26139 matches found
Adobe Experience Manager (AEM) CRX Content Explorer
This plugin detects the presence of the Adobe Experience Manager AEM CRX Content Explorer interface. The CRX Content Explorer is a web-based interface used to manage and interact with the content repository of Adobe Experience Manager. No source data...
Liferay Portal API Explorer Detected
This is an informational plugin to inform the user that the scanner has detected that the target Liferay instance publicly expose the API explorer. No source data...
Exploit for External Control of File Name or Path in Microsoft
CVE-2025-2405...
November 20, 2025—KB5070312 (OS Build 22631.6276) Preview
None None...
CVE-2025-63694
DzzOffice v2.3.7 and before is vulnerable to SQL Injection in explorer/groupmanage...
CVE-2025-63694
DzzOffice v2.3.7 and before is vulnerable to SQL Injection in explorer/groupmanage...
PT-2025-47371
Name of the Vulnerable Software and Affected Versions DzzOffice versions prior to 2.3.8 Description DzzOffice versions 2.3.7 and before have a SQL Injection issue in the 'explorer/groupmanage' component. The issue allows for potential manipulation of database queries through the...
DzzOffice 安全漏洞
DzzOffice is a platform from Big Desk DzzOffice that provides online collaborative office suite functionality. It provides online documents, forms, webstores, presentations and other features. A security vulnerability exists in DzzOffice v2.3.7 and earlier versions, which stems from...
CVE-2025-63694
DzzOffice v2.3.7 and before is vulnerable to SQL Injection in explorer/groupmanage...
D-Link DIR-816L Buffer Overflow Vulnerability
DIR-816L is a wireless router product from D-Link. A stack buffer overflow vulnerability exists in the D-Link DIR-816L version 206b09beta, which stems from failure to properly validate the input length when manipulating the en parameter of the scandirmain function in the /portal/ajaxexporer.sgi...
EUVD-2025-198055
DzzOffice v2.3.7 and before is vulnerable to SQL Injection in explorer/groupmanage...
CVE-2025-63694
DzzOffice v2.3.7 and before is vulnerable to SQL Injection in explorer/groupmanage...
CVE-2025-63694
DzzOffice v2.3.7 and before is vulnerable to SQL Injection in explorer/groupmanage...
CVE-2025-63694
DzzOffice v2.3.7 and earlier are affected by an SQL Injection vulnerability in the explorer/groupmanage component. The issue, documented across multiple feeds (CVE-2025-63694 and related advisories), affects versions prior to 2.3.8 and could allow manipulation of database queries via that functio...
EUVD-2025-38716
Malicious code in ordinals-explorer npm...
Malicious code in ordinals-explorer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 060fd98346deb90b6a2936d45a684682eaaf3fff2298d4ad9c3fe9022024f3e1 The package ordinals-explorer was found to contain malicious code...
MAL-2025-49577 Malicious code in ordinals-explorer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 060fd98346deb90b6a2936d45a684682eaaf3fff2298d4ad9c3fe9022024f3e1 The package ordinals-explorer was found to contain malicious code...
CVE-2023-7315
Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting XSS via the Graph Explorer component. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...
CVE-2023-7316
Nagios XI versions prior to 2024R1 are vulnerable to cross-site scripting XSS via the Graph Explorer component. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...
CVE-2023-7316
Nagios XI versions prior to 2024R1 are vulnerable to cross-site scripting XSS via the Graph Explorer component. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...