Lucene search
+L

11 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2025-27464

Malicious code in bioql PyPI...

5.1CVSS5.4AI score0.19132EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/09/11 8:27 p.m.•20 views

CVE-2025-34175

In pfSense CE /usr/local/www/suricata/suricatafilecheck.php, the value of the filehash parameter is directly displayed without sanitizing for HTML-related characters/strings. This can result in reflected cross-site scripting if the victim is authenticated...

5.1CVSS6.3AI score0.19132EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/09 8:15 p.m.•24 views

CVE-2025-34175

In pfSense CE /usr/local/www/suricata/suricatafilecheck.php, the value of the filehash parameter is directly displayed without sanitizing for HTML-related characters/strings. This can result in reflected cross-site scripting if the victim is authenticated...

6.1CVSS0.19132EPSS
SaveExploits0References3
CVE
CVE
•added 2025/09/09 8:09 p.m.•51 views

CVE-2025-34175

The CVE pertains to pfSense CE with Suricata package (suricata_filecheck.php). The vulnerability arises because the filehash parameter is output directly without HTML sanitization, enabling reflected XSS when a user is authenticated. Affected component: /usr/local/www/suricata/suricata_filecheck....

6.1CVSS5.8AI score0.19132EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2025/09/09 8:09 p.m.•29 views

CVE-2025-34175 Netgate pfSense CE Suricata package v7.0.8_2 Reflected Cross-Site Scripting

In pfSense CE /usr/local/www/suricata/suricatafilecheck.php, the value of the filehash parameter is directly displayed without sanitizing for HTML-related characters/strings. This can result in reflected cross-site scripting if the victim is authenticated...

5.1CVSS0.19132EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/09/09 8:09 p.m.•8 views

CVE-2025-34175 Netgate pfSense CE Suricata package v7.0.8_2 Reflected Cross-Site Scripting

In pfSense CE /usr/local/www/suricata/suricatafilecheck.php, the value of the filehash parameter is directly displayed without sanitizing for HTML-related characters/strings. This can result in reflected cross-site scripting if the victim is authenticated...

5.1CVSS5.8AI score0.19132EPSS
SaveExploits0References3
Mend
Mend
•added 2025/09/09 8:09 p.m.•5 views

CVE-2025-34175

In pfSense CE /usr/local/www/suricata/suricatafilecheck.php, the value of the filehash parameter is directly displayed without sanitizing for HTML-related characters/strings. This can result in reflected cross-site scripting if the victim is authenticated...

6.1CVSS0.19132EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/09/09 12:00 a.m.•26 views

PT-2025-36942

Name of the Vulnerable Software and Affected Versions: pfSense CE affected versions not specified Description: The value of the filehash parameter in /usr/local/www/suricata/suricata filecheck.php is displayed without proper sanitization for HTML-related characters and strings. This can lead to...

6.1CVSS5.2AI score0.19132EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2025/09/09 12:00 a.m.•27 views

Netgate pfSense CE 安全漏洞

Netgate pfSense CE is a FreeBSD-based open source firewall and routing platform from Netgate, Inc. that supports enterprise-class network security and network management features. A security vulnerability exists in Netgate pfSense CE that stems from the filehash parameter not being cleaned of HTM...

6.1CVSS5.9AI score0.19132EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/09 12:00 a.m.•6 views

CVE-2025-34175: Improper Neutralization of Input During Web Page Generation

In pfSense CE /usr/local/www/suricata/suricatafilecheck.php, the value of the filehash parameter is directly displayed without sanitizing for HTML-related characters/strings. This can result in reflected cross-site scripting if the victim is authenticated...

6.1CVSS5.6AI score0.19132EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2023/01/24 11:30 a.m.•43 views

Get-AppLockerEventlog - Script For Fetching Applocker Event Log By Parsing The Win-Event Log

This script will parse all the channels of events from the win-event log to extract all the log relatives to AppLocker. The script will gather all the important pieces of information relative to the events for forensic or threat-hunting purposes, or even in order to troubleshoot. Here are the log...

7AI score
SaveExploits0References6
Rows per page
Query Builder