Lucene search
+L

8150 matches found

GithubExploit
GithubExploit
added 2025/10/26 10:52 a.m.343 views

Exploit for CVE-2014-6324

AD Exploit Framework 🔴 CHỈ SỬ DỤNG CHO MỤC ĐÍCH HỌC TẬP VÀ...

10CVSS8AI score0.99792EPSS
SaveExploits161
GithubExploit
GithubExploit
added 2025/10/25 6:01 p.m.139 views

cybersec-ids

cybersec-ids Full-stack AI-driven Web App Intrusion Detection...

7.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/10/25 4:29 p.m.16 views

CVE-2025-62714

Karmada Dashboard is a general-purpose, web-based control panel for Karmada which is a multi-cluster management project. Prior to version 0.2.0, there is an authentication bypass vulnerability in the Karmada Dashboard API. The backend API endpoints e.g., /api/v1/secret, /api/v1/service did not...

8.7CVSS6.8AI score0.00599EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/25 12:00 a.m.12 views

Karmada Dashboard 安全漏洞

Karmada Dashboard is a web user interface from karmada-io open source. A security vulnerability exists in versions of Karmada Dashboard prior to 0.2.0 that stems from a back-end API endpoint that does not enforce authentication, which could lead to unauthenticated users accessing sensitive cluste...

8.7CVSS6.3AI score0.00599EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/24 3:41 p.m.10 views

EUVD-2025-35859

Karmada Dashboard is a general-purpose, web-based control panel for Karmada which is a multi-cluster management project. Prior to version 0.2.0, there is an authentication bypass vulnerability in the Karmada Dashboard API. The backend API endpoints e.g., /api/v1/secret, /api/v1/service did not...

8.7CVSS6.3AI score0.00599EPSS
SaveExploits0References7
OSV
OSV
added 2025/10/24 3:41 p.m.8 views

CVE-2025-62714 Karmada Dashboard API Unauthorized Access Vulnerability

Karmada Dashboard is a general-purpose, web-based control panel for Karmada which is a multi-cluster management project. Prior to version 0.2.0, there is an authentication bypass vulnerability in the Karmada Dashboard API. The backend API endpoints e.g., /api/v1/secret, /api/v1/service did not...

8.7CVSS6.8AI score
SaveExploits0References8
CVE
CVE
added 2025/10/24 3:41 p.m.41 views

CVE-2025-62714

Karmada Dashboard had an API authentication bypass before v0.2.0. The backend endpoints (e.g., /api/v1/secret, /api/v1/service) did not enforce authentication, allowing unauthenticated users to access sensitive cluster data (Secrets and Services) directly, even though the web UI required a JWT. A...

8.7CVSS6.4AI score0.00599EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2025/10/24 3:41 p.m.4 views

CVE-2025-62714 Karmada Dashboard API Unauthorized Access Vulnerability

Karmada Dashboard is a general-purpose, web-based control panel for Karmada which is a multi-cluster management project. Prior to version 0.2.0, there is an authentication bypass vulnerability in the Karmada Dashboard API. The backend API endpoints e.g., /api/v1/secret, /api/v1/service did not...

8.7CVSS6.4AI score0.00599EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2025/10/24 3:41 p.m.13 views

CVE-2025-62714 Karmada Dashboard API Unauthorized Access Vulnerability

Karmada Dashboard is a general-purpose, web-based control panel for Karmada which is a multi-cluster management project. Prior to version 0.2.0, there is an authentication bypass vulnerability in the Karmada Dashboard API. The backend API endpoints e.g., /api/v1/secret, /api/v1/service did not...

8.7CVSS0.00599EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2025/10/24 3:27 p.m.12 views

Karmada Dashboard API Unauthorized Access Vulnerability

Impact This is an authentication bypass vulnerability in the Karmada Dashboard API. The backend API endpoints e.g., /api/v1/secret, /api/v1/service did not enforce authentication, allowing unauthenticated users to access sensitive cluster information such as Secrets and Services directly. Althoug...

8.7CVSS6.8AI score0.00599EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2025/10/24 3:27 p.m.9 views

GHSA-5QJG-9MJH-4R92 Karmada Dashboard API Unauthorized Access Vulnerability

Impact This is an authentication bypass vulnerability in the Karmada Dashboard API. The backend API endpoints e.g., /api/v1/secret, /api/v1/service did not enforce authentication, allowing unauthenticated users to access sensitive cluster information such as Secrets and Services directly. Althoug...

8.7CVSS6.7AI score0.00599EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/10/24 12:00 a.m.20 views

PT-2025-43651

Name of the Vulnerable Software and Affected Versions Karmada Dashboard versions prior to 0.2.0 Description The Karmada Dashboard, a web-based control panel for the Karmada multi-cluster management project, contains an authentication bypass. Backend API endpoints, such as /api/v1/secret and...

8.7CVSS7.7AI score0.00599EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/10/23 5:12 p.m.8 views

CVE-2025-11958

An improper input validation in the Security Dashboard ignored-tasks API of Devolutions Server 2025.2.15.0 and earlier allows an authenticated user to cause a denial of service to the Security Dashboard via a crafted request...

5.1CVSS6.4AI score0.00415EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/22 6:30 p.m.11 views

EUVD-2025-35611

An improper input validation in the Security Dashboard ignored-tasks API of Devolutions Server 2025.2.15.0 and earlier allows an authenticated user to cause a denial of service to the Security Dashboard via a crafted request...

4.1CVSS6AI score0.00415EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/22 5:15 p.m.14 views

CVE-2025-11958

An improper input validation in the Security Dashboard ignored-tasks API of Devolutions Server 2025.2.15.0 and earlier allows an authenticated user to cause a denial of service to the Security Dashboard via a crafted request...

5.1CVSS0.00415EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/22 5:15 p.m.10 views

CVE-2025-11958

An improper input validation in the Security Dashboard ignored-tasks API of Devolutions Server 2025.2.15.0 and earlier allows an authenticated user to cause a denial of service to the Security Dashboard via a crafted request...

5.1CVSS5.8AI score0.00415EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/22 5:08 p.m.32 views

CVE-2025-11958

Devolutions Server

5.1CVSS6.1AI score0.00415EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/10/22 5:08 p.m.23 views

CVE-2025-11958

An improper input validation in the Security Dashboard ignored-tasks API of Devolutions Server 2025.2.15.0 and earlier allows an authenticated user to cause a denial of service to the Security Dashboard via a crafted request...

5.1CVSS0.00415EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/22 5:08 p.m.4 views

CVE-2025-11958

An improper input validation in the Security Dashboard ignored-tasks API of Devolutions Server 2025.2.15.0 and earlier allows an authenticated user to cause a denial of service to the Security Dashboard via a crafted request...

5.1CVSS6.1AI score0.00415EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/22 12:00 a.m.15 views

PT-2025-43381

Name of the Vulnerable Software and Affected Versions Devolutions Server versions 2025.2.15.0 and earlier Description An improper input validation exists in the Security Dashboard's ignored-tasks API. An authenticated user can send a crafted request to cause a denial of service to the Security...

5.1CVSS6.3AI score0.00415EPSS
SaveExploits0References8
Rows per page
Query Builder