Lucene search
K

9663 matches found

OSV
OSV
added 2026/04/27 5:16 a.m.2 views

MAL-2026-3099 Malicious code in bytedvod (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c2b90eec61e5e2a472f910011acc1e66e407b4a240e907ac74289221e1a5e83f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

5.6AI score
Exploits0References1
GithubExploit
GithubExploit
added 2026/04/27 1:0 a.m.79 views

Exploit for CVE-2026-0911

CVE-2026-0911 — Hustle modül import PoC WordPress eklentisi...

7.5CVSS5.3AI score0.00122EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.4 views

PT-2026-35518

Name of the Vulnerable Software and Affected Versions Pimcore version 12.3.3 Description An authenticated administrative user with permissions to import or save DataObject class definitions can inject malicious composite index metadata. This action allows the execution of unintended SQL commands ...

7CVSS6AI score0.00011EPSS
Exploits0References13
NVD
NVD
added 2026/04/26 10:17 p.m.0 views

CVE-2018-25282

Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing malicious XML files with exponential entity expansion. Attackers can create a crafted XML file with nested entity definitions and open it through ZenMap's scan import...

6.9CVSS0.00017EPSS
Exploits0References3
GithubExploit
GithubExploit
added 2026/04/26 6:9 p.m.84 views

Advanced-AI-Recon-and-Exploit-Framework

reNgine: The Ultimate Web Reconnaissance & Vulnerability Scanner...

6.1AI score
Exploits0
EUVD
EUVD
added 2026/04/26 1:19 p.m.2 views

EUVD-2018-21802

Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing malicious XML files with exponential entity expansion. Attackers can create a crafted XML file with nested entity definitions and open it through ZenMap's scan import...

6.9CVSS5.3AI score0.00017EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/04/26 1:19 p.m.1 views

CVE-2018-25282 Nmap 7.70 Denial of Service via XML Entity Expansion

Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing malicious XML files with exponential entity expansion. Attackers can create a crafted XML file with nested entity definitions and open it through ZenMap's scan import...

6.9CVSS5.3AI score0.00017EPSS
Exploits0References3
CVE
CVE
added 2026/04/26 1:19 p.m.11 views

CVE-2018-25282

Nmap 7.70 is affected by a local denial-of-service vulnerability caused by exponential XML entity expansion in XML processing (triggered via ZenMap scan import). A crafted XML file with nested entity definitions can cause excessive resource consumption, potentially crashing the application. The C...

6.9CVSS5.3AI score0.00017EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/04/26 1:19 p.m.32 views

CVE-2018-25282 Nmap 7.70 Denial of Service via XML Entity Expansion

Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing malicious XML files with exponential entity expansion. Attackers can create a crafted XML file with nested entity definitions and open it through ZenMap's scan import...

6.9CVSS0.00017EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/26 1:19 p.m.3 views

CVE-2018-25282

Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing malicious XML files with exponential entity expansion. Attackers can create a crafted XML file with nested entity definitions and open it through ZenMap's scan import...

6.9CVSS5.3AI score0.00017EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/26 1:19 p.m.4 views

CVE-2018-25274 InfraRecorder 0.53 Denial of Service via txt File Import

InfraRecorder 0.53 contains a denial of service vulnerability that allows local attackers to crash the application by importing a maliciously crafted text file. Attackers can create a text file containing 6000 bytes of data and import it through the Edit menu's Import function to trigger an...

6.9CVSS5.2AI score0.00018EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/26 1:19 p.m.0 views

CVE-2018-25274

InfraRecorder 0.53 contains a denial of service vulnerability that allows local attackers to crash the application by importing a maliciously crafted text file. Attackers can create a text file containing 6000 bytes of data and import it through the Edit menu's Import function to trigger an...

6.9CVSS5.2AI score0.00018EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2026/04/26 1:19 p.m.3 views

EUVD-2018-21794

InfraRecorder 0.53 contains a denial of service vulnerability that allows local attackers to crash the application by importing a maliciously crafted text file. Attackers can create a text file containing 6000 bytes of data and import it through the Edit menu's Import function to trigger an...

6.9CVSS5.3AI score0.00018EPSS
Exploits0References2
CVE
CVE
added 2026/04/26 1:19 p.m.5 views

CVE-2018-25274

CVE-2018-25274 affects InfraRecorder 0.53. ADenial of Service vulnerability allows a local attacker to crash the application by importing a crafted text file. Specifically, a 6000-byte text file imported via the Edit → Import function can trigger the crash. The connected documents confirm the loc...

6.9CVSS5.3AI score0.00018EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/04/26 1:19 p.m.30 views

CVE-2018-25274 InfraRecorder 0.53 Denial of Service via txt File Import

InfraRecorder 0.53 contains a denial of service vulnerability that allows local attackers to crash the application by importing a maliciously crafted text file. Attackers can create a text file containing 6000 bytes of data and import it through the Edit menu's Import function to trigger an...

6.9CVSS0.00018EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/04/26 12:0 a.m.6 views

InfraRecorder 安全漏洞

InfraRecorder is a tool software developed by InfraRecorder Inc. designed for burning discs and creating disc images. Version 0.53 of InfraRecorder contains a security vulnerability. This vulnerability stems from a denial-of-service attack when importing malicious text files. It is possible for...

6.9CVSS5.8AI score0.00018EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/26 12:0 a.m.4 views

PT-2026-35252

Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing malicious XML files with exponential entity expansion. Attackers can create a crafted XML file with nested entity definitions and open it through ZenMap's scan import...

6.9CVSS5.3AI score0.00017EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/04/26 12:0 a.m.1 views

PT-2026-35244

InfraRecorder 0.53 contains a denial of service vulnerability that allows local attackers to crash the application by importing a maliciously crafted text file. Attackers can create a text file containing 6000 bytes of data and import it through the Edit menu's Import function to trigger an...

6.9CVSS5.2AI score0.00018EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/04/26 12:0 a.m.7 views

Nmap 安全漏洞

Nmap is an open-source tool for network discovery and security scanning developed by Nmap. Version 7.70 of Nmap contains a security vulnerability. This vulnerability arises from handling malicious XML files containing exponentially growing entity extensions, which can lead to a denial-of-service...

6.9CVSS5.8AI score0.00017EPSS
Exploits0References2
Veracode
Veracode
added 2026/04/25 5:27 a.m.3 views

OpenMage LTS: Cross-user Wishlist Import Leads To Private Option & File Disclosure

Cross-user wishlist item import via shared wishlist code, leading to private option disclosure and file-disclosure variant Summary The shared wishlist add-to-cart endpoint authorizes access with a public "sharingcode", but loads the acted-on wishlist item by a separate global "wishlistitemid" and...

5.4CVSS5.7AI score0.0002EPSS
Exploits1Affected Software1
Rows per page
Query Builder