Lucene search
K

48 matches found

EUVD
EUVD
added 2025/10/07 9:30 a.m.2 views

EUVD-2025-32704

A vulnerability was detected in jakowenko double-take up to 1.13.1. The impacted element is the function app.use of the file api/src/app.js of the component API. The manipulation of the argument X-Ingress-Path results in cross site scripting. The attack can be executed remotely. Upgrading to...

5.3CVSS5.5AI score0.00033EPSS
Exploits0References6
OSV
OSV
added 2025/10/07 9:15 a.m.2 views

CVE-2025-11360

A vulnerability was detected in jakowenko double-take up to 1.13.1. The impacted element is the function app.use of the file api/src/app.js of the component API. The manipulation of the argument X-Ingress-Path results in cross site scripting. The attack can be executed remotely. Upgrading to...

5.3CVSS5.9AI score
Exploits0References5
NVD
NVD
added 2025/10/07 9:15 a.m.2 views

CVE-2025-11360

A vulnerability was detected in jakowenko double-take up to 1.13.1. The impacted element is the function app.use of the file api/src/app.js of the component API. The manipulation of the argument X-Ingress-Path results in cross site scripting. The attack can be executed remotely. Upgrading to...

5.3CVSS0.00033EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/10/07 9:2 a.m.7 views

CVE-2025-11360 jakowenko double-take API app.js app.use cross site scripting

A vulnerability was detected in jakowenko double-take up to 1.13.1. The impacted element is the function app.use of the file api/src/app.js of the component API. The manipulation of the argument X-Ingress-Path results in cross site scripting. The attack can be executed remotely. Upgrading to...

5.3CVSS0.00033EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/10/07 9:2 a.m.3 views

CVE-2025-11360 jakowenko double-take API app.js app.use cross site scripting

A vulnerability was detected in jakowenko double-take up to 1.13.1. The impacted element is the function app.use of the file api/src/app.js of the component API. The manipulation of the argument X-Ingress-Path results in cross site scripting. The attack can be executed remotely. Upgrading to...

5.3CVSS5.7AI score0.00033EPSS
Exploits0References5
CVE
CVE
added 2025/10/07 9:2 a.m.6 views

CVE-2025-11360

CVE-2025-11360 affects jakowenko double-take up to 1.13.1, specifically the API component (api/src/app.js). The vulnerability arises from manipulating the X-Ingress-Path in app.use, enabling cross-site scripting that can be exploited remotely. A fix is available in version 1.13.2; the patch is id...

5.3CVSS4.2AI score0.00033EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2008-0986

Malware in sbrugna...

5CVSS6.4AI score0.02173EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2008-0980

Malware in sbrugna...

7.5CVSS6.4AI score0.02008EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2008-0984

Malware in sbrugna...

5CVSS6.4AI score0.01176EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2008-0981

Malware in sbrugna...

5CVSS6.4AI score0.02173EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2008-0982

Malware in sbrugna...

5CVSS6.4AI score0.01176EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2008-0983

Malware in sbrugna...

5CVSS6.4AI score0.01816EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2008-0985

Malware in sbrugna...

5CVSS6.4AI score0.00551EPSS
Exploits0References8
CNNVD
CNNVD
added 2025/10/07 12:0 a.m.1 views

Double Take 代码注入漏洞

Double Take is a unified UI and API from David Jakowenko's personal developer with functionality to process and train images for facial recognition. A code injection vulnerability exists in Double Take 1.13.1 and earlier versions, which stems from improper manipulation of the X-Ingress-Path...

5.3CVSS4.8AI score0.00033EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/10/07 12:0 a.m.2 views

PT-2025-40975

Name of the Vulnerable Software and Affected Versions jakowenko double-take versions up to 1.13.1 Description A flaw exists in the API component of jakowenko double-take. The issue is related to the app.use function within the api/src/app.js file. Manipulation of the X-Ingress-Path argument can...

5.3CVSS4AI score0.00033EPSS
Exploits0References9
GithubExploit
GithubExploit
added 2024/09/21 4:53 p.m.326 views

Exploit for NULL Pointer Dereference in Sierrawireless Aleos

CVE-2023-40459 CVE-2023-40459 Unauthenticated DoS PoC Exploit...

7.5CVSS7.8AI score0.013EPSS
Exploits2
Packet Storm
Packet Storm
added 2012/05/20 12:0 a.m.16 views

Double Take Design SQL Injection

Exploit Title : doubletakedesign Cms Sql Injection Vulnerabilities Author : IrIsT Security Team - Security7 Security Team Discovered By : Am!r Home : http://IrIsT.Ir - http://Security7.Ir Software Link : http://www.doubletakedesign.com/ Security Risk : High Version : All Version Tested on :...

0.1AI score
Exploits0
securityvulns
securityvulns
added 2008/06/05 12:0 a.m.33 views

[security bulletin] HPSBST02312 SSRT071428 rev.1 - HP StorageWorks Storage Mirroring Software, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01362558 Version: 1 HPSBST02312 SSRT071428 rev.1 - HP StorageWorks Storage Mirroring Software, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted...

10CVSS0.5AI score0.80524EPSS
Exploits9
Prion
Prion
added 2008/02/25 11:44 p.m.13 views

Double free

Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service daemon termination via 1 a large vector value, which raises a "vector too long" exception; or 2 a certain packet that raises an...

5CVSS7.3AI score0.02173EPSS
Exploits0References7Affected Software2
NVD
NVD
added 2008/02/25 11:44 p.m.7 views

CVE-2008-0975

Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service CPU consumption via a -1 value in the field that specifies the size of the vector value...

5CVSS6.6AI score0.01176EPSS
Exploits0References7
Rows per page
Query Builder