Lucene search
K

9 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-29288

Malicious code in bioql PyPI...

7.8CVSS7.6AI score0.00184EPSS
Exploits2References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-1316

Malicious code in bioql PyPI...

4.3CVSS4.8AI score0.00367EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-17259

Malicious code in bioql PyPI...

9.8CVSS9.5AI score0.00415EPSS
Exploits1References1
Github Security Blog
Github Security Blog
added 2025/02/10 8:25 p.m.8 views

Server-Side Request Forgery (SSRF) in activitypub_federation

Summary This vulnerability allows a user to bypass any predefined hardcoded URL path or security anti-Localhost mechanism and perform an arbitrary GET request to any Host, Port and URL using a Webfinger Request. Details The Webfinger endpoint takes a remote domain for checking accounts as a...

4CVSS4.7AI score0.00054EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/10/16 12:0 a.m.1 views

PT-2023-29440 · Unknown · Engelsystem

Name of the Vulnerable Software and Affected Versions: Engelsystem versions prior to the version containing commit ee7d30b33 Description: Engelsystem is a shift planning system for chaos events. A Blind SSRF in the "Import schedule" functionality makes it possible to perform a port scan against t...

2.3CVSS3.5AI score0.00023EPSS
Exploits1References7
Veracode
Veracode
added 2020/10/28 5:49 p.m.28 views

Information Disclosure

puppet is vulnerable to information disclosure. The vulnerability exists due to leak sensitive information via metrics API which allows an attacker to access on localhost by default...

7.5CVSS7AI score0.65366EPSS
Exploits0References3Affected Software243
OpenVAS
OpenVAS
added 2012/04/30 12:0 a.m.22 views

Debian Security Advisory DSA 2452-1 (apache2)

The remote host is missing an update to apache2 announced via advisory DSA 2452-1. OpenVAS Vulnerability Test $Id: deb24521.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2452-1 apache2 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

4.4CVSS0.5AI score0.00052EPSS
Exploits0
securityvulns
securityvulns
added 2001/08/31 12:0 a.m.27 views

gnut gnutella client html injection

Hello I recently discovered a bug in gnut, a console/www Gnutella client for Linux and Windows, that allows the injection of html code in the Search Result Page of the Webfrontend. This is done by sharing a file with html tags embedded. testHR.mp3 for example More complex things are possible with...

7.7AI score
Exploits0
securityvulns
securityvulns
added 2000/06/27 12:0 a.m.40 views

Andrew Lewis

The Problem: ------------ Many admins who use Proxy+ configure the remote administration port which works over HTTP to only accept connections from the localhost. Fortunately enough, the admin port doesn't allow connections which have been bounced through the HTTP proxy. The telnet proxy, on the...

7.5AI score
Exploits0
Rows per page
Query Builder