Lucene search
K

17 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-28436

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00221EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-7060

Malicious code in bioql PyPI...

9.8CVSS9.3AI score0.00444EPSS
Exploits1References6
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2020-25614

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at...

9.8CVSS8.2AI score0.00444EPSS
Exploits1References2
NVD
NVD
added 2025/05/27 3:15 p.m.8 views

CVE-2025-5247

A vulnerability, which was classified as critical, has been found in Gowabby HFish 0.1. This issue affects the function LoadUrl of the file \view\url.go. The manipulation of the argument r leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed to th...

7.5CVSS0.00221EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/05/27 3:0 p.m.14 views

CVE-2025-5247 Gowabby HFish url.go LoadUrl improper authentication

A vulnerability, which was classified as critical, has been found in Gowabby HFish 0.1. This issue affects the function LoadUrl of the file \view\url.go. The manipulation of the argument r leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed to th...

7.5CVSS0.00221EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/05/27 3:0 p.m.9 views

CVE-2025-5247 Gowabby HFish url.go LoadUrl improper authentication

A vulnerability, which was classified as critical, has been found in Gowabby HFish 0.1. This issue affects the function LoadUrl of the file \view\url.go. The manipulation of the argument r leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed to th...

7.5CVSS7.3AI score0.00221EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/05/27 12:0 a.m.2 views

PT-2025-23007 · Unknown · Gowabby Hfish

Name of the Vulnerable Software and Affected Versions: Gowabby HFish version 0.1 Description: A critical issue has been found in Gowabby HFish, affecting the LoadUrl function of the file viewurl.go. The manipulation of the argument r leads to improper authentication. This issue can be exploited...

7.5CVSS7.2AI score0.00221EPSS
Exploits0References9
CNNVD
CNNVD
added 2025/05/27 12:0 a.m.2 views

HFish 授权问题漏洞

HFish is a community-based free honeypot by Zachary Individual Developer. An authorization issue vulnerability exists in HFish version 0.1, which stems from improper authentication of parameter r by function LoadUrl in file viewurl.go...

7.5CVSS7.6AI score0.00221EPSS
Exploits0References6
OSV
OSV
added 2023/02/23 7:3 p.m.7 views

MAL-2023-4696 Malicious code in loadurl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 07a7de66a6f12492bfd80b1ccc245055129a97ccd5096f9a9f0c8e38d1e9bde2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

7.2AI score
Exploits0References1
OSV
OSV
added 2022/10/07 7:20 a.m.17 views

GHSA-93M7-C69F-5CFJ xmlquery lacks check for whether LoadURL response is in XML format, causing denial of service

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

7.5CVSS9.7AI score0.00444EPSS
Exploits1References6
OSV
OSV
added 2020/09/16 3:15 p.m.2 views

DEBIAN-CVE-2020-25614

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

9.8CVSS8.7AI score0.00444EPSS
Exploits1References1
Prion
Prion
added 2020/09/16 3:15 p.m.11 views

Format string

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

7.5CVSS9.7AI score0.00444EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2020/09/16 3:15 p.m.0 views

UBUNTU-CVE-2020-25614

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

9.8CVSS5.8AI score0.00444EPSS
Exploits1References5
Debian CVE
Debian CVE
added 2020/09/16 2:41 p.m.14 views

CVE-2020-25614

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

9.8CVSS9.8AI score0.00444EPSS
Exploits1
GitLab Advisory Database
GitLab Advisory Database
added 2020/09/16 12:0 a.m.15 views

Improper Input Validation

xmlquery lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

9.8CVSS6.4AI score0.00444EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2020/09/16 12:0 a.m.2 views

PT-2020-16128 · Xmlquery · Xmlquery

Name of the Vulnerable Software and Affected Versions: xmlquery versions prior to 1.3.1 Description: The issue allows attackers to cause a denial of service SIGSEGV or possibly have other unspecified impacts due to the lack of a check for whether a LoadURL response is in the XML format. This can...

9.8CVSS9.5AI score0.00444EPSS
Exploits1References13
Zero Day Initiative
Zero Day Initiative
added 2014/04/08 12:0 a.m.22 views

SolarWinds Server and Application Monitor C1Chart3D8 Array Indexing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Server and Application Monitor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exis...

5.1CVSS7.1AI score
Exploits0References1
Rows per page
Query Builder