Lucene search
+L

1453 matches found

Positive Technologies
Positive Technologies
added 2025/10/11 12:0 a.m.11 views

PT-2025-41695

Name of the Vulnerable Software and Affected Versions code-projects Hospital Management System version 1.0 Description A flaw exists in the session function of the express-session component in code-projects Hospital Management System version 1.0. This issue involves manipulation of the secret...

6.3CVSS4.1AI score0.00475EPSS
SaveExploits1References9
NVD
NVD
added 2025/10/08 6:15 p.m.5 views

CVE-2025-11489

A security vulnerability has been detected in wonderwhy-er DesktopCommanderMCP up to 0.2.13. This vulnerability affects the function isPathAllowed of the file src/tools/filesystem.ts. The manipulation leads to symlink following. The attack can only be performed from a local environment. The...

7CVSS0.00228EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2025/10/08 6:2 p.m.4 views

CVE-2025-11489 wonderwhy-er DesktopCommanderMCP filesystem.ts isPathAllowed symlink

A security vulnerability has been detected in wonderwhy-er DesktopCommanderMCP up to 0.2.13. This vulnerability affects the function isPathAllowed of the file src/tools/filesystem.ts. The manipulation leads to symlink following. The attack can only be performed from a local environment. The...

4.5CVSS5.5AI score0.00228EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2025/10/08 7:32 a.m.5 views

CVE-2025-11443 JhumanJ OpnForm Forgotten Password email information exposure

A weakness has been identified in JhumanJ OpnForm up to 1.9.3. This affects an unknown function of the file /api/password/email of the component Forgotten Password Handler. This manipulation causes information exposure through discrepancy. It is possible to initiate the attack remotely. The attac...

6.3CVSS4.3AI score0.00522EPSS
SaveExploits1References4
CVE
CVE
added 2025/10/08 7:32 a.m.25 views

CVE-2025-11443

CVE-2025-11443 affects JhumanJ OpnForm up to v1.9.3. The issue lies in the Forgotten Password Handler’s /api/password/email function, enabling information exposure via discrepancy. The attack can be initiated remotely with high complexity; exploit is publicly available. The vulnerability is linke...

6.3CVSS6.1AI score0.00522EPSS
SaveExploits1References4Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2015-1087

Malware in sbrugna...

6.1CVSS4AI score0.00545EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2014-1227

Malware in sbrugna...

9.8CVSS4.4AI score0.00805EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2016-2092

Malware in sbrugna...

5.5CVSS4AI score0.00205EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2014-1275

Malware in sbrugna...

6.1CVSS4.2AI score0.00477EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2005-4892

Malware in sbrugna...

9.8CVSS5.7AI score0.01693EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2017-11171

Malware in sbrugna...

9.8CVSS6.1AI score0.00792EPSS
SaveExploits0References4
NVD
NVD
added 2025/10/05 4:15 a.m.8 views

CVE-2025-11281

A vulnerability has been found in Frappe LMS 2.35.0. The affected element is an unknown function of the file /courses/ of the component Unpublished Course Handler. Such manipulation leads to improper access controls. The attack may be launched remotely. This attack is characterized by high...

5CVSS0.00327EPSS
SaveExploits1References5
NVD
NVD
added 2025/10/05 4:15 a.m.10 views

CVE-2025-11280

A flaw has been found in Frappe LMS 2.35.0. Impacted is an unknown function of the file /files/ of the component Assignment Picture Handler. This manipulation causes direct request. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitability is considered...

6.3CVSS0.00445EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/10/05 3:32 a.m.5 views

CVE-2025-11280 Frappe LMS Assignment Picture files direct request

A flaw has been found in Frappe LMS 2.35.0. Impacted is an unknown function of the file /files/ of the component Assignment Picture Handler. This manipulation causes direct request. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitability is considered...

6.3CVSS6.1AI score0.00445EPSS
SaveExploits1References5
CVE
CVE
added 2025/10/05 3:32 a.m.18 views

CVE-2025-11280

The CVE-2025-11280 vulnerability affects Frappe LMS 2.35.0, in the Assignment Picture Handler component’s /files/ area. It enables a remote, high-complexity manipulation of a direct request, with exploitability rated as difficult and the exploit published. Upgrade the affected component as remedi...

6.3CVSS6.1AI score0.00445EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/05 3:32 a.m.15 views

CVE-2025-11280 Frappe LMS Assignment Picture files direct request

A flaw has been found in Frappe LMS 2.35.0. Impacted is an unknown function of the file /files/ of the component Assignment Picture Handler. This manipulation causes direct request. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitability is considered...

6.3CVSS0.00445EPSS
SaveExploits1References5
OSV
OSV
added 2025/10/05 3:32 a.m.5 views

CVE-2025-11280 Frappe LMS Assignment Picture files direct request

A flaw has been found in Frappe LMS 2.35.0. Impacted is an unknown function of the file /files/ of the component Assignment Picture Handler. This manipulation causes direct request. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitability is considered...

6.3CVSS5.2AI score0.00445EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2025/10/05 12:0 a.m.8 views

PT-2025-40790

Name of the Vulnerable Software and Affected Versions Frappe LMS version 2.35.0 Description A flaw exists in Frappe LMS 2.35.0 within the Assignment Picture Handler component, specifically related to the /files/ file. This issue allows for a remote direct request manipulation, with a high...

6.3CVSS4.2AI score0.00445EPSS
SaveExploits1References10
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2023-44398

Malicious code in bioql PyPI...

7.5CVSS5AI score0.00595EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2025-21882

Malicious code in bioql PyPI...

6.3CVSS4.7AI score0.0028EPSS
SaveExploits1References4
Rows per page
Query Builder