Lucene search
+L

110 matches found

Kitploit
Kitploit
•added 2026/10/12 8:46 p.m.•13 views

Jammer-Loc

Jammer-Loc This repository includes the code and the Dataset Link for the paper “Machine and Deep Learning for Indoor UWB Jammer Localization.” Usage Example Run the hyperparameter optimization process: python hpo.py \ --task classification \ --mode actual \ --framework ml \ --config config.yaml ...

6.1AI score
SaveExploits0
attackerkb
attackerkb
•added 2026/07/05 8:00 p.m.•23 views

CVE-2026-14768

A weakness has been identified in code-projects Real State Services 1.0. This vulnerability affects unknown code of the file /builderHome.php. This manipulation of the argument loc causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...

7.5CVSS6.8AI score0.00431EPSS
SaveExploits0References6Affected Software1
NVD
NVD
•added 2026/07/05 12:17 p.m.•29 views

CVE-2026-14744

A security flaw has been discovered in code-projects Real State Services 1.0. This affects an unknown function of the file /normalHomeRent.php. Performing a manipulation of the argument loc results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to...

7.5CVSS0.00431EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/07/05 11:15 a.m.•19 views

CVE-2026-14744 code-projects Real State Services normalHomeRent.php sql injection

A security flaw has been discovered in code-projects Real State Services 1.0. This affects an unknown function of the file /normalHomeRent.php. Performing a manipulation of the argument loc results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/07/05 11:15 a.m.•17 views

CVE-2026-14744

A security flaw has been discovered in code-projects Real State Services 1.0. This affects an unknown function of the file /normalHomeRent.php. Performing a manipulation of the argument loc results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to...

7.5CVSS6.8AI score0.00431EPSS
SaveExploits0References6Affected Software1
CVE
CVE
•added 2026/07/05 11:15 a.m.•66 views

CVE-2026-14744

CVE-2026-14744 affects code-projects Real State Services 1.0. The vulnerability exists in an unknown function of /normalHomeRent.php where manipulating the loc argument allows SQL injection. Exploitation is possible remotely, and public exploits have been released. No remediation details are prov...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/07/05 11:00 a.m.•17 views

CVE-2026-14743 code-projects Real State Services normalHomeSale.php sql injection

A vulnerability was identified in code-projects Real State Services 1.0. The impacted element is an unknown function of the file /normalHomeSale.php. Such manipulation of the argument loc leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might ...

7.5CVSS7.1AI score0.00431EPSS
SaveExploits0References6
CVE
CVE
•added 2026/07/05 11:00 a.m.•57 views

CVE-2026-14743

CVE-2026-14743 affects the code-projects Real State Services 1.0. The vulnerability is a SQL injection in an unknown function of the file /normalHomeSale.php triggered by manipulating the loc argument. Exploitation can be performed remotely, and public exploit code is available. The provided docu...

7.5CVSS7.1AI score0.00431EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/07/05 11:00 a.m.•65 views

CVE-2026-14743 code-projects Real State Services normalHomeSale.php sql injection

A vulnerability was identified in code-projects Real State Services 1.0. The impacted element is an unknown function of the file /normalHomeSale.php. Such manipulation of the argument loc leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might ...

7.5CVSS0.00431EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/05 12:00 a.m.•6 views

CVE-2026-14744: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in code-projects Real State Services 1.0. This affects an unknown function of the file /normalHomeRent.php. Performing a manipulation of the argument loc results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/05 12:00 a.m.•9 views

CVE-2026-14768: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Real State Services 1.0. This vulnerability affects unknown code of the file /builderHome.php. This manipulation of the argument loc causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/05 12:00 a.m.•9 views

CVE-2026-14743: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in code-projects Real State Services 1.0. The impacted element is an unknown function of the file /normalHomeSale.php. Such manipulation of the argument loc leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might ...

7.5CVSS7.1AI score0.00431EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/06/05 7:21 p.m.•23 views

CVE-2026-41237

Froxlor is open source server administration software. In version 2.3.6 and earlier, the LOC record regex uses \s+ which matches newlines allowing embedded newlines to pass, TLSA matchingType=0 has no upper bound on hex data length, and all validators return raw input without zone-file escaping...

8.6CVSS5.7AI score0.00467EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/06/04 5:55 p.m.•21 views

CVE-2026-41237 Froxlor has an incomplete fix for CVE-2026-30932

Froxlor is open source server administration software. In version 2.3.6 and earlier, the LOC record regex uses \s+ which matches newlines allowing embedded newlines to pass, TLSA matchingType=0 has no upper bound on hex data length, and all validators return raw input without zone-file escaping...

8.6CVSS5.8AI score0.00679EPSS
SaveExploits1References5
CVE
CVE
•added 2026/06/04 5:55 p.m.•76 views

CVE-2026-41237

Froxlor CVE-2026-41237 affects versions 2.3.6 and earlier, where the LOC record regex uses \s+ allowing embedded newlines, TLSA matchingType=0 has no upper bound on hex data length, and validators return raw input without zone-file escaping. Version 2.3.7 includes an updated patch. Technical deta...

8.6CVSS5.7AI score0.00467EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/06/04 5:55 p.m.•28 views

EUVD-2026-34316

Froxlor is open source server administration software. In version 2.3.6 and earlier, the LOC record regex uses \s+ which matches newlines allowing embedded newlines to pass, TLSA matchingType=0 has no upper bound on hex data length, and all validators return raw input without zone-file escaping...

8.6CVSS5.7AI score0.00467EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/06/04 12:00 a.m.•28 views

Froxlor 注入漏洞

Froxlor is a set of lightweight server management software developed by the Froxlor team. Versions of Froxlor 2.3.6 and earlier contained an injection vulnerability. This vulnerability stemmed from the LOC record’s regular expression matching of line breaks, and the unlimited TLSA validation, whi...

8.6CVSS5.8AI score0.00467EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/04 12:00 a.m.•7 views

CVE-2026-41237: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Froxlor is open source server administration software. In version 2.3.6 and earlier, the LOC record regex uses \s+ which matches newlines allowing embedded newlines to pass, TLSA matchingType=0 has no upper bound on hex data length, and all validators return raw input without zone-file escaping...

8.6CVSS5.7AI score0.00467EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/29 12:00 a.m.•59 views

PT-2026-44908

Name of the Vulnerable Software and Affected Versions Froxlor versions 2.3.6 and earlier Description DNS record content is concatenated directly into bind9 zone files in the DnsEntry.php file, which allows for zone file injection. The issue stems from incomplete validation of LOC, RP, SSHFP, and...

8.6CVSS6.1AI score0.00467EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/05/27 3:33 p.m.•23 views

EUVD-2026-32370

In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: fix recursive pcilockrescanremove locking in EEH event handling The recent commit 1010b4c012b0 "powerpc/eeh: Make EEH driver device hotplug safe" restructured the EEH driver to improve synchronization with the PCI...

5.6AI score0.00162EPSS
SaveExploits0References9
Rows per page
Query Builder