Lucene search
K

10 matches found

Cvelist
Cvelist
added 2026/02/17 12:0 a.m.22 views

CVE-2025-70846

lty628 aidigu v1.9.1 is vulnerable to Cross Site Scripting XSS on the /tools/Password/add page in the input field password...

0.00045EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/17 12:0 a.m.1 views

CVE-2025-70846

lty628 aidigu v1.9.1 is vulnerable to Cross Site Scripting XSS on the /tools/Password/add page in the input field password...

5.4AI score0.00045EPSS
Exploits0References3
CVE
CVE
added 2026/02/12 12:0 a.m.5 views

CVE-2025-70845

CVE-2025-70845 affects lty628 aidigu v1.9.1. The vulnerability is a Cross Site Scripting (XSS) flaw on the /setting/ page, where the "intro" field is not properly sanitized or escaped. The available sources confirm the flaw but do not provide details on exploit scenarios, affected versions beyond...

6.1CVSS5.4AI score0.00039EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/12 12:0 a.m.2 views

CVE-2025-70845

lty628 aidigu v1.9.1 is vulnerable to Cross Site Scripting XSS exists in the /setting/ page where the "intro" field is not properly sanitized or escaped...

5.4AI score0.00039EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-20786

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00324EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/07/11 5:21 a.m.6 views

CVE-2025-7216

A vulnerability, which was classified as critical, was found in lty628 Aidigu up to 1.8.2. This affects the function checkUserCookie of the file /application/common.php of the component PHP Object Handler. The manipulation of the argument rememberMe leads to deserialization. It is possible to...

7.5CVSS7.2AI score0.00324EPSS
Exploits0References1
NVD
NVD
added 2025/07/09 5:15 a.m.4 views

CVE-2025-7216

A vulnerability, which was classified as critical, was found in lty628 Aidigu up to 1.8.2. This affects the function checkUserCookie of the file /application/common.php of the component PHP Object Handler. The manipulation of the argument rememberMe leads to deserialization. It is possible to...

7.5CVSS0.00324EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/07/09 4:32 a.m.2 views

CVE-2025-7216 lty628 Aidigu PHP Object common.php checkUserCookie deserialization

A vulnerability, which was classified as critical, was found in lty628 Aidigu up to 1.8.2. This affects the function checkUserCookie of the file /application/common.php of the component PHP Object Handler. The manipulation of the argument rememberMe leads to deserialization. It is possible to...

7.5CVSS7.2AI score0.00324EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/07/09 4:32 a.m.7 views

CVE-2025-7216 lty628 Aidigu PHP Object common.php checkUserCookie deserialization

A vulnerability, which was classified as critical, was found in lty628 Aidigu up to 1.8.2. This affects the function checkUserCookie of the file /application/common.php of the component PHP Object Handler. The manipulation of the argument rememberMe leads to deserialization. It is possible to...

7.5CVSS0.00324EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/07/09 12:0 a.m.0 views

PT-2025-28842 · Unknown · Lty628 Aidigu

Name of the Vulnerable Software and Affected Versions: lty628 Aidigu versions up to 1.8.2 Description: A critical vulnerability exists in lty628 Aidigu. The issue affects the checkUserCookie function within the PHP Object Handler component, located in the /application/common.php file. Manipulatio...

7.5CVSS7.2AI score0.00324EPSS
Exploits0References8
Rows per page
Query Builder