Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 12:39 p.m.4 views

CVE-2023-29847

AeroCMS v0.0.1 was discovered to contain multiple stored cross-site scripting XSS vulnerabilities via the commentauthor and commentcontent parameters at /post.php. These vulnerabilities allow attackers to execute arbitrary web scripts or HTML via a crafted payload...

5.4CVSS6.2AI score0.00198EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2014-8922

Malware in sbrugna...

7.5CVSS6.4AI score0.01905EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2003-1026

Malware in sbrugna...

7.5CVSS6.4AI score0.03077EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2006-0524

Malware in sbrugna...

7.5CVSS6.2AI score0.03479EPSS
Exploits1References14
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2007-6240

Malware in sbrugna...

7.5CVSS6.4AI score0.00013EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2005-2989

Malware in sbrugna...

7.5CVSS6.1AI score0.00541EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2010-1356

Malware in sbrugna...

7.5CVSS6.3AI score0.00107EPSS
Exploits3References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2018-7023

Malware in sbrugna...

9.8CVSS9.5AI score0.00017EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/05/23 1:43 a.m.3 views

CVE-2023-46581

SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary code via the name, uname and email parameters in the registration.php component...

5.5CVSS8.4AI score0.00057EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:32 a.m.5 views

CVE-2010-2317

Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 search, 2 sbr, 3 pid, 4 sbl, and 5 FilePath parameters to default.asp; and the 6 sbr, 7 pr, and 8 psPrice parameters to printpage.asp...

7.5CVSS9AI score0.00105EPSS
Exploits1References1
OSV
OSV
added 2022/05/17 5:6 a.m.5 views

GHSA-5GX6-F2QQ-475F EGroupware Code Injection vulnerability

phpgwapi/js/fckeditor/editor/dialog/fckspellerpages/spellerpages/serverscripts/spellchecker.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versions before 1.6.003; and EPL 9.1 before 9.1.20100309 and 9.2 before 9.2.20100309; allows remote attackers to execute arbitrary commands v...

9.3CVSS7.5AI score0.023EPSS
Exploits0References6
Prion
Prion
added 2018/06/29 5:29 a.m.12 views

Input validation

An issue was discovered in OpenTSDB 2.3.0. Many parameters to the /q URI can execute commands, including o, key, style, and yrange and y2range and their JSON input...

7.5CVSS9.4AI score0.00693EPSS
Exploits0References1Affected Software1
Exploit DB
Exploit DB
added 2017/05/26 12:0 a.m.62 views

Microsoft MsMpEng - Multiple Problems Handling ntdll!NtControlChannel Commands

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1260 MsMpEng includes a full system x86 emulator that is used to execute any untrusted files that look like PE executables. The emulator runs as NT AUTHORITY\SYSTEM and isn't sandboxed. Browsing the list of win32 APIs that the...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2017/05/26 12:0 a.m.39 views

Microsoft MsMpEng - Multiple Problems Handling ntdll!NtControlChannel Commands

Microsoft MsMpEng - Multiple Problems Handling ntdll!NtControlChannel Commands Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1260 MsMpEng includes a full system x86 emulator that is used to execute any untrusted files that look like PE executables. The emulator runs as NT...

7.4AI score
Exploits0
OSV
OSV
added 2015/01/02 8:59 p.m.2 views

CVE-2014-9450

Multiple SQL injection vulnerabilities in chartbar.php in the frontend in Zabbix before 1.8.22, 2.0.x before 2.0.14, and 2.2.x before 2.2.8 allow remote attackers to execute arbitrary SQL commands via the 1 itemid or 2 periods parameter...

8.8AI score
Exploits0References5
Exploit DB
Exploit DB
added 2003/06/10 12:0 a.m.38 views

mnoGoSearch 3.1.20 - Remote Command Execution

!/usr/bin/perl reloaded Remote Exploit for mnoGoSearch 3.1.20 that performs remote command execution as the webserver user id for linux ix86 by pokleyzz use IO::Socket; $host = "127.0.0.1"; $cmd = "ls -la"; $searchpath = "/cgi-bin/search.cgi"; $rawret = 0xbfff105c; $ret = ""; $suffsize = 0; $port...

7.4AI score
Exploits0
Rows per page
Query Builder