Lucene search
+L

50 matches found

GithubExploit
GithubExploit
•added 2026/09/01 11:20 p.m.•28 views

cpg-nuclei-compiler

CPG → Nuclei Closed Loop Open-source Code Property Graph C...

6.9CVSS5.9AI score0.02274EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•23 views

PT-2026-81208

U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in read slotted partition that fails to validate image size against partition bounds. Attackers with physical access can supply crafted boot media with oversized headers to write past the load buffer into bootloader memory on...

4.8CVSS6.3AI score0.00177EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•24 views

PT-2026-81210

U-Boot before 2026.10-rc5 contains a buffer overflow in nfs readlink reply function in net/nfs-common.c when processing NFS server responses. A malicious NFS server can send crafted READLINK replies with negative or oversized symlink length values to corrupt memory and crash the bootloader...

8.8CVSS6.3AI score0.00344EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•35 views

PT-2026-81199

OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211 michael mic failure function within sys/net80211/ieee80211 crypto tkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated b...

6CVSS5.7AI score0.00605EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•42 views

PT-2026-81206

Name of the Vulnerable Software and Affected Versions U-Boot versions prior to 2026.10-rc5 Description An out-of-bounds write exists in the RLE8 bitmap decoder within the video subsystem. The video display rle8 bitmap function in drivers/video/video bmp.c decodes run-length encoded streams direct...

6CVSS6.4AI score0.00221EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•22 views

PT-2026-81213

My two cents is that this democratises AI-availability and Privacy. Doom on hardware Y is an existence proof and dies there! For fulfilling your curiosity running a glm-5.1 UD-IQ1 M on one Mac studio M3 ultra plus a iogpu sysctl made us at byteray CVE-2026-55706 a 27-year old bug on OpenBSD just ...

8.4CVSS6.2AI score0.00605EPSS
SaveExploits3References1
OSV
OSV
•added 2026/07/29 1:51 p.m.•14 views

MINI-V838-P287-8CPG

Bulletin has no description...

7.5CVSS6.4AI score0.00475EPSS
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2006-0734

Malware in sbrugna...

7.5CVSS6.4AI score0.02142EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2005-0915

Malware in sbrugna...

4.3CVSS6.4AI score0.00938EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2006-0733

Malware in sbrugna...

4.3CVSS6.4AI score0.01671EPSS
SaveExploits0References10
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:13 p.m.•8 views

Malicious code in cpg-nordic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df880f7daa5cac1a2439895b248275f561a037953486a0a89fd2bee0f12e4ce0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 8:13 p.m.•12 views

MAL-2022-2222 Malicious code in cpg-nordic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df880f7daa5cac1a2439895b248275f561a037953486a0a89fd2bee0f12e4ce0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
CVE
CVE
•added 2019/05/07 5:41 p.m.•64 views

CVE-2018-14478

CVE-2018-14478 affects Coppermine Photo Gallery (CPG) 1.5.46. The vulnerability is a reflected cross-site scripting (XSS) in ecard.php, exploitable via parameters sender_name, recipient_email, greetings, or recipient_name. Attack patterns demonstrated in public advisories show injected scripts in...

6.1CVSS5.9AI score0.00992EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
•added 2015/08/20 8:00 p.m.•43 views

CVE-2015-6528

Multiple cross-site scripting XSS vulnerabilities in installclassic.php in Coppermine Photo Gallery CPG 1.5.36 allow remote attackers to inject arbitrary web script or HTML via the 1 adminusername, 2 adminpassword, 3 adminemail, 4 dbserver, 5 dbname, 6 dbuser, 7 dbpass, 8 tableprefix, or 9 impath...

5.8AI score0.01477EPSS
SaveExploits1References1
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•23 views

CPG Dragonfly 9.0.2 .0 - Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/12930/info CPG Dragonfly is prone to multiple cross-site scripting vulnerabilities in various modules. An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user...

7.1AI score
SaveExploits0
CVE
CVE
•added 2011/09/23 11:00 p.m.•59 views

CVE-2011-3722

CVE-2011-3722 affects Coppermine Photo Gallery (CPG) 1.5.12. The issue allows remote attackers to disclose sensitive information by directly requesting certain PHP files, resulting in an error message that reveals the installation path (illustrated by include/inspekt.php and related files). The e...

5CVSS6.3AI score0.01335EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2011/06/14 5:00 p.m.•58 views

CVE-2010-4667

CVE-2010-4667 affects Coppermine Photo Gallery (CPG) prior to version 1.4.27. The vulnerability is a Cross-site Scripting (XSS) issue that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The official description notes no specifics on vectors, and the connec...

4.3CVSS5.8AI score0.01053EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2009/09/09 5:00 p.m.•53 views

CVE-2008-7186

Coppermine Photo Gallery CPG 1.4.14 does not restrict access to update.php, which allows remote attackers to obtain sensitive information such as the database table prefix via a direct request. NOTE: this might be leveraged for attacks against CVE-2008-0504...

5.9AI score0.01339EPSS
SaveExploits1References4
CVE
CVE
•added 2009/09/09 5:00 p.m.•72 views

CVE-2008-7186

Coppermine Photo Gallery (CPG) 1.4.14 exposes update.php to direct requests, allowing remote attackers to obtain sensitive information such as the database table prefix. This is a local information disclosure issue stemming from improper access restriction, and it may be leveraged in connection w...

5CVSS6.1AI score0.01339EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2009/09/09 5:00 p.m.•64 views

CVE-2008-7187

The CVE-2008-7187 vulnerability affects Coppermine Photo Gallery (CPG) 1.4.14. A remote attacker can disclose sensitive information by issuing a direct request to include/slideshow.inc.php, which results in an error message that leaks the installation path. The documentation does not provide reme...

5CVSS6.3AI score0.01339EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder