Lucene search
K

45 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.1 views

Astra Linux - уязвимость в linux-6.1

In the Linux kernel, the following vulnerability has been resolved: block: Fixed the issue of iterating over an empty bio with bioforeachfolioall. If the bio contains no data, biofirstfolio calls pagefolio using a NULL pointer, resulting in a buffer overflow error. The test that checks whether we...

5.5CVSS6.3AI score0.00015EPSS
Exploits0References2
OSV
OSV
added 2026/03/06 1:16 p.m.1 views

CVE-2018-25200

OOP CMS BLOG 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by crafting malicious POST requests. Attackers can submit forms to the addUser.php endpoint with parameters including userName, password, email, and ro...

8.8CVSS5.7AI score0.0009EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/03/06 12:19 p.m.0 views

CVE-2018-25200

OOP CMS BLOG 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by crafting malicious POST requests. Attackers can submit forms to the addUser.php endpoint with parameters including userName, password, email, and ro...

6.9CVSS5.7AI score0.0009EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/06 12:19 p.m.2 views

CVE-2018-25199 OOP CMS BLOG 1.0 SQL Injection via search parameter

OOP CMS BLOG 1.0 contains SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through multiple parameters. Attackers can inject SQL commands via the search parameter in search.php, pageid parameter in page.php, and id...

8.8CVSS6.1AI score0.00237EPSS
Exploits1References2
CVE
CVE
added 2026/03/06 12:19 p.m.5 views

CVE-2018-25200

OOP CMS BLOG 1.0 is affected by a cross-site request forgery via addUser.php that allows unauthenticated creation of an administrative user by posting userName, password, email, and role parameters. Root cause is CSRF enabling admin account creation without authentication. Impact: potential unaut...

8.8CVSS5.7AI score0.0009EPSS
Exploits1References2Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-52344

Malicious code in bioql PyPI...

8.8CVSS8.7AI score0.00257EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-52349

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00206EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2021-30971

Malicious code in bioql PyPI...

4.8CVSS5.4AI score0.00318EPSS
Exploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/05 5:10 p.m.2 views

Malicious code in nudt-oop-soft-engi-dongwei (npm)

The package nudt-oop-soft-engi-dongwei was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/09/05 5:10 p.m.1 views

MAL-2025-45374 Malicious code in nudt-oop-soft-engi-dongwei (npm)

The package nudt-oop-soft-engi-dongwei was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-34385 Malicious code in tahasiraj-ts-2004-oop-project-10 (npm)

The package tahasiraj-ts-2004-oop-project-10 was found to contain malicious code...

7.2AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.2 views

Malicious code in tahasiraj-ts-2004-oop-project-10 (npm)

The package tahasiraj-ts-2004-oop-project-10 was found to contain malicious code...

7AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 12:2 a.m.5 views

CVE-2022-43117

Sourcecodester Password Storage Application in PHP/OOP and MySQL 1.0 was discovered to contain multiple cross-site scripting XSS vulnerabilities via the Name, Username, Description and Site Feature parameters...

5.4CVSS6.4AI score0.02769EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:49 p.m.3 views

CVE-2022-30459

ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to SQL Injection via /simplechatbot/classes/Master.php?f=deleteresponse, id...

8.8CVSS8.1AI score0.00257EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:6 p.m.3 views

CVE-2022-30464

ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to Cross Site Scripting XSS via /simplechatbot/classes/Master.php?f=saveresponse...

5.4CVSS6.1AI score0.00206EPSS
Exploits1References1
Packet Storm
Packet Storm
added 2024/09/09 12:0 a.m.252 views

PDF Generator Web Application 1.0 Insecure Settings

==================================================================================================================================== | Title : PDF Generator Web Application v1.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox...

7.4AI score
Exploits0
Cvelist
Cvelist
added 2022/11/21 12:0 a.m.12 views

CVE-2022-43117

Sourcecodester Password Storage Application in PHP/OOP and MySQL 1.0 was discovered to contain multiple cross-site scripting XSS vulnerabilities via the Name, Username, Description and Site Feature parameters...

5.7AI score0.02769EPSS
Exploits1References2
CVE
CVE
added 2022/11/21 12:0 a.m.45 views

CVE-2022-43117

CVE-2022-43117 affects Sourcecodester Password Storage Application (PHP/OOP, MySQL) v1.0. The issue is multiple cross-site scripting (XSS) vulnerabilities exploitable via the Name, Username, Description and Site Feature parameters. The PT-2022-26759 entry elaborates the affected version and vulne...

5.4CVSS5.4AI score0.02769EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2022/05/24 2:15 p.m.7 views

CVE-2022-30459

ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to SQL Injection via /simplechatbot/classes/Master.php?f=deleteresponse, id...

8.8CVSS0.00257EPSS
Exploits1References1
Prion
Prion
added 2022/05/24 2:15 p.m.10 views

Cross site scripting

ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to Cross Site Scripting XSS via /simplechatbot/classes/Master.php?f=saveresponse...

3.5CVSS5.2AI score0.00206EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder