Lucene search
+L

28 matches found

Snyk
Snyk
•added 2026/08/20 1:08 p.m.•13 views

Malicious Package

Overview kepler is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.6AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/08/05 9:31 p.m.•23 views

Malicious Package

Overview kepler is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.4AI score
SaveExploits0References2
EUVD
EUVD
•added 2026/03/21 6:31 p.m.•23 views

EUVD-2019-19899

Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the category parameter. Attackers can send GET requests to the category endpoint with URL-encoded SQL UNION statements to...

8.8CVSS6.2AI score0.00338EPSS
SaveExploits1References5
NVD
NVD
•added 2026/03/21 4:16 p.m.•23 views

CVE-2019-25576

Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the category parameter. Attackers can send GET requests to the category endpoint with URL-encoded SQL UNION statements to...

8.8CVSS0.00338EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/03/21 3:30 p.m.•7 views

CVE-2019-25576 Kepler Wallpaper Script 1.1 SQL Injection via category

Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the category parameter. Attackers can send GET requests to the category endpoint with URL-encoded SQL UNION statements to...

8.8CVSS6.5AI score0.00338EPSS
SaveExploits1References4
CVE
CVE
•added 2026/03/21 3:30 p.m.•24 views

CVE-2019-25576

CVE-2019-25576 affects Kepler Wallpaper Script 1.1 and is described as an SQL injection in the category parameter. An unauthenticated attacker can send GET requests with URL-encoded SQL UNION statements to retrieve data such as usernames, database names, and MySQL version details. The connected s...

8.8CVSS6.5AI score0.00338EPSS
SaveExploits1References4Affected Software1
attackerkb
attackerkb
•added 2026/03/21 3:30 p.m.•11 views

CVE-2019-25576

Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the category parameter. Attackers can send GET requests to the category endpoint with URL-encoded SQL UNION statements to...

8.8CVSS6.2AI score0.00338EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2026/03/21 12:00 a.m.•20 views

PT-2026-26924

Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the category parameter. Attackers can send GET requests to the category endpoint with URL-encoded SQL UNION statements to...

8.8CVSS6.2AI score0.00338EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2026/03/21 12:00 a.m.•20 views

Kepler Wallpaper Script SQL注入漏洞

Kepler Wallpaper Script is a desktop wallpaper generation script developed by Kepler Wallpaper Inc. Version 1.1 of Kepler Wallpaper Script contains an SQL injection vulnerability. This vulnerability stems from the category parameter, which allows for SQL injections, potentially enabling...

8.8CVSS6.1AI score0.00338EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/21 12:00 a.m.•5 views

CVE-2019-25576: Improper Neutralization of Special Elements used in an SQL Command

Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the category parameter. Attackers can send GET requests to the category endpoint with URL-encoded SQL UNION statements to...

8.8CVSS6.5AI score0.00338EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2026/02/15 12:00 a.m.•14 views

openSUSE 16 Security Update : kepler (openSUSE-SU-2026:20206-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20206-1 advisory. Update to version 0.11.3. Security issues fixed: - CVE-2025-47911: golang.org/x/net/html: quadratic complexity algorithms used when parsing...

5.3CVSS6.2AI score0.0057EPSS
SaveExploits1References6
OSV
OSV
•added 2026/02/13 8:53 a.m.•10 views

OPENSUSE-SU-2026:20206-1 Security update for kepler

This update for kepler fixes the following issues: Update to version 0.11.3. Security issues fixed: - CVE-2025-47911: golang.org/x/net/html: quadratic complexity algorithms used when parsing untrusted HTML documents bsc1251427. - CVE-2025-58190: golang.org/x/net/html: excessive memory consumption...

5.3CVSS6.1AI score0.0057EPSS
SaveExploits1References4
OSV
OSV
•added 2025/12/31 12:00 a.m.•12 views

OPENSUSE-SU-2025:15854-1 kepler-0.11.3-1.1 on GA media

These are all security issues fixed in the kepler-0.11.3-1.1 package on the GA media of openSUSE Tumbleweed...

5.3CVSS6.4AI score0.0057EPSS
SaveExploits1References2
Chainguard
Chainguard
•added 2025/08/09 1:17 p.m.•123 views

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, rancher-webhook-fips, cloudnative-pg-fips, witness, ytt, telegraf, fulcio, kyverno, nuclei, cert-manager-csi-driver, malcontent, neuvector-dbgen, kube-state-metrics, pgpool2exporter, eck-operator, certificate-transparency-fips, fixuid,...

5.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 5:08 a.m.•30 views

CVE-2023-50808

Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the Modern UI...

9.1CVSS7.1AI score0.00436EPSS
SaveExploits0
OSV
OSV
•added 2025/01/13 12:00 a.m.•9 views

OPENSUSE-SU-2025:14640-1 kepler-0.7.11-2.1 on GA media

These are all security issues fixed in the kepler-0.7.11-2.1 package on the GA media of openSUSE Tumbleweed...

5.3CVSS6.7AI score0.00868EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2024/02/13 6:15 p.m.•9 views

CVE-2023-50808

Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the Modern UI...

9.1CVSS5.8AI score0.00436EPSS
SaveExploits0References4
Prion
Prion
•added 2024/02/13 6:15 p.m.•24 views

Design/Logic Flaw

Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the Modern UI...

7.4AI score0.00436EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/02/13 12:00 a.m.•47 views

CVE-2023-50808

Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the Modern UI...

7AI score0.00436EPSS
SaveExploits0References3
CVE
CVE
•added 2024/02/13 12:00 a.m.•102 views

CVE-2023-50808

Zimbra Collaboration versions prior to Kepler 9.0.0 Patch 38 GA are vulnerable to DOM-based JavaScript injection within the Modern UI . This vulnerability allows an attacker to inject scripts, potentially leading to malicious script execution. To remediate this issue, users should update to Keple...

9.1CVSS7AI score0.00436EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder