Lucene search
+L

120 matches found

Kitploit
Kitploit
•added 2026/11/07 2:17 p.m.•201 views

censys-python

Censys Python Library !WARNING DEPRECATION NOTICE : The Censys Search v1 and v2 APIs will be deprecated soon. Please migrate to the new Censys Platform. 📖 New API Documentation : https://docs.censys.com/reference/get-started 📦 New Python SDK : censys/censys-sdk-python 🖥️ New CLI Tool cencli:...

6.1AI score
SaveExploits0References9
NVD
NVD
•added 2026/10/29 10:17 a.m.•14 views

CVE-2026-111418

A server-side request forgery SSRF vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service. Support for ZIP-formatted input can bypass restrictions on requests to internal IP addresses, potentially allowing discovery of internal network resources...

7.5CVSS0.00435EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/29 9:45 a.m.•17 views

CVE-2026-111417

A broken access control vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service . The root cause is the use of a shared token for submitted conversion documents, which may allow unauthorized users to access documents submitted by others. While the vulnerability is conf...

7.5CVSS5.8AI score0.00345EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/29 9:45 a.m.•13 views

EUVD-2026-112697

A broken access control vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service due to the use of a shared token for submitted conversion documents. This may allow unauthorized users to access documents submitted by other users...

7.5CVSS5.8AI score0.00345EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/29 9:45 a.m.•24 views

CVE-2026-111418 SSRF and JavaScript Execution in the Foxit Official Website's HTML-to-PDF Service

A server-side request forgery SSRF vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service. Support for ZIP-formatted input can bypass restrictions on requests to internal IP addresses, potentially allowing discovery of internal network resources...

7.5CVSS0.00435EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/29 9:45 a.m.•14 views

EUVD-2026-112696

A server-side request forgery SSRF vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service. Support for ZIP-formatted input can bypass restrictions on requests to internal IP addresses, potentially allowing discovery of internal network resources...

7.5CVSS5.8AI score0.00435EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/29 9:45 a.m.•9 views

CVE-2026-111418 SSRF and JavaScript Execution in the Foxit Official Website's HTML-to-PDF Service

A server-side request forgery SSRF vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service. Support for ZIP-formatted input can bypass restrictions on requests to internal IP addresses, potentially allowing discovery of internal network resources...

7.5CVSS5.8AI score0.00435EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/29 9:45 a.m.•19 views

CVE-2026-111418

A server-side request forgery (SSRF) vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service . The root cause is that the service supports ZIP-formatted input , which can be used to bypass restrictions on requests to internal IP addresses. This could potentially allow ...

7.5CVSS5.8AI score0.00435EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/29 9:45 a.m.•10 views

CVE-2026-111419 Hardcoded API Token in Foxit Official Website

A sensitive information exposure vulnerability exists on the Foxit official website because JavaScript code contains third-party authorization information. This may allow unauthorized parties to obtain or misuse the exposed credentials...

8.6CVSS5.8AI score0.00345EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/29 9:45 a.m.•15 views

CVE-2026-111419

A sensitive information exposure vulnerability exists on the Foxit official website because JavaScript code contains hardcoded third-party authorization information . This exposure may allow unauthorized parties to obtain or misuse these credentials. The vulnerability is associated with CWE-798 (...

8.6CVSS5.8AI score0.00345EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/29 12:00 a.m.•13 views

PT-2026-130684

A server-side request forgery SSRF vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service. Support for ZIP-formatted input can bypass restrictions on requests to internal IP addresses, potentially allowing discovery of internal network resources...

7.5CVSS5.9AI score0.00435EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/29 12:00 a.m.•9 views

CVE-2026-111417: Foxit Software Inc. foxit.com: A broken access control vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service due to the…

A broken access control vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service due to the use of a shared token for submitted conversion documents. This may allow unauthorized users to access documents submitted by other users...

7.5CVSS5.9AI score0.00345EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/29 12:00 a.m.•11 views

CVE-2026-111418: Foxit Software Inc. foxit.com: A server-side request forgery (SSRF) vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service

A server-side request forgery SSRF vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service. Support for ZIP-formatted input can bypass restrictions on requests to internal IP addresses, potentially allowing discovery of internal network resources...

7.5CVSS5.9AI score0.00435EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/29 12:00 a.m.•10 views

PT-2026-130685

A sensitive information exposure vulnerability exists on the Foxit official website because JavaScript code contains third-party authorization information. This may allow unauthorized parties to obtain or misuse the exposed credentials...

8.6CVSS5.9AI score0.00345EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/21 12:00 a.m.•27 views

PT-2026-120490

Security Advisory Due to the critical PHP vulnerabilities CVE-2026-109618 and CVE-2016-109619, we have temporarily suspended potentially affected services, including our official website and https://t.co/74FnLhUods. Services will resume following the release of official PHP patches and verificati...

9AI score0.99999EPSS
SaveExploits512References1
CVE
CVE
•added 2026/05/15 7:30 a.m.•269 views

CVE-2026-8398

The CVE-2026-8398 entry concerns a supply-chain compromise of DAEMON Tools Lite Windows installers (versions 12.5.0.2421–12.5.0.2434) distributed via daemon-tools.cc. Attackers allegedly gained access to AVB Disc Soft’s build/distribution infrastructure and trojanized three binaries—DTHelper.exe,...

9.8CVSS8AI score0.01456EPSS
SaveIn wildExploits1References3Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•27 views

EUVD-2018-11861

Malware in sbrugna...

7.5CVSS7.3AI score0.01211EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•27 views

EUVD-2023-41265

Malicious code in bioql PyPI...

8.8CVSS8AI score0.00643EPSS
SaveExploits0References2
CVE
CVE
•added 2025/03/24 1:47 p.m.•108 views

CVE-2025-30604

CVE-2025-30604 affects JiangQie Official Website Mini Program (ZhuiGe Official Website Mini Program in EUVD context). Reported as an SQL Injection vulnerability (blind SQLi) in the Mini Program component, with affected versions ranging up to 1.8.2. The connected EUVD entry confirms the issue is p...

7.6CVSS8.4AI score0.00454EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/24 1:03 p.m.•24 views

WordPress JiangQie Official Website Mini Program plugin <= 1.8.2 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by kuteminh11 - VNPT Cyber Immunity in WordPress Plugin JiangQie Official Website Mini Program versions = 1.8.2...

7.6CVSS8.5AI score0.00454EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder