Lucene search
K

25 matches found

EUVD
EUVD
added 2026/03/21 6:31 p.m.3 views

EUVD-2019-19899

Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the category parameter. Attackers can send GET requests to the category endpoint with URL-encoded SQL UNION statements to...

8.8CVSS6.2AI score0.00109EPSS
Exploits1References5
NVD
NVD
added 2026/03/21 4:16 p.m.3 views

CVE-2019-25576

Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the category parameter. Attackers can send GET requests to the category endpoint with URL-encoded SQL UNION statements to...

8.8CVSS0.00109EPSS
Exploits1References4
CVE
CVE
added 2026/03/21 3:30 p.m.6 views

CVE-2019-25576

CVE-2019-25576 affects Kepler Wallpaper Script 1.1 and is described as an SQL injection in the category parameter. An unauthenticated attacker can send GET requests with URL-encoded SQL UNION statements to retrieve data such as usernames, database names, and MySQL version details. The connected s...

8.8CVSS6.2AI score0.00109EPSS
Exploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/21 3:30 p.m.2 views

CVE-2019-25576

Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the category parameter. Attackers can send GET requests to the category endpoint with URL-encoded SQL UNION statements to...

8.8CVSS6.2AI score0.00109EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/21 3:30 p.m.0 views

CVE-2019-25576 Kepler Wallpaper Script 1.1 SQL Injection via category

Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the category parameter. Attackers can send GET requests to the category endpoint with URL-encoded SQL UNION statements to...

8.8CVSS6.2AI score0.00109EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/03/21 12:0 a.m.3 views

PT-2026-26924

Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the category parameter. Attackers can send GET requests to the category endpoint with URL-encoded SQL UNION statements to...

8.8CVSS6.2AI score0.00109EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/03/21 12:0 a.m.3 views

Kepler Wallpaper Script SQL注入漏洞

Kepler Wallpaper Script is a desktop wallpaper generation script developed by Kepler Wallpaper Inc. Version 1.1 of Kepler Wallpaper Script contains an SQL injection vulnerability. This vulnerability stems from the category parameter, which allows for SQL injections, potentially enabling...

8.8CVSS6.1AI score0.00109EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2026/02/15 12:0 a.m.2 views

openSUSE 16 Security Update : kepler (openSUSE-SU-2026:20206-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20206-1 advisory. Update to version 0.11.3. Security issues fixed: - CVE-2025-47911: golang.org/x/net/html: quadratic complexity algorithms used when parsing...

5.3CVSS8.1AI score0.00017EPSS
Exploits1References6
OSV
OSV
added 2026/02/13 8:53 a.m.3 views

OPENSUSE-SU-2026:20206-1 Security update for kepler

This update for kepler fixes the following issues: Update to version 0.11.3. Security issues fixed: - CVE-2025-47911: golang.org/x/net/html: quadratic complexity algorithms used when parsing untrusted HTML documents bsc1251427. - CVE-2025-58190: golang.org/x/net/html: excessive memory consumption...

5.3CVSS7AI score0.00017EPSS
Exploits1References4
OSV
OSV
added 2025/12/31 12:0 a.m.2 views

OPENSUSE-SU-2025:15854-1 kepler-0.11.3-1.1 on GA media

These are all security issues fixed in the kepler-0.11.3-1.1 package on the GA media of openSUSE Tumbleweed...

5.3CVSS7.2AI score0.00017EPSS
Exploits1References2
Chainguard
Chainguard
added 2025/08/09 1:17 p.m.8 views

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: overmind, tofu-controller, xeol-fips, go-md2man, kubescape-operator, cilium-certgen, karma, sops-fips, custom-pod-autoscaler-fips, k6-fips, dapr-fips, nvidia-container-toolkit, step-issuer, snyk-cli, harbor, dragonfly-operator, amazon-ssm-agent, aws-flb-cloudwatch,...

5.4AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 5:8 a.m.6 views

CVE-2023-50808

Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the Modern UI...

9.1CVSS7.1AI score0.0053EPSS
Exploits0
OSV
OSV
added 2025/01/13 12:0 a.m.6 views

OPENSUSE-SU-2025:14640-1 kepler-0.7.11-2.1 on GA media

These are all security issues fixed in the kepler-0.7.11-2.1 package on the GA media of openSUSE Tumbleweed...

5.3CVSS6.7AI score0.00046EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2024/02/13 6:15 p.m.1 views

CVE-2023-50808

Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the Modern UI...

9.1CVSS5.8AI score0.0053EPSS
Exploits0References4
Prion
Prion
added 2024/02/13 6:15 p.m.9 views

Design/Logic Flaw

Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the Modern UI...

7.4AI score0.0053EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/02/13 12:0 a.m.11 views

CVE-2023-50808

Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the Modern UI...

7AI score0.0053EPSS
Exploits0References3
CVE
CVE
added 2024/02/13 12:0 a.m.72 views

CVE-2023-50808

CVE-2023-50808 affects Zimbra Collaboration prior to Kepler 9.0.0 Patch 38 GA, where the Modern UI is vulnerable to DOM-based JavaScript injection. The root cause is DOM manipulation in the Modern UI that enables injected script execution, as described across multiple sources. Impact statements i...

9.1CVSS7AI score0.0053EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/02/13 12:0 a.m.3 views

PT-2024-13974 · Zimbra · Zimbra Collaboration

Name of the Vulnerable Software and Affected Versions: Zimbra Collaboration versions prior to Kepler 9.0.0 Patch 38 GA Description: The issue allows DOM-based JavaScript injection in the Modern UI. This could potentially lead to malicious script execution. No information is provided about the...

9.1CVSS7.3AI score0.0053EPSS
Exploits0References8
Exploit DB
Exploit DB
added 2019/01/21 12:0 a.m.271 views

Kepler Wallpaper Script 1.1 - SQL Injection

Exploit Title: Kepler Wallpaper Script 1.1 - SQL Injection Dork: N/A Date: 2019-01-19 Exploit Author: Ihsan Sencan Vendor Homepage: https://keplerwallpapers.online/ Software Link: https://codeclerks.com/PHP/1559/Kepler-Wallpaper-Script Version: 1.1 Category: Webapps Tested on: WiN7x64/KaLiLinuXx6...

7AI score
Exploits0
exploitpack
exploitpack
added 2019/01/21 12:0 a.m.13 views

Kepler Wallpaper Script 1.1 - SQL Injection

Kepler Wallpaper Script 1.1 - SQL Injection Exploit Title: Kepler Wallpaper Script 1.1 - SQL Injection Dork: N/A Date: 2019-01-19 Exploit Author: Ihsan Sencan Vendor Homepage: https://keplerwallpapers.online/ Software Link: https://codeclerks.com/PHP/1559/Kepler-Wallpaper-Script Version: 1.1...

0.2AI score
Exploits0
Rows per page
Query Builder