Lucene search
+L

2840 matches found

OSV
OSV
•added 2025/10/14 5:16 p.m.•18 views

CVE-2025-59257

Improper validation of specified type of input in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...

6.5CVSS7.5AI score0.01513EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/14 5:15 p.m.•15 views

CVE-2025-59190

Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally...

5.5CVSS0.00501EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2025/10/14 2:00 p.m.•11 views

Windows Authentication Elevation of Privilege Vulnerability

Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...

7.8CVSS7.7AI score0.0038EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/10/14 2:00 p.m.•19 views

Windows Local Session Manager (LSM) Denial of Service Vulnerability

Improper validation of specified type of input in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...

6.5CVSS7.5AI score0.01513EPSS
SaveExploits0
CNNVD
CNNVD
•added 2025/10/14 12:00 a.m.•23 views

Rockwell Automation Comms-1783-NATR 安全漏洞

Rockwell Automation Comms-1783-NATR is an industrial Ethernet address translation device from Rockwell Automation. The Rockwell Automation Comms-1783-NATR is vulnerable to a cross-site scripting vulnerability that is caused by improper validation of user-supplied input. An attacker could exploit...

8.5CVSS5.9AI score0.00262EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/11 1:15 a.m.•14 views

CVE-2025-31717

In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

7.5CVSS0.00639EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/10 9:27 p.m.•17 views

CVE-2025-61773

pyLoad is a free and open-source download manager written in Python. In versions prior to 0.5.0b3.dev91, pyLoad web interface contained insufficient input validation in both the Captcha script endpoint and the Click'N'Load CNL Blueprint. This flaw allowed untrusted user input to be processed...

8.1CVSS6.2AI score0.00415EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/10 8:19 a.m.•18 views

EUVD-2025-33689

Stored Cross-Site Scripting XSS vulnerability in Energy CRM v2025 by Status Tracker Ltd, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request to “/crm/createinvoicesubmit.php”, using the “customerName0” parameter. This vulnerability could allow a...

5.1CVSS4.4AI score0.00207EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2025/10/09 7:02 p.m.•542 views

Exploit for Improper Input Validation in Microsoft

MSMQ Vulnerability Proof of Concept This repository contains...

9.8CVSS8.6AI score0.95454EPSS
SaveExploits8
Positive Technologies
Positive Technologies
•added 2025/10/09 12:00 a.m.•20 views

PT-2025-41449

Name of the Vulnerable Software and Affected Versions pyLoad versions prior to 0.5.0b3.dev91 Description pyLoad is a free and open-source download manager written in Python. Versions prior to 0.5.0b3.dev91 have insufficient input validation in the web interface, specifically in the Captcha script...

8.1CVSS5.9AI score0.00415EPSS
SaveExploits0References15
CVE
CVE
•added 2025/10/07 12:37 p.m.•46 views

CVE-2025-40887

CVE-2025-40887 describes a SQL Injection in the Alert functionality of Nozomi Guardians/CMC. The issue arises from improper validation of an input parameter, enabling an authenticated user with limited privileges to run arbitrary SELECT SQL statements against the backend DBMS, potentially exposin...

6.5CVSS6.3AI score0.00239EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
•added 2025/10/07 12:36 p.m.•12 views

CVE-2025-40886 Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0

A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SQL statements on the DBMS used by the web application, potentially exposing unauthorized data, altering...

7.7CVSS6.3AI score0.00266EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2017-15818

Malware in sbrugna...

5.4CVSS5.5AI score0.01242EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2018-1468

Malware in sbrugna...

7.2CVSS7.2AI score0.01029EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2018-0018

Malware in sbrugna...

4.9CVSS6.6AI score0.0144EPSS
SaveExploits0References12
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2016-9490

Malware in sbrugna...

3.5CVSS4.4AI score0.01334EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2018-18232

Malware in sbrugna...

10CVSS8.2AI score0.04536EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2018-8520

Malware in sbrugna...

7.8CVSS7.3AI score0.00319EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2009-0798

Malware in sbrugna...

6.8CVSS5.7AI score0.05491EPSS
SaveExploits1References54
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2018-2976

Malware in sbrugna...

7.5CVSS6.7AI score0.00863EPSS
SaveExploits1References3
Rows per page
Query Builder