Lucene search
+L

643 matches found

Vulnrichment
Vulnrichment
added 2025/11/12 10:10 p.m.5 views

CVE-2022-4982 DBLTek GoIP-1 vGHSFVT-1.1-67-5 Unauthenticated LFI

DBLTek GoIP-1 firmware versions up to and including GHSFVT-1.1-67-5 contain a local file inclusion vulnerability. The device's web server exposes handlers frame.html and frame.A100.html that accept a path parameter content or sidebar which is not properly validated or canonicalized. An attacker c...

8.7CVSS6.1AI score0.00496EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/11/12 4:29 a.m.10 views

EUVD-2025-120687

Malicious code in vulcan-kaus-deimos-nashira npm...

6.6AI score
SaveExploits0
Circl
Circl
added 2025/11/11 4:22 a.m.9 views

CVE-2025-11986

creationtimestamp| type| source ---|---|--- 2025-11-11 04:22:06+00:00| seen| https://bsky.app/profile/potato.software/post/3m5dbypdu552r...

5.3CVSS5.8AI score0.00357EPSS
SaveExploits0References1
OSV
OSV
added 2025/11/10 11:15 p.m.8 views

CVE-2021-4462

Employee Records System version 1.0 contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload arbitrary files via the uploadID.php endpoint; uploaded files can be executed because the application does not perform proper server-side...

9.8CVSS5.9AI score0.0319EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
added 2025/11/10 12:00 a.m.17 views

PT-2025-46220

PacsOne Server version 6.6.2 prior versions are likely affected contains a directory traversal vulnerability within the web-based DICOM viewer component. Successful exploitation allows a remote unauthenticated attacker to read arbitrary files via the 'nocache.php' endpoint with a crafted 'path'...

8.7CVSS6.9AI score0.00924EPSS
SaveExploits0References4
VulnCheck KEV
VulnCheck KEV
added 2025/11/10 12:00 a.m.9 views

VulnCheck KEV: CVE-2021-4462

Employee Records System version 1.0 contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload arbitrary files via the uploadID.php endpoint; uploaded files can be executed because the application does not perform proper server-side...

9.8CVSS6AI score0.0319EPSS
SaveIn wildExploits2References80
GithubExploit
GithubExploit
added 2025/11/07 10:13 a.m.475 views

Exploit for OS Command Injection in Vsftpd_Project Vsftpd

Task-4-Exploitation-System-Security Internship: ApexPlanet —...

10CVSS7.7AI score0.96184EPSS
SaveExploits50
VulnCheck KEV
VulnCheck KEV
added 2025/11/07 12:00 a.m.7 views

VulnCheck KEV: CVE-2020-36870

Various Ruijie Gateway EG and NBR models firmware versions 11.16B9P1 11.94B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality. Attackers can exploit front-end code when features such as guest authentication, local server...

9.2CVSS6.3AI score0.00753EPSS
SaveIn wildExploits0References89
Circl
Circl
added 2025/10/31 5:55 p.m.8 views

CVE-2025-63466

creationtimestamp| type| source ---|---|--- 2025-10-31 17:55:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4j2dkd3k32w...

7.5CVSS5.8AI score0.00385EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/10/30 2:12 p.m.3 views

CVE-2025-43027

A critical severity vulnerability has been identified in the ALPR Manager role of Security Center that could allow attackers to gain administrative access to the Genetec Security Center system. The Genetec engineering team discovered this issue internally. There is currently no evidence that this...

9.8CVSS6.7AI score0.00338EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/30 2:12 p.m.17 views

CVE-2025-43027

A critical severity vulnerability has been identified in the ALPR Manager role of Security Center that could allow attackers to gain administrative access to the Genetec Security Center system. The Genetec engineering team discovered this issue internally. There is currently no evidence that this...

9.8CVSS0.00338EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2025/10/27 10:08 a.m.333 views

Exploit for CVE-2025-59287

wsus-decoy Defensive proof of concept decoy for CVE-2025-5928...

9.8CVSS9.6AI score0.99979EPSS
SaveExploits24
Circl
Circl
added 2025/10/24 3:41 p.m.8 views

CVE-2025-46183

creationtimestamp| type| source ---|---|--- 2025-10-24 15:41:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3x7lksgel22...

8.2CVSS5.7AI score0.00321EPSS
SaveExploits1References1
Qualys Blog
Qualys Blog
added 2025/10/15 2:10 p.m.21 views

Introducing TruConfirm for Enterprise TruRisk™ Management: Automated Exposure Validation

Enterprise security leaders and their teams face an impossible challenge: drowning in thousands of critical exposures in an ever-expanding attack surface while simultaneously trying to determine which ones pose a genuine risk of exploitation in their organizational environment. Traditional CVSS...

6.4AI score
SaveExploits0
GithubExploit
GithubExploit
added 2025/10/13 9:28 a.m.290 views

Web-Application-Security-Testing

Web Application Security Testing — DVWA Lab End-to-end web ap...

7.5AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/10/13 12:00 a.m.12 views

Attacks by Content: Automated Fact-Checking Is an AI Security Issue

When AI agents retrieve and reason over external documents, adversaries can manipulate the data they receive to subvert their behaviour. Previous research has studied indirect prompt injection, where the attacker injects malicious instructions. We argue that injection of instructions is not...

7.1AI score
SaveExploits0
GithubExploit
GithubExploit
added 2025/10/12 2:01 a.m.190 views

Exploit for Path Traversal in Carel Pcoweb_Card_Firmware

CVE-2022-37122 Path Traversal Scanner !Bannerhttps://raw.g...

7.5CVSS7.3AI score0.23061EPSS
SaveExploits3
Circl
Circl
added 2025/10/09 4:10 a.m.12 views

CVE-2025-47355

creationtimestamp| type| source ---|---|--- 2025-10-09 04:10:46+00:00| seen| Telegram/V01u8Y6Ej1q2p6loSxt6047V3P05-KSRKIv-ZTu2ehIw...

7.8CVSS4.8AI score0.00087EPSS
SaveExploits0
HackRead
HackRead
added 2025/10/08 9:16 a.m.13 views

New Shuyal Stealer Targets 17 Web Browsers for Login Data and Discord Tokens

Researchers warn of Shuyal Stealer, malware that gathers browser logins, system details, and Discord tokens, then erases evidence via Telegram...

7AI score
SaveExploits0
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2022-3283

Malicious code in bioql PyPI...

6.1CVSS6.5AI score0.01054EPSS
SaveExploits0References6
Rows per page
Query Builder