Lucene search
+L

18546 matches found

OSV
OSV
added 2025/12/19 9:30 p.m.11 views

GHSA-CV8H-R7R5-VWJ9 Kimai contains a SameSite cookie vulnerability

Kimai 1.30.10 contains a SameSite cookie vulnerability that allows attackers to steal user session cookies through malicious exploitation. Attackers can trick victims into executing a crafted PHP script that captures and writes session cookie information to a file, enabling potential session...

9.8CVSS5.5AI score0.00579EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/12/19 9:30 p.m.12 views

EUVD-2025-204606

FileZilla Client 3.63.1 contains a DLL hijacking vulnerability that allows attackers to execute malicious code by placing a crafted TextShaping.dll in the application directory. Attackers can generate a reverse shell payload using msfvenom and replace the missing DLL to achieve remote code...

9.8CVSS7.7AI score0.00841EPSS
SaveExploits1References5
NVD
NVD
added 2025/12/19 9:15 p.m.13 views

CVE-2023-53959

FileZilla Client 3.63.1 contains a DLL hijacking vulnerability that allows attackers to execute malicious code by placing a crafted TextShaping.dll in the application directory. Attackers can generate a reverse shell payload using msfvenom and replace the missing DLL to achieve remote code...

9.8CVSS0.00841EPSS
SaveExploits1References3
NVD
NVD
added 2025/12/19 9:15 p.m.11 views

CVE-2023-53957

Kimai 1.30.10 contains a SameSite cookie vulnerability that allows attackers to steal user session cookies through malicious exploitation. Attackers can trick victims into executing a crafted PHP script that captures and writes session cookie information to a file, enabling potential session...

9.8CVSS0.00579EPSS
SaveExploits1References3
OSV
OSV
added 2025/12/19 9:15 p.m.15 views

UBUNTU-CVE-2023-53959

FileZilla Client 3.63.1 contains a DLL hijacking vulnerability that allows attackers to execute malicious code by placing a crafted TextShaping.dll in the application directory. Attackers can generate a reverse shell payload using msfvenom and replace the missing DLL to achieve remote code...

9.8CVSS6.5AI score0.00841EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2025/12/19 9:15 p.m.13 views

CVE-2023-53959

FileZilla Client 3.63.1 contains a DLL hijacking vulnerability that allows attackers to execute malicious code by placing a crafted TextShaping.dll in the application directory. Attackers can generate a reverse shell payload using msfvenom and replace the missing DLL to achieve remote code...

9.8CVSS6.2AI score0.00841EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/12/19 9:05 p.m.41 views

CVE-2023-53959 FileZilla Client 3.63.1 DLL Hijacking via Missing TextShaping.dll

FileZilla Client 3.63.1 contains a DLL hijacking vulnerability that allows attackers to execute malicious code by placing a crafted TextShaping.dll in the application directory. Attackers can generate a reverse shell payload using msfvenom and replace the missing DLL to achieve remote code...

9.8CVSS0.00841EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/12/19 9:05 p.m.6 views

CVE-2023-53959 FileZilla Client 3.63.1 DLL Hijacking via Missing TextShaping.dll

FileZilla Client 3.63.1 contains a DLL hijacking vulnerability that allows attackers to execute malicious code by placing a crafted TextShaping.dll in the application directory. Attackers can generate a reverse shell payload using msfvenom and replace the missing DLL to achieve remote code...

9.8CVSS7.9AI score0.00841EPSS
SaveExploits1References3
CVE
CVE
added 2025/12/19 9:05 p.m.53 views

CVE-2023-53959

FileZilla Client 3.63.1 is affected by a DLL hijacking flaw: an attacker can place a crafted TextShaping.dll in the application directory to achieve remote code execution when FileZilla is launched. The vulnerability stems from a missing/bad TextShaping.dll that can be replaced with a malicious p...

9.8CVSS7.9AI score0.00841EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
added 2025/12/19 9:05 p.m.14 views

CVE-2023-53959

FileZilla Client 3.63.1 contains a DLL hijacking vulnerability that allows attackers to execute malicious code by placing a crafted TextShaping.dll in the application directory. Attackers can generate a reverse shell payload using msfvenom and replace the missing DLL to achieve remote code...

