE-2026-0075

In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6AI score0.00101EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/06/01 9:14 p.m.17 views

CVE-2026-0075

In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6AI score0.00101EPSS
SaveExploits1References1
CVE
CVE
added 2026/06/01 9:14 p.m.91 views

CVE-2026-0075

The CVE-2026-0075 entry describes a SQL injection that could permit access to the contacts database, enabling local escalation of privilege with no additional privileges required and no user interaction needed. Connected documents (including RH/CVE, EUVD, NVD, CNNVD, and others) reiterate the sam...

7.8CVSS6AI score0.00101EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2026/06/01 12:00 a.m.19 views

ASB-A-465133716

In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6AI score0.00101EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/06/01 12:00 a.m.47 views

PT-2026-45585

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description An issue exists in multiple functions where a SQL injection allows unauthorized access to the contacts database. This can lead to local escalation of privilege without requiring additional...

7.8CVSS7.4AI score0.00101EPSS
SaveExploits1References5
NVD
NVD
added 2026/05/27 9:16 a.m.28 views

CVE-2025-13167

Improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in contact functionality in Synology Contacts before 1.0.10-20659 allows remote authenticated users to read or write specific files containing non-sensitive information via unspecified vectors...

5.4CVSS0.00254EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/27 8:34 a.m.48 views

CVE-2025-13167

Improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in contact functionality in Synology Contacts before 1.0.10-20659 allows remote authenticated users to read or write specific files containing non-sensitive information via unspecified vectors...

5.4CVSS0.00254EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/27 8:34 a.m.32 views

CVE-2025-13167

Technical details (affected versions, root cause, and fixes) are not publicly available in the provided documents. Monitor for updates from Synology advisory and CVE records.

5.4CVSS5.8AI score0.00254EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/05/27 8:34 a.m.25 views

EUVD-2025-209954

Improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in contact functionality in Synology Contacts before 1.0.10-20659 allows remote authenticated users to read or write specific files containing non-sensitive information via unspecified vectors...

5.4CVSS5.8AI score0.00254EPSS
SaveExploits0References1
attackerkb
attackerkb
added 2026/05/27 8:34 a.m.21 views

CVE-2025-13167

Improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in contact functionality in Synology Contacts before 1.0.10-20659 allows remote authenticated users to read or write specific files containing non-sensitive information via unspecified vectors...

5.4CVSS5.8AI score0.00254EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/27 8:34 a.m.16 views

CVE-2025-13167

Improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in contact functionality in Synology Contacts before 1.0.10-20659 allows remote authenticated users to read or write specific files containing non-sensitive information via unspecified vectors...

5.4CVSS5.8AI score0.00254EPSS
SaveExploits0References1
Rows per page
Query Builder