Lucene search
+L

299 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/04 12:00 a.m.•2 views

CVE-2026-7732: Unrestricted Upload of File with Dangerous Type

A vulnerability was detected in code-projects BloodBank Managing System 1.0. The impacted element is an unknown function of the file requestblood.php. The manipulation results in unrestricted upload. The attack can be executed remotely. The exploit is now public and may be used...

6.5CVSS6.4AI score0.00347EPSS
SaveExploits0References3
NVD
NVD
•added 2026/04/26 10:17 p.m.•19 views

CVE-2018-25263

Faleemi Desktop Software 1.8.2 contains a local buffer overflow vulnerability in the Device alias field that allows local attackers to trigger a structured exception handler SEH overwrite. Attackers can craft a malicious payload and paste it into the Device alias field within the Managing Log...

8.6CVSS0.00147EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/04/26 1:19 p.m.•8 views

CVE-2018-25263

Faleemi Desktop Software 1.8.2 contains a local buffer overflow vulnerability in the Device alias field that allows local attackers to trigger a structured exception handler SEH overwrite. Attackers can craft a malicious payload and paste it into the Device alias field within the Managing Log...

8.6CVSS6.2AI score0.00147EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2026/04/26 1:19 p.m.•20 views

EUVD-2018-21791

Faleemi Desktop Software 1.8.2 contains a local buffer overflow vulnerability in the Device alias field that allows local attackers to trigger a structured exception handler SEH overwrite. Attackers can craft a malicious payload and paste it into the Device alias field within the Managing Log...

8.6CVSS6.3AI score0.00147EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/26 12:00 a.m.•21 views

Faleemi Desktop Software 安全漏洞

Faleemi Desktop Software is a desktop application developed by Faleemi Corporation in the United States. Version 1.8.2 of Faleemi Desktop Software contains a security vulnerability. This vulnerability stems from a local buffer overflow in the Device alias field. It may allow local attackers to...

8.6CVSS6.4AI score0.00147EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/26 12:00 a.m.•17 views

PT-2026-35241

Faleemi Desktop Software 1.8.2 contains a local buffer overflow vulnerability in the Device alias field that allows local attackers to trigger a structured exception handler SEH overwrite. Attackers can craft a malicious payload and paste it into the Device alias field within the Managing Log...

8.6CVSS6.2AI score0.00147EPSS
SaveExploits0References4
GithubExploit
GithubExploit
•added 2026/04/13 4:49 p.m.•124 views

Stored-Cross-Site-Scripting-XSS-in-Donor-Registration-Leading-to-Admin-Session-Hijacking

Stored XSS in BloodBank Managing System — Donor Registration...

5.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/04/02 5:04 a.m.•22 views

CVE-2026-5240

A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. This affects an unknown part of the file /adminstate.php. The manipulation of the argument statename leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

5.3CVSS4.2AI score0.00449EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/01 12:31 a.m.•17 views

EUVD-2026-17735

A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. This affects an unknown part of the file /adminstate.php. The manipulation of the argument statename leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

5.3CVSS4.2AI score0.00449EPSS
SaveExploits0References6
NVD
NVD
•added 2026/04/01 12:16 a.m.•22 views

CVE-2026-5240

A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. This affects an unknown part of the file /adminstate.php. The manipulation of the argument statename leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

5.3CVSS0.00449EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/01 12:00 a.m.•2 views

CVE-2026-5240: Improper Neutralization of Input During Web Page Generation

A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. This affects an unknown part of the file /adminstate.php. The manipulation of the argument statename leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

5.3CVSS3.8AI score0.00449EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/31 11:45 p.m.•37 views

CVE-2026-5240

CVE-2026-5240 affects code-projects BloodBank Managing System 1.0. The issue arises in an unknown part of /admin_state.php where manipulating the statename argument causes a cross-site scripting (XSS) vulnerability. The description notes remote initiation and that the exploit has been publicly di...

5.3CVSS4AI score0.00449EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/03/31 11:45 p.m.•8 views

CVE-2026-5240 code-projects BloodBank Managing System admin_state.php cross site scripting

A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. This affects an unknown part of the file /adminstate.php. The manipulation of the argument statename leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

5.3CVSS4AI score0.00449EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/03/31 11:45 p.m.•50 views

CVE-2026-5240 code-projects BloodBank Managing System admin_state.php cross site scripting

A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. This affects an unknown part of the file /adminstate.php. The manipulation of the argument statename leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

5.3CVSS0.00449EPSS
SaveExploits0References5
Fedora
Fedora
•added 2026/03/09 1:02 a.m.•17 views

[SECURITY] Fedora 42 Update: k9s-0.50.18-1.fc42

Kubernetes CLI To Manage Your Clusters In Style!...

8.2CVSS7AI score0.00623EPSS
SaveExploits3
Vulnrichment
Vulnrichment
•added 2025/11/29 2:25 a.m.•7 views

CVE-2025-53900 Kiteworks MFT has a Privilege Defined With Unsafe Actions

Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, an unfavourable definition of roles and permissions in Kiteworks MFT on managing Connections could lead to unexpected escalation of privileges for authorized users. This issue has been patched in version 9.1.0...

6.5CVSS5.7AI score0.01138EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/29 2:25 a.m.•15 views

EUVD-2025-199895

Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, an unfavourable definition of roles and permissions in Kiteworks MFT on managing Connections could lead to unexpected escalation of privileges for authorized users. This issue has been patched in version 9.1.0...

6.5CVSS6.5AI score0.01138EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/11 8:46 p.m.•9 views

EUVD-2025-103855

Malicious code in managingcuckooz3n npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/11 8:11 p.m.•8 views

EUVD-2025-96538

Malicious code in managingtigerz3n npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/11 3:19 p.m.•9 views

EUVD-2025-90143

Malicious code in managingsalamanderz3n npm...

6.6AI score
SaveExploits0
Rows per page
Query Builder