Lucene search
+L

21368 matches found

RedhatCVE
RedhatCVE
added 2025/12/23 12:25 a.m.24 views

CVE-2025-15003

A vulnerability was found in SeaCMS up to 13.3. The impacted element is an unknown function of the file adminvideo.php. Performing a manipulation of the argument eid results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used...

7.2CVSS5AI score0.00356EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2025/12/23 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-34458

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wb2osz/direwolf Dire Wolf versions up to and including 1.8, prior to commit 3658a87, contain a reachable assertion vulnerability in the APRS MIC-E decoder...

8.7CVSS5.9AI score0.0045EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/22 10:16 p.m.1 views

DEBIAN-CVE-2025-34458

wb2osz/direwolf Dire Wolf versions up to and including 1.8, prior to commit 3658a87, contain a reachable assertion vulnerability in the APRS MIC-E decoder function aprsmice located in src/decodeaprs.c. When processing a specially crafted AX.25 frame containing a MIC-E message with an empty or...

8.7CVSS5.2AI score0.0045EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/22 10:16 p.m.10 views

CVE-2025-34458

wb2osz/direwolf Dire Wolf versions up to and including 1.8, prior to commit 3658a87, contain a reachable assertion vulnerability in the APRS MIC-E decoder function aprsmice located in src/decodeaprs.c. When processing a specially crafted AX.25 frame containing a MIC-E message with an empty or...

8.7CVSS0.0045EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2025/12/22 10:16 p.m.5 views

CVE-2025-34458

wb2osz/direwolf Dire Wolf versions up to and including 1.8, prior to commit 3658a87, contain a reachable assertion vulnerability in the APRS MIC-E decoder function aprsmice located in src/decodeaprs.c. When processing a specially crafted AX.25 frame containing a MIC-E message with an empty or...

8.7CVSS5.8AI score0.0045EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/12/22 9:29 p.m.30 views

CVE-2025-34458 wb2osz/direwolf <= 1.8.1 Reachable Assertion DoS

wb2osz/direwolf Dire Wolf versions up to and including 1.8, prior to commit 3658a87, contain a reachable assertion vulnerability in the APRS MIC-E decoder function aprsmice located in src/decodeaprs.c. When processing a specially crafted AX.25 frame containing a MIC-E message with an empty or...

8.7CVSS0.0045EPSS
SaveExploits0References4
CVE
CVE
added 2025/12/22 9:29 p.m.31 views

CVE-2025-34458

Summary: CVE-2025-34458 affects wb2osz/direwolf (Dire Wolf) up to version 1.8, prior to commit 3658a87. Affected component is the APRS MIC-E decoder function aprs_mic_e() in src/decode_aprs.c. Root cause: reachable assertion that checks for a non-empty comment in an AX.25 frame containing a MIC-E...

8.7CVSS6.3AI score0.0045EPSS
SaveExploits0References4
OSV
OSV
added 2025/12/22 9:29 p.m.6 views

CVE-2025-34458 wb2osz/direwolf <= 1.8.1 Reachable Assertion DoS

wb2osz/direwolf Dire Wolf versions up to and including 1.8, prior to commit 3658a87, contain a reachable assertion vulnerability in the APRS MIC-E decoder function aprsmice located in src/decodeaprs.c. When processing a specially crafted AX.25 frame containing a MIC-E message with an empty or...

8.7CVSS5.9AI score
SaveExploits0References7
NVD
NVD
added 2025/12/22 2:15 p.m.11 views

CVE-2025-14018

Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc. E-Fatura allows Leveraging/Manipulating Configuration File Search Paths, Redirect Access to Libraries. This issue affects e-Fatura: before 1.2.15...

7.3CVSS0.00438EPSS
SaveExploits3References2
Vulnrichment
Vulnrichment
added 2025/12/22 1:46 p.m.5 views

CVE-2025-14018 Unquoted Service Path in NetBT Consultancy's e-Fatura

Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc. E-Fatura allows Leveraging/Manipulating Configuration File Search Paths, Redirect Access to Libraries. This issue affects e-Fatura: before 1.2.15...

