Lucene search
K

48 matches found

EUVD
EUVD
added 2025/10/07 9:30 a.m.5 views

EUVD-2025-32704

A vulnerability was detected in jakowenko double-take up to 1.13.1. The impacted element is the function app.use of the file api/src/app.js of the component API. The manipulation of the argument X-Ingress-Path results in cross site scripting. The attack can be executed remotely. Upgrading to...

5.3CVSS5.5AI score0.00314EPSS
Exploits0References6
NVD
NVD
added 2025/10/07 9:15 a.m.4 views

CVE-2025-11360

A vulnerability was detected in jakowenko double-take up to 1.13.1. The impacted element is the function app.use of the file api/src/app.js of the component API. The manipulation of the argument X-Ingress-Path results in cross site scripting. The attack can be executed remotely. Upgrading to...

5.3CVSS0.00314EPSS
Exploits0References5
OSV
OSV
added 2025/10/07 9:15 a.m.4 views

CVE-2025-11360

A vulnerability was detected in jakowenko double-take up to 1.13.1. The impacted element is the function app.use of the file api/src/app.js of the component API. The manipulation of the argument X-Ingress-Path results in cross site scripting. The attack can be executed remotely. Upgrading to...

5.3CVSS5.9AI score
Exploits0References5
CVE
CVE
added 2025/10/07 9:2 a.m.9 views

CVE-2025-11360

CVE-2025-11360 affects jakowenko double-take up to 1.13.1, specifically the API component (api/src/app.js). The vulnerability arises from manipulating the X-Ingress-Path in app.use, enabling cross-site scripting that can be exploited remotely. A fix is available in version 1.13.2; the patch is id...

5.3CVSS4.2AI score0.00314EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/10/07 9:2 a.m.10 views

CVE-2025-11360 jakowenko double-take API app.js app.use cross site scripting

A vulnerability was detected in jakowenko double-take up to 1.13.1. The impacted element is the function app.use of the file api/src/app.js of the component API. The manipulation of the argument X-Ingress-Path results in cross site scripting. The attack can be executed remotely. Upgrading to...

5.3CVSS0.00314EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/10/07 9:2 a.m.5 views

CVE-2025-11360 jakowenko double-take API app.js app.use cross site scripting

A vulnerability was detected in jakowenko double-take up to 1.13.1. The impacted element is the function app.use of the file api/src/app.js of the component API. The manipulation of the argument X-Ingress-Path results in cross site scripting. The attack can be executed remotely. Upgrading to...

5.3CVSS5.7AI score0.00314EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2008-0981

Malware in sbrugna...

5CVSS6.4AI score0.02625EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2008-0983

Malware in sbrugna...

5CVSS6.4AI score0.04164EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2008-0982

Malware in sbrugna...

5CVSS6.4AI score0.01707EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2008-0984

Malware in sbrugna...

5CVSS6.4AI score0.01707EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2008-0985

Malware in sbrugna...

5CVSS6.4AI score0.01489EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2008-0980

Malware in sbrugna...

7.5CVSS6.4AI score0.01865EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2008-0986

Malware in sbrugna...

5CVSS6.4AI score0.02625EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2025/10/07 12:0 a.m.3 views

PT-2025-40975

Name of the Vulnerable Software and Affected Versions jakowenko double-take versions up to 1.13.1 Description A flaw exists in the API component of jakowenko double-take. The issue is related to the app.use function within the api/src/app.js file. Manipulation of the X-Ingress-Path argument can...

5.3CVSS4AI score0.00314EPSS
Exploits0References9
CNNVD
CNNVD
added 2025/10/07 12:0 a.m.3 views

Double Take 代码注入漏洞

Double Take is a unified UI and API from David Jakowenko's personal developer with functionality to process and train images for facial recognition. A code injection vulnerability exists in Double Take 1.13.1 and earlier versions, which stems from improper manipulation of the X-Ingress-Path...

5.3CVSS4.8AI score0.00314EPSS
Exploits0References5
GithubExploit
GithubExploit
added 2024/09/21 4:53 p.m.337 views

Exploit for NULL Pointer Dereference in Sierrawireless Aleos

CVE-2023-40459 CVE-2023-40459 Unauthenticated DoS PoC Exploit...

7.5CVSS7.8AI score0.02296EPSS
Exploits2
Packet Storm
Packet Storm
added 2012/05/20 12:0 a.m.20 views

Double Take Design SQL Injection

Exploit Title : doubletakedesign Cms Sql Injection Vulnerabilities Author : IrIsT Security Team - Security7 Security Team Discovered By : Am!r Home : http://IrIsT.Ir - http://Security7.Ir Software Link : http://www.doubletakedesign.com/ Security Risk : High Version : All Version Tested on :...

0.1AI score
Exploits0
securityvulns
securityvulns
added 2008/06/05 12:0 a.m.35 views

[security bulletin] HPSBST02312 SSRT071428 rev.1 - HP StorageWorks Storage Mirroring Software, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01362558 Version: 1 HPSBST02312 SSRT071428 rev.1 - HP StorageWorks Storage Mirroring Software, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted...

10CVSS0.5AI score0.68962EPSS
Exploits9
Prion
Prion
added 2008/02/25 11:44 p.m.10 views

Buffer overflow

Buffer overflow in Double-Take aka HP StorageWorks Storage Mirroring 4.5.0.1629, and other 4.5.0.x versions, allows remote attackers to have an unknown impact via a packet with a long string in the username field...

7.5CVSS7.6AI score0.01865EPSS
Exploits0References7Affected Software1
Prion
Prion
added 2008/02/25 11:44 p.m.16 views

Design/Logic Flaw

Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to obtain sensitive information via a packet of type 1 0x2728, which provides operating system and path information; 2 0x274e, which lists Ethernet adapters; 3...

5CVSS6.7AI score0.01489EPSS
Exploits0References7Affected Software1
Rows per page
Query Builder