Lucene search
+L

26193 matches found

GithubExploit
GithubExploit
•added 2025/10/10 6:28 a.m.•323 views

Exploit for Injection in Google Android

EXPLOITER: Automated Exploit for CVE-2024-0044 EXPLOITER...

7.8CVSS7.8AI score0.0146EPSS
SaveExploits17
Packet Storm News
Packet Storm News
•added 2025/10/10 12:00 a.m.•47 views

Exploiting Web Search Tools of AI Agents for Data Exfiltration

Large language models LLMs are now routinely used to autonomously execute complex tasks, from natural language processing to dynamic workflows like web searches. The usage of tool-calling and Retrieval Augmented Generation RAG allows LLMs to process and retrieve sensitive corporate data, amplifyi...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/10/10 12:00 a.m.•26 views

PT-2025-41618

Name of the Vulnerable Software and Affected Versions Drupal Facets versions prior to 2.0.10 Drupal Facets versions prior to 3.0.1 Description A flaw exists in Drupal Facets that allows for Cross-Site Scripting XSS. This occurs due to improper neutralization of input during web page generation. T...

5.9AI score0.00194EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/10/10 12:00 a.m.•23 views

Elastic Kibana 安全漏洞

Elastic Kibana is a usable data visualization dashboard software from Elastic, Inc. A security vulnerability exists in Elastic Kibana that stems from improper input neutralization during web page generation and could lead to stored cross-site scripting...

8.7CVSS7.5AI score0.00229EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/10 12:00 a.m.•4 views

CVE-2025-61929: Improper Control of Generation of Code

Cherry Studio is a desktop client that supports for multiple LLM providers. Cherry Studio registers a custom protocol called cherrystudio://. When handling the MCP installation URL, it parses the base64-encoded configuration data and directly executes the command within it. In the files...

9.6CVSS5.8AI score0.00471EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/10 12:00 a.m.•1 views

CVE-2025-25017: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation in Kibana can lead to Cross-Site Scripting XSS...

8.2CVSS5.9AI score0.00275EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/10 12:00 a.m.•1 views

CVE-2025-25018: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation in Kibana can lead to stored Cross-Site Scripting XSS...

8.7CVSS7.7AI score0.00229EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/10/10 12:00 a.m.•10 views

The vulnerability of Websoft HCM’s automation software for HR processes allows a perpetrator to execute arbitrary code.

The vulnerability of Websoft HCM’s automation software for HR processes is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.1CVSS6.1AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/10/10 12:00 a.m.•10 views

The vulnerability of Websoft HCM’s automation software for HR processes allows a perpetrator to execute arbitrary code.

The vulnerability of Websoft HCM’s automation software for HR processes is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.9CVSS6.1AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/10/10 12:00 a.m.•9 views

The vulnerability of Websoft HCM’s automation software for HR processes allows a perpetrator to execute arbitrary code.

The vulnerability of Websoft HCM’s automation software for HR processes is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.9CVSS6.1AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/10/10 12:00 a.m.•7 views

The vulnerability of Websoft HCM’s automation software for HR processes allows a perpetrator to execute arbitrary code.

The vulnerability of Websoft HCM’s automation software for HR processes is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.1CVSS6.1AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/10/10 12:00 a.m.•9 views

The vulnerability of Websoft HCM’s automation software for HR processes allows a perpetrator to execute arbitrary code.

The vulnerability of Websoft HCM’s automation software for HR processes is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.5CVSS6.1AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/10/10 12:00 a.m.•11 views

The vulnerability of Websoft HCM’s automation software for HR processes allows a perpetrator to gain access to local files.

The vulnerability of Websoft HCM’s automation software for HR processes is related to improper code generation management. Exploiting this vulnerability can allow an attacker operating remotely to gain access to local files...

7.7CVSS5.8AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/10/10 12:00 a.m.•7 views

The vulnerability of Websoft HCM’s automation software for HR processes allows a perpetrator to execute arbitrary code.

The vulnerability of Websoft HCM’s automation software for HR processes is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.1CVSS6.1AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/10/10 12:00 a.m.•8 views

The vulnerability of Websoft HCM’s automation software for HR processes allows a perpetrator to execute arbitrary code.

The vulnerability of Websoft HCM’s automation software for HR processes is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS6.1AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/10/10 12:00 a.m.•10 views

The vulnerability of Websoft HCM’s automation software for HR processes allows a perpetrator to execute arbitrary code.

The vulnerability of Websoft HCM’s automation software for HR processes is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS6.1AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/10/10 12:00 a.m.•9 views

The vulnerability of Websoft HCM’s automation software for HR processes allows a perpetrator to execute arbitrary code.

The vulnerability of Websoft HCM’s automation software for HR processes is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.9CVSS6.1AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/10/10 12:00 a.m.•9 views

The vulnerability of Websoft HCM’s automation software for HR processes allows a perpetrator to execute arbitrary code.

The vulnerability of Websoft HCM’s automation software for HR processes is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.1CVSS6.1AI score
SaveExploits0References1Affected Software1
NVD
NVD
•added 2025/10/09 9:15 p.m.•19 views

CVE-2025-55321

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Monitor allows an unauthorized attacker to perform spoofing over a network...

9.3CVSS0.00443EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/09 6:30 p.m.•20 views

EUVD-2025-33386

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Device Template Definition page that, when visited by another user, enables the attacker to execute commands with the...

6.1CVSS6.5AI score0.00275EPSS
SaveExploits0References2
Rows per page
Query Builder