Lucene search
K

39 matches found

EUVD
EUVD
added 2026/04/20 3:31 p.m.2 views

EUVD-2026-23844

A vulnerability was found in Qibo CMS 1.0. Affected by this vulnerability is an unknown functionality of the component Internal Message Module. Performing a manipulation results in cross site scripting. The attack can be initiated remotely. The exploit has been made public and could be used. The...

5.1CVSS4.1AI score0.00034EPSS
Exploits0References5
NVD
NVD
added 2026/04/20 1:16 p.m.1 views

CVE-2026-6648

A vulnerability was found in Qibo CMS 1.0. Affected by this vulnerability is an unknown functionality of the component Internal Message Module. Performing a manipulation results in cross site scripting. The attack can be initiated remotely. The exploit has been made public and could be used. The...

5.1CVSS0.00034EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/20 1:0 p.m.2 views

CVE-2026-6648

A vulnerability was found in Qibo CMS 1.0. Affected by this vulnerability is an unknown functionality of the component Internal Message Module. Performing a manipulation results in cross site scripting. The attack can be initiated remotely. The exploit has been made public and could be used. The...

5.1CVSS4.1AI score0.00034EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2026/04/20 1:0 p.m.3 views

CVE-2026-6648

CVE-2026-6648 affects Qibo CMS 1.0, specifically the Internal Message Module. The issue is a cross-site scripting vulnerability triggered by manipulating the module’s functionality. The attack is described as remotely initiable, with a publicly available exploit. Details on affected versions are ...

5.1CVSS4.1AI score0.00034EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/04/20 1:0 p.m.1 views

CVE-2026-6648 Qibo CMS Internal Message cross site scripting

A vulnerability was found in Qibo CMS 1.0. Affected by this vulnerability is an unknown functionality of the component Internal Message Module. Performing a manipulation results in cross site scripting. The attack can be initiated remotely. The exploit has been made public and could be used. The...

5.1CVSS4.1AI score0.00034EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/04/20 12:0 a.m.1 views

PT-2026-33760

A vulnerability was found in Qibo CMS 1.0. Affected by this vulnerability is an unknown functionality of the component Internal Message Module. Performing a manipulation results in cross site scripting. The attack can be initiated remotely. The exploit has been made public and could be used. The...

5.1CVSS4.1AI score0.00034EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/04/20 12:0 a.m.4 views

Qibo CMS 安全漏洞

Qibo CMS is a content management system developed by Qibo CMS Inc., designed for website construction and content publishing. Version 1.0 of Qibo CMS has a security vulnerability, which stems from improper handling of an unknown feature of the Internal Message Module component. This vulnerability...

5.1CVSS5.5AI score0.00034EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/09 3:35 p.m.1 views

EUVD-2025-209380

Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery SSRF in User Evaluation, Message, and Comment modules...

5.9AI score0.00039EPSS
Exploits0References4
NVD
NVD
added 2026/04/09 3:16 p.m.2 views

CVE-2025-50228

Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery SSRF in User Evaluation, Message, and Comment modules...

9.1CVSS0.00039EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/04/09 12:0 a.m.0 views

CVE-2025-50228

Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery SSRF in User Evaluation, Message, and Comment modules...

5.8AI score0.00039EPSS
Exploits0References3
CVE
CVE
added 2026/04/09 12:0 a.m.2 views

CVE-2025-50228

CVE-2025-50228 affects Jizhicms v2.5.4 with a Server-Side Request Forgery (SSRF) vulnerability in the User Evaluation, Message, and Comment modules. The connected sources confirm the affected version and modules but do not provide root-cause details, exploitation status, or remediation steps. The...

9.1CVSS5.9AI score0.00039EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2026/04/09 12:0 a.m.17 views

CVE-2025-50228

Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery SSRF in User Evaluation, Message, and Comment modules...

0.00039EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/09 12:0 a.m.0 views

CVE-2025-50228

Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery SSRF in User Evaluation, Message, and Comment modules...

5.9AI score0.00039EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2004-1461

Malware in sbrugna...

4.3CVSS6.2AI score0.05067EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-4951

Malware in sbrugna...

4.8CVSS5.1AI score0.00361EPSS
Exploits3References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-43750

Malicious code in bioql PyPI...

8CVSS7.9AI score0.00721EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/06/07 6:2 a.m.14 views

CVE-2025-3054

The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadfiles function in all versions up to, and including, 4.1.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload...

8.8CVSS8AI score0.01466EPSS
Exploits1References1
NVD
NVD
added 2025/06/05 6:15 a.m.10 views

CVE-2025-3054

The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadfiles function in all versions up to, and including, 4.1.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload...

8.8CVSS0.01466EPSS
Exploits1References2
OSV
OSV
added 2024/09/18 2:15 p.m.1 views

CVE-2024-31196

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation ONF libfluid libfluidmsg module. This vulnerability is associated with program routine fluidmsg::ActionList::unpack10. This issue affects libfluid: 0.1.0...

7.5CVSS5.8AI score0.00196EPSS
Exploits0References1
OSV
OSV
added 2024/09/18 2:15 p.m.2 views

CVE-2024-31178

Out-of-bounds Read vulnerability in Open Networking Foundation ONF libfluid libfluidmsg module. This vulnerability is associated with program routine fluidmsg::of13::TableFeaturePropNextTables::unpack. This issue affects libfluid: 0.1.0...

7.5CVSS5.8AI score0.00209EPSS
Exploits0References1
Rows per page
Query Builder