9.8CVSS6.6AI score0.00841EPSS
SaveExploits1
Cvelist
Cvelist
added 2025/12/19 9:05 p.m.36 views

CVE-2023-53957 Kimai 1.30.10 SameSite Cookie Vulnerability Session Hijacking

Kimai 1.30.10 contains a SameSite cookie vulnerability that allows attackers to steal user session cookies through malicious exploitation. Attackers can trick victims into executing a crafted PHP script that captures and writes session cookie information to a file, enabling potential session...

9.8CVSS0.00579EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/12/19 9:05 p.m.10 views

EUVD-2025-204601

Kimai 1.30.10 contains a SameSite cookie vulnerability that allows attackers to steal user session cookies through malicious exploitation. Attackers can trick victims into executing a crafted PHP script that captures and writes session cookie information to a file, enabling potential session...

9.8CVSS6.1AI score0.00579EPSS
SaveExploits1References4
CVE
CVE
added 2025/12/19 9:05 p.m.29 views

CVE-2023-53957

Kimai 1.30.10 is affected by a SameSite cookie vulnerability that can enable session hijacking. Attackers may lure victims into running a crafted PHP script that captures and writes session cookies to a file, enabling access to user sessions. The issue is tied to improper SameSite cookie handling...

9.8CVSS6.2AI score0.00579EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/19 9:05 p.m.5 views

CVE-2023-53957 Kimai 1.30.10 SameSite Cookie Vulnerability Session Hijacking

Kimai 1.30.10 contains a SameSite cookie vulnerability that allows attackers to steal user session cookies through malicious exploitation. Attackers can trick victims into executing a crafted PHP script that captures and writes session cookie information to a file, enabling potential session...

9.8CVSS6.2AI score0.00579EPSS
SaveExploits1References3
OSV
OSV
added 2025/12/19 9:05 p.m.9 views

CVE-2023-53957 Kimai 1.30.10 SameSite Cookie Vulnerability Session Hijacking

Kimai 1.30.10 contains a SameSite cookie vulnerability that allows attackers to steal user session cookies through malicious exploitation. Attackers can trick victims into executing a crafted PHP script that captures and writes session cookie information to a file, enabling potential session...

8.5CVSS6AI score
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/12/19 8:18 p.m.12 views

CVE-2023-53937

Hubstaff 1.6.14 contains a DLL search order hijacking vulnerability that allows attackers to replace a missing system32 wow64log.dll with a malicious library. Attackers can generate a custom DLL using Metasploit and place it in the system32 directory to obtain a reverse shell during application...

8.5CVSS6.8AI score0.00219EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/12/19 7:36 p.m.39 views

CVE-2025-12874 HTTP Request Smuggling in Quest Coexistence Manager for Notes

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in Quest Coexistence Manager for Notes Free/Busy Connector modules allows HTTP Request Smuggling via the Content-Length-Transfer-Encoding CL.TE attack vector. This could allow an attacker to bypass access...

6.3CVSS0.00504EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/19 12:00 a.m.19 views

PT-2025-52529

Name of the Vulnerable Software and Affected Versions FileZilla Client version 3.63.1 Description The FileZilla Client application is susceptible to a DLL hijacking issue. An attacker can exploit this by placing a specially crafted TextShaping.dll file within the application directory. Successful...

9.8CVSS7.8AI score0.00841EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2025/12/19 12:00 a.m.18 views

FileZilla 代码问题漏洞

FileZilla is an open source FTP/SFTP client for Windows-based platforms. A code issue vulnerability exists in FileZilla Client version 3.63.1, which stems from a DLL hijacking vulnerability that could lead to remote code execution...

9.8CVSS7.6AI score0.00841EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/12/19 12:00 a.m.9 views

PT-2025-52527

Name of the Vulnerable Software and Affected Versions Kimai version 1.30.10 Description Kimai version 1.30.10 has a SameSite cookie flaw that allows attackers to steal user session cookies. Attackers can trick victims into executing a crafted PHP script that captures and writes session cookie...

9.8CVSS6.5AI score0.00579EPSS
SaveExploits1References9
Rows per page
Query Builder