7.3CVSS5.8AI score0.00438EPSS
SaveExploits3References2
CVE
CVE
added 2025/12/22 1:46 p.m.28 views

CVE-2025-14018

CVE-2025-14018 describes an Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc. E-Fatura prior to version 1.2.15. The root cause is unquoted configuration/file search paths that can be manipulated to redirect access to libraries. Impact per the sources is high confiden...

7.3CVSS5.8AI score0.00438EPSS
SaveExploits3References2
Cvelist
Cvelist
added 2025/12/22 1:46 p.m.38 views

CVE-2025-14018 Unquoted Service Path in NetBT Consultancy's e-Fatura

Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc. E-Fatura allows Leveraging/Manipulating Configuration File Search Paths, Redirect Access to Libraries. This issue affects e-Fatura: before 1.2.15...

7.3CVSS0.00438EPSS
SaveExploits3References2
EUVD
EUVD
added 2025/12/22 1:46 p.m.9 views

EUVD-2025-204713

Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc. E-Fatura allows Leveraging/Manipulating Configuration File Search Paths, Redirect Access to Libraries.This issue affects e-Fatura: before 1.2.15...

7.3CVSS6.5AI score0.00438EPSS
SaveExploits3References2
CNNVD
CNNVD
added 2025/12/22 12:0 a.m.10 views

NetBT Consulting Services E-Fatura 代码问题漏洞

NetBT Consulting Services E-Fatura is an enterprise financial software from NetBT Consulting Services, Turkey. A code issue vulnerability exists in NetBT Consulting Services E-Fatura versions prior to 1.2.15, which stems from an un-referenced search path or element that could lead to the...

7.3CVSS6.8AI score0.00438EPSS
SaveExploits3References3
Positive Technologies
Positive Technologies
added 2025/12/22 12:0 a.m.9 views

PT-2025-52720

Name of the Vulnerable Software and Affected Versions wb2osz/direwolf Dire Wolf versions up to and including 1.8, prior to commit 3658a87 Description The software contains a reachable assertion issue in the APRS MIC-E decoder function aprs mic e located in src/decode aprs.c. Processing a speciall...

8.7CVSS6.6AI score0.0045EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
added 2025/12/22 12:0 a.m.14 views

PT-2025-52649

Name of the Vulnerable Software and Affected Versions NetBT Consulting Services Inc. E-Fatura versions prior to 1.2.15 Description An unquoted search path or element issue exists in NetBT Consulting Services Inc. E-Fatura. This allows leveraging or manipulating configuration file search paths,...

7.3CVSS6.8AI score0.00438EPSS
SaveExploits3References9
ATTACKERKB
ATTACKERKB
added 2025/12/21 11:32 p.m.6 views

CVE-2025-15003

A vulnerability was found in SeaCMS up to 13.3. The impacted element is an unknown function of the file adminvideo.php. Performing a manipulation of the argument eid results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used...

7.2CVSS5.4AI score0.00356EPSS
SaveExploits1References4
Patchstack
Patchstack
added 2025/12/21 1:29 a.m.8 views

WordPress E-Invoice App Malaysia plugin <= 1.3.0 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Rapid0nion in WordPress Plugin E-Invoice App Malaysia versions = 1.3.0...

7.5CVSS7AI score0.00266EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/21 12:0 a.m.11 views

PT-2025-52614

Name of the Vulnerable Software and Affected Versions SeaCMS versions up to 13.3 Description A SQL injection issue exists in SeaCMS. The issue is located in the admin video.php file, specifically through manipulation of the e id argument within an unknown function. This allows for remote...

7.2CVSS7AI score0.00356EPSS
SaveExploits1References10
NVD
NVD
added 2025/12/19 8:15 a.m.21 views

CVE-2025-66501

A stored cross-site scripting XSS vulnerability exists in pdfonline.foxit.com within the Predefined Text feature of the Foxit eSign section. A crafted payload can be stored via the Identity “First Name” field, which is later rendered into the DOM without proper sanitization. As a result, the...

6.3CVSS0.00175EPSS
SaveExploits0References1
Rows per page
Query Builder