Lucene search
K

30 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2017-4755

Malware in sbrugna...

4.7CVSS4.7AI score0.00025EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2021-21878

Malware in sbrugna...

5.3CVSS5.6AI score0.02393EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2006-4667

Malware in sbrugna...

5CVSS6.1AI score0.00704EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-12939

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.00112EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/01/25 12:0 a.m.1 views

PT-2025-2253 · WordPress · Linear

Name of the Vulnerable Software and Affected Versions: Linear plugin for WordPress versions up to, and including, 2.8.1 Description: The issue is due to missing or incorrect nonce validation on the linear-debug feature, making it possible for unauthenticated attackers to reset the plugin's cache...

4.3CVSS6.9AI score0.00116EPSS
Exploits0References8
OSV
OSV
added 2025/01/14 7:15 a.m.1 views

CVE-2024-12008

The W3 Total Cache plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.8.1 through the publicly exposed debug log file. This makes it possible for unauthenticated attackers to view potentially sensitive information in the exposed log file. For exampl...

7.5CVSS7.2AI score
Exploits0References3
OSV
OSV
added 2024/08/15 7:15 p.m.2 views

CVE-2024-27728

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the text parameter of the babel debug feature...

6.1CVSS6.2AI score
Exploits0References2
NVD
NVD
added 2024/08/15 7:15 p.m.15 views

CVE-2024-27728

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the text parameter of the babel debug feature...

6.1CVSS0.00233EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/08/15 12:0 a.m.14 views

CVE-2024-27728

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the text parameter of the babel debug feature...

0.00233EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/08/15 12:0 a.m.11 views

CVE-2024-27728

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the text parameter of the babel debug feature...

6.1AI score0.00233EPSS
Exploits1References2
CVE
CVE
added 2024/08/15 12:0 a.m.46 views

CVE-2024-27728

CVE-2024-27728 is a Cross Site Scripting vulnerability affecting Friendica version 2023.12. The issue allows a remote attacker to obtain sensitive information via the text parameter of the babel debug feature. Several sources (NVD, Red Hat, OSV, CVE list entries, and PT Security) corroborate this...

6.1CVSS6.1AI score0.00233EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/08/15 12:0 a.m.1 views

PT-2024-22011 · Friendica · Friendica

Name of the Vulnerable Software and Affected Versions: Friendica version 2023.12 Description: The issue allows a remote attacker to obtain sensitive information via the text parameter of the babel debug feature. This is a Cross Site Scripting issue. Recommendations: For Friendica version 2023.12,...

6.1CVSS6.5AI score0.00233EPSS
Exploits1References7
0day.today
0day.today
added 2023/07/19 12:0 a.m.241 views

PimpMyLog v1.7.14 - Improper access control Exploit

Exploit Title: PimpMyLog v1.7.14 - Improper access control Exploit Author: thoughtfault Vendor Homepage: https://www.pimpmylog.com/ Software Link: https://github.com/potsky/PimpMyLog Version: 1.5.2-1.7.14 Tested on: Ubuntu 22.04 CVE : N/A Description: PimpMyLog suffers from improper access contro...

7.1AI score
Exploits0
OSV
OSV
added 2023/06/08 9:15 p.m.0 views

CVE-2023-0954

A debug feature in Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ cameras allows a user to compromise credentials after a long period of sustained attack...

9.8CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2023/06/08 9:15 p.m.8 views

CVE-2023-0954

A debug feature in Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ cameras allows a user to compromise credentials after a long period of sustained attack...

9.8CVSS9.1AI score0.00112EPSS
Exploits0References2
Prion
Prion
added 2023/06/08 9:15 p.m.13 views

Design/Logic Flaw

A debug feature in Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ cameras allows a user to compromise credentials after a long period of sustained attack...

7.5CVSS9.3AI score0.00112EPSS
Exploits0References2Affected Software2
Cvelist
Cvelist
added 2023/06/08 8:5 p.m.17 views

CVE-2023-0954 Debug feature in Sensormatic Electronics Illustra Dome and PTZ cameras

A debug feature in Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ cameras allows a user to compromise credentials after a long period of sustained attack...

8.3CVSS9.5AI score0.00112EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/06/08 12:0 a.m.2 views

PT-2023-16639 · Sensormatic Electronics · Sensormatic Electronics Illustra Pro Gen 4 Dome/Ptz Cameras

Name of the Vulnerable Software and Affected Versions: Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ cameras affected versions not specified Description: A debug feature in the cameras allows a user to compromise credentials after a long period of sustained attack. Recommendations: At t...

9.8CVSS9.2AI score0.00112EPSS
Exploits0References3
Talos Blog
Talos Blog
added 2022/10/27 3:4 p.m.40 views

Vulnerability Spotlight: Vulnerabilities in InHand router could give attackers access to console, delete files

Francesco Benvenuto of Cisco Talos discovered these vulnerabilities. Cisco Talos recently discovered several vulnerabilities in InHand Networks InRouter302 that could allow an attacker to access the routers console and make changes to the routers settings, including security protocols. The InRout...

0.9AI score0.0154EPSS
Exploits4
CVE
CVE
added 2021/10/27 12:55 a.m.46 views

CVE-2021-35235

The CVE concerns SolarWinds Kiwi Syslog Server (versions

5.3CVSS5.2AI score0.02393EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder