643 matches found
CVE-2022-4982 DBLTek GoIP-1 vGHSFVT-1.1-67-5 Unauthenticated LFI
DBLTek GoIP-1 firmware versions up to and including GHSFVT-1.1-67-5 contain a local file inclusion vulnerability. The device's web server exposes handlers frame.html and frame.A100.html that accept a path parameter content or sidebar which is not properly validated or canonicalized. An attacker c...
EUVD-2025-120687
Malicious code in vulcan-kaus-deimos-nashira npm...
CVE-2025-11986
creationtimestamp| type| source ---|---|--- 2025-11-11 04:22:06+00:00| seen| https://bsky.app/profile/potato.software/post/3m5dbypdu552r...
CVE-2021-4462
Employee Records System version 1.0 contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload arbitrary files via the uploadID.php endpoint; uploaded files can be executed because the application does not perform proper server-side...
PT-2025-46220
PacsOne Server version 6.6.2 prior versions are likely affected contains a directory traversal vulnerability within the web-based DICOM viewer component. Successful exploitation allows a remote unauthenticated attacker to read arbitrary files via the 'nocache.php' endpoint with a crafted 'path'...
VulnCheck KEV: CVE-2021-4462
Employee Records System version 1.0 contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload arbitrary files via the uploadID.php endpoint; uploaded files can be executed because the application does not perform proper server-side...
Exploit for OS Command Injection in Vsftpd_Project Vsftpd
Task-4-Exploitation-System-Security Internship: ApexPlanet —...
VulnCheck KEV: CVE-2020-36870
Various Ruijie Gateway EG and NBR models firmware versions 11.16B9P1 11.94B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality. Attackers can exploit front-end code when features such as guest authentication, local server...
CVE-2025-63466
creationtimestamp| type| source ---|---|--- 2025-10-31 17:55:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4j2dkd3k32w...
CVE-2025-43027
A critical severity vulnerability has been identified in the ALPR Manager role of Security Center that could allow attackers to gain administrative access to the Genetec Security Center system. The Genetec engineering team discovered this issue internally. There is currently no evidence that this...
CVE-2025-43027
A critical severity vulnerability has been identified in the ALPR Manager role of Security Center that could allow attackers to gain administrative access to the Genetec Security Center system. The Genetec engineering team discovered this issue internally. There is currently no evidence that this...
Exploit for CVE-2025-59287
wsus-decoy Defensive proof of concept decoy for CVE-2025-5928...
CVE-2025-46183
creationtimestamp| type| source ---|---|--- 2025-10-24 15:41:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3x7lksgel22...
Introducing TruConfirm for Enterprise TruRisk™ Management: Automated Exposure Validation
Enterprise security leaders and their teams face an impossible challenge: drowning in thousands of critical exposures in an ever-expanding attack surface while simultaneously trying to determine which ones pose a genuine risk of exploitation in their organizational environment. Traditional CVSS...
Web-Application-Security-Testing
Web Application Security Testing — DVWA Lab End-to-end web ap...
Attacks by Content: Automated Fact-Checking Is an AI Security Issue
When AI agents retrieve and reason over external documents, adversaries can manipulate the data they receive to subvert their behaviour. Previous research has studied indirect prompt injection, where the attacker injects malicious instructions. We argue that injection of instructions is not...
Exploit for Path Traversal in Carel Pcoweb_Card_Firmware
CVE-2022-37122 Path Traversal Scanner !Bannerhttps://raw.g...
CVE-2025-47355
creationtimestamp| type| source ---|---|--- 2025-10-09 04:10:46+00:00| seen| Telegram/V01u8Y6Ej1q2p6loSxt6047V3P05-KSRKIv-ZTu2ehIw...