Lucene search
+L

12613 matches found

OSV
OSV
•added 2026/04/27 5:16 a.m.•13 views

MAL-2026-3099 Malicious code in bytedvod (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c2b90eec61e5e2a472f910011acc1e66e407b4a240e907ac74289221e1a5e83f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

5.6AI score
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/04/27 1:00 a.m.•137 views

Exploit for CVE-2026-0911

CVE-2026-0911 — Hustle modül import PoC WordPress eklentisi...

7.5CVSS5.3AI score0.00598EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/04/27 12:00 a.m.•33 views

PT-2026-35518

Name of the Vulnerable Software and Affected Versions Pimcore version 12.3.3 Description An authenticated administrative user with permissions to import or save DataObject class definitions can inject malicious composite index metadata. This action allows the execution of unintended SQL commands ...

7CVSS6AI score0.00602EPSS
SaveExploits0References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/27 12:00 a.m.•0 views

CVE-2026-6357: Inclusion of Functionality from Untrusted Control Sphere

pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names. These module imports were intentionally deferred to increase startup time of the pip CLI. The patch changes self-update functionality to run...

5.3CVSS5.8AI score0.00171EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/26 10:17 p.m.•29 views

CVE-2018-25282

Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing malicious XML files with exponential entity expansion. Attackers can create a crafted XML file with nested entity definitions and open it through ZenMap's scan import...

6.9CVSS0.00121EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2026/04/26 6:09 p.m.•143 views

Advanced-AI-Recon-and-Exploit-Framework

reNgine: The Ultimate Web Reconnaissance & Vulnerability Scanner...

6.1AI score
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/04/26 1:19 p.m.•31 views

CVE-2018-25282 Nmap 7.70 Denial of Service via XML Entity Expansion

Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing malicious XML files with exponential entity expansion. Attackers can create a crafted XML file with nested entity definitions and open it through ZenMap's scan import...

6.9CVSS5.3AI score0.00121EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/04/26 1:19 p.m.•9 views

CVE-2018-25282

Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing malicious XML files with exponential entity expansion. Attackers can create a crafted XML file with nested entity definitions and open it through ZenMap's scan import...

6.9CVSS5.3AI score0.00121EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2026/04/26 1:19 p.m.•39 views

CVE-2018-25282

Nmap 7.70 is affected by a local denial-of-service vulnerability caused by exponential XML entity expansion in XML processing (triggered via ZenMap scan import). A crafted XML file with nested entity definitions can cause excessive resource consumption, potentially crashing the application. The C...

6.9CVSS5.3AI score0.00121EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/04/26 1:19 p.m.•20 views

EUVD-2018-21802

Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing malicious XML files with exponential entity expansion. Attackers can create a crafted XML file with nested entity definitions and open it through ZenMap's scan import...

6.9CVSS5.3AI score0.00121EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/04/26 1:19 p.m.•58 views

CVE-2018-25282 Nmap 7.70 Denial of Service via XML Entity Expansion

Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing malicious XML files with exponential entity expansion. Attackers can create a crafted XML file with nested entity definitions and open it through ZenMap's scan import...

6.9CVSS0.00121EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/04/26 1:19 p.m.•16 views

EUVD-2018-21794

InfraRecorder 0.53 contains a denial of service vulnerability that allows local attackers to crash the application by importing a maliciously crafted text file. Attackers can create a text file containing 6000 bytes of data and import it through the Edit menu's Import function to trigger an...

6.9CVSS5.3AI score0.00115EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/04/26 1:19 p.m.•13 views

CVE-2018-25274 InfraRecorder 0.53 Denial of Service via txt File Import

InfraRecorder 0.53 contains a denial of service vulnerability that allows local attackers to crash the application by importing a maliciously crafted text file. Attackers can create a text file containing 6000 bytes of data and import it through the Edit menu's Import function to trigger an...

6.9CVSS5.2AI score0.00115EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/04/26 1:19 p.m.•7 views

CVE-2018-25274

InfraRecorder 0.53 contains a denial of service vulnerability that allows local attackers to crash the application by importing a maliciously crafted text file. Attackers can create a text file containing 6000 bytes of data and import it through the Edit menu's Import function to trigger an...

6.9CVSS5.2AI score0.00115EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2026/04/26 1:19 p.m.•20 views

CVE-2018-25274

CVE-2018-25274 affects InfraRecorder 0.53. ADenial of Service vulnerability allows a local attacker to crash the application by importing a crafted text file. Specifically, a 6000-byte text file imported via the Edit → Import function can trigger the crash. The connected documents confirm the loc...

6.9CVSS5.3AI score0.00115EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/04/26 1:19 p.m.•53 views

CVE-2018-25274 InfraRecorder 0.53 Denial of Service via txt File Import

InfraRecorder 0.53 contains a denial of service vulnerability that allows local attackers to crash the application by importing a maliciously crafted text file. Attackers can create a text file containing 6000 bytes of data and import it through the Edit menu's Import function to trigger an...

6.9CVSS0.00115EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/26 12:00 a.m.•37 views

PT-2026-35252

Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing malicious XML files with exponential entity expansion. Attackers can create a crafted XML file with nested entity definitions and open it through ZenMap's scan import...

6.9CVSS5.3AI score0.00121EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/04/26 12:00 a.m.•19 views

InfraRecorder 安全漏洞

InfraRecorder is a tool software developed by InfraRecorder Inc. designed for burning discs and creating disc images. Version 0.53 of InfraRecorder contains a security vulnerability. This vulnerability stems from a denial-of-service attack when importing malicious text files. It is possible for...

6.9CVSS5.8AI score0.00115EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/26 12:00 a.m.•0 views

CVE-2018-25274: Memory Allocation with Excessive Size Value

InfraRecorder 0.53 contains a denial of service vulnerability that allows local attackers to crash the application by importing a maliciously crafted text file. Attackers can create a text file containing 6000 bytes of data and import it through the Edit menu's Import function to trigger an...

6.9CVSS5.8AI score0.00115EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/26 12:00 a.m.•15 views

PT-2026-35244

InfraRecorder 0.53 contains a denial of service vulnerability that allows local attackers to crash the application by importing a maliciously crafted text file. Attackers can create a text file containing 6000 bytes of data and import it through the Edit menu's Import function to trigger an...

6.9CVSS5.2AI score0.00115EPSS
SaveExploits0References3
Rows per page
Query Builder