Lucene search
K

46 matches found

Positive Technologies
Positive Technologies
added 2025/02/12 12:0 a.m.2 views

PT-2025-7137 · Q Free · Q-Free Maxtime

Name of the Vulnerable Software and Affected Versions: Q-Free MaxTime versions prior to 2.11.0 Description: The issue is related to an improper neutralization of special elements used in an SQL command, also known as SQL Injection. This occurs in the maxprofile/menu/model.lua file, specifically a...

5.5CVSS8.1AI score0.00184EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/02/12 12:0 a.m.3 views

PT-2025-7148 · Q Free · Q-Free Maxtime

Name of the Vulnerable Software and Affected Versions: Q-Free MaxTime versions 2.11.0 and earlier Description: The issue is related to a missing authentication for a critical function in the maxprofile/accounts/routes.lua file. This allows an unauthenticated remote attacker to reset user PINs via...

9.8CVSS7.2AI score0.01293EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2022/07/14 12:0 a.m.3 views

PT-2022-18984 · Verizon · Verizon 5G Home Lvskihp Outdoorunit

Name of the Vulnerable Software and Affected Versions: Verizon 5G Home LVSKIHP OutDoorUnit ODU version 3.33.101.0 Description: The issue arises from improper sanitization of user-controlled parameters within the crtcsimprofile function of the crtcrpc JSON listener. This allows a remote attacker o...

9.8CVSS9.6AI score0.04386EPSS
Exploits1References4
Exploit DB
Exploit DB
added 2020/03/11 12:0 a.m.32 views

Wing FTP Server - Authenticated CSRF (Delete Admin)

Exploit Title: Wing FTP Server 6.2.3 - Privilege Escalation Date: 2020-03-10 Exploit Author: Dhiraj Mishra Vendor Homepage: https://www.wftpserver.com Version: v6.2.6 Tested on: Windows 10 Summary: An authenticated CSRF exists in web client and web administration of Wing FTP v6.2.6, a crafted HTM...

7.4AI score
Exploits0
OSV
OSV
added 2019/04/09 9:29 p.m.3 views

CVE-2019-0805

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver luafv.sys, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0836, CVE-2019-0841...

7.8CVSS7AI score0.00303EPSS
Exploits2References3
CNVD
CNVD
added 2018/06/01 12:0 a.m.2 views

Remote Code Execution Vulnerability in Multiple TP-LINK Products

TP-LINK IPC TL-IPC223P-6 and so on are all different models of network camera products from China P&L TP-LINK. A remote code execution vulnerability exists in multiple TP-LINK products, which originates from the /usr/lib/lua/luci/torchlight/validator.lua file receiving multiple punctuation...

8.8CVSS9.3AI score0.01677EPSS
Exploits0References1
Rows per page
Query Builder