Beyond CVSS: Critical CVE Vulnerabilities Analysis

Attackers don't care about your CVSS scores. They care about finding a path into your network. That path might not be a single, glaring "critical" vulnerability. Often, it’s a chain of lower-severity weaknesses on overlooked assets that, when combined, give them the keys to the kingdom. This is w...

EUVD-2017-2605

Malware in sbrugna...

MAL-2025-33477 Malicious code in snap-score-meaning010 (npm)

The package snap-score-meaning010 was found to contain malicious code...

bpf: Fix overloading of MEM_UNINIT's meaning

...

CVE-2022-33745

insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF see XSA-273, PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / val...

meaning-of-names.com XSS vulnerability

Open Bug Bounty ID: OBB-669886 Description| Value ---|--- Affected Website:| meaning-of-names.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

FineCMS Cross-Site Scripting Vulnerability (CNVD-2017-15549)

FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework development for multiple terminals, including Pc-side web pages and mobile web pages, support for customized content models and member models, and can be customized fields, can be...

CVE-2017-10967: Improper Neutralization of Input During Web Page Generation

In FineCMS before 2017-07-06, application\core\controller\config.php allows XSS in the 1 keyname, 2 keyvalue, and 3 meaning parameters...