Lucene search
+L

1075 matches found

MSRC
MSRC
added 2025/10/30 12:0 a.m.35 views

A deep dive into MUTZ

AtDEF CON 33, we shared our research into MapUrlToZone, a critical Windows security component that determines whether a given path is local, on the intranet, or on the broader Internet. This classification drives several security decisions across Windows, for example, preventing a CreateFile call...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2025/10/24 12:0 a.m.7 views

WordPress Plugin Captcha.eu Server-Side Request Forgery Attack Vulnerability

WordPress Plugin Captcha.eu is a CAPTCHA plugin for the WordPress platform, which is mainly used to prevent bots from attacking and is also compliant with GDPR General Data Protection Regulation. WordPress Plugin Captcha.eu suffers from a server-side request forgery attack vulnerability that stem...

5.3CVSS7.1AI score0.002EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/22 4:16 a.m.12 views

CVE-2025-62771

Mercku M6a devices through 2.1.0 allow password changes via intranet CSRF attacks...

7.5CVSS0.0014EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.6 views

Wordpress Plugin Captcha.eu 安全漏洞

WordPress Plugin Captcha.eu is a CAPTCHA plugin for the WordPress platform, which is mainly used to prevent bots from attacking and is also compliant with GDPR General Data Protection Regulation. WordPress Plugin Captcha.eu suffers from a server-side request forgery attack vulnerability that stem...

5.4CVSS7AI score0.002EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/22 12:0 a.m.2 views

CVE-2025-62771

Mercku M6a devices through 2.1.0 allow password changes via intranet CSRF attacks...

7.5CVSS6.7AI score0.0014EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/22 12:0 a.m.14 views

CVE-2025-62771

Mercku M6a devices through 2.1.0 allow password changes via intranet CSRF attacks...

7.5CVSS0.0014EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/22 12:0 a.m.6 views

EUVD-2025-35316

Mercku M6a devices through 2.1.0 allow password changes via intranet CSRF attacks...

7.5CVSS6.6AI score0.0014EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.5 views

WordPress plugin Pz-LinkCard 安全漏洞

WordPress Pz-LinkCard plugin is a WordPress plugin that is mainly used to display links in the form of cards, support custom display of external and internal links, and optimize social sharing and other features. WordPress Pz-LinkCard plugin suffers from a server-side request forgery vulnerabilit...

3.8CVSS6.8AI score0.00181EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/09 1:13 a.m.7 views

CVE-2025-48981

An insecure implementation of the proprietary protocol DNET in Product CGM MEDICO allows attackers within the intranet to eavesdrop and manipulate data on the protocol because encryption is optional for this connection...

8.6CVSS6.9AI score0.00111EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/08 1:15 a.m.4 views

CVE-2025-48981

An insecure implementation of the proprietary protocol DNET in Product CGM MEDICO allows attackers within the intranet to eavesdrop and manipulate data on the protocol because encryption is optional for this connection...

8.6CVSS0.00111EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/08 12:49 a.m.15 views

CVE-2025-48981

CVE-2025-48981 affects CGM MEDICO; an insecure implementation of the DNET protocol allows intranet attackers to eavesdrop and manipulate data because encryption for this connection is optional. Descriptions from NVD/Red Hat confirm the same impact; CVSS shows NETWORK with high confidentiality imp...

8.6CVSS6.5AI score0.00111EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/08 12:49 a.m.3 views

CVE-2025-48981

An insecure implementation of the proprietary protocol DNET in Product CGM MEDICO allows attackers within the intranet to eavesdrop and manipulate data on the protocol because encryption is optional for this connection...

6.5AI score0.00111EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/08 12:49 a.m.13 views

CVE-2025-48981

An insecure implementation of the proprietary protocol DNET in Product CGM MEDICO allows attackers within the intranet to eavesdrop and manipulate data on the protocol because encryption is optional for this connection...

0.00111EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/08 12:0 a.m.9 views

PT-2025-41207

Name of the Vulnerable Software and Affected Versions CGM MEDICO affected versions not specified Description An insecure implementation of the proprietary protocol DNET allows attackers within the intranet to eavesdrop and manipulate data. This is due to encryption being optional for connections...

8.6CVSS6.4AI score0.00111EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2019-17184

Malware in sbrugna...

7.7CVSS7.5AI score0.05155EPSS
SaveExploits5References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2015-9085

Malware in sbrugna...

5.3CVSS5.5AI score0.00922EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2017-14622

Malware in sbrugna...

7.4CVSS7.5AI score0.0157EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-23368

Malware in sbrugna...

5.3CVSS5.6AI score0.01661EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2019-0319

Malware in sbrugna...

9.3CVSS8.1AI score0.01682EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2015-2906

Malware in sbrugna...

5CVSS6.4AI score0.01113EPSS
SaveExploits0References3
Rows per page
Query Builder