Lucene search
+L

42 matches found

NVD
NVD
•added 2026/04/07 3:17 p.m.•16 views

CVE-2026-5376

An issue that could prevent session inactivity timeouts from triggering due to automatic page reloading has been resolved. This is an instance of CWE-613: Insufficient Control of Resources After Expiration or Release, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N...

5.9CVSS0.00341EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/04/07 2:11 p.m.•36 views

CVE-2026-5376 runZero Platform session timeout failure

An issue that could prevent session inactivity timeouts from triggering due to automatic page reloading has been resolved. This is an instance of CWE-613: Insufficient Control of Resources After Expiration or Release, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N...

5.9CVSS0.00341EPSS
SaveExploits0References2
CVE
CVE
•added 2026/04/07 2:11 p.m.•25 views

CVE-2026-5376

The CVE-2026-5376 issue affects the runZero Platform where session inactivity timeouts could fail to trigger due to automatic page reloading. Root cause is CWE-613 (Insufficient Control of Resources After Expiration or Release). CVSS v3.1 vector: AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N, base score 5....

5.9CVSS5.8AI score0.00341EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2026/04/07 2:11 p.m.•7 views

CVE-2026-5376

An issue that could prevent session inactivity timeouts from triggering due to automatic page reloading has been resolved. This is an instance of CWE-613: Insufficient Control of Resources After Expiration or Release, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N...

5.9CVSS5.8AI score0.00341EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2012-1937

Malware in sbrugna...

6.4CVSS6.1AI score0.02703EPSS
SaveExploits0References11
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2018-2867

Malware in sbrugna...

6.5CVSS6.6AI score0.00808EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/05/22 2:39 a.m.•18 views

CVE-2018-10798

A hang issue was discovered in Brave before 0.14.0 on, for example, Linux. The vulnerability is caused by mishandling of JavaScript code that triggers the reload of a page continuously with an interval of 1 second...

6.5CVSS7AI score0.00808EPSS
SaveExploits1References1
wpexploit
wpexploit
•added 2024/05/28 12:00 a.m.•205 views

Simple Share Buttons Adder < 8.5.1 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed 1. Go to the plugin settings 2. In the "Additional CSS" field, enter the payload 3. Save...

5.9AI score0.00399EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2024/04/13 12:00 a.m.•15 views

PT-2024-27520 · Unknown · Cym1102 Nginxwebui

Name of the Vulnerable Software and Affected Versions: cym1102 nginxWebUI versions up to 3.9.9 Description: A critical issue has been found in the function exec of the file /adminPage/conf/reload. The manipulation of the argument nginxExe leads to deserialization. The attack may be initiated...

9.8CVSS6.6AI score0.00815EPSS
SaveExploits1References11
NVD
NVD
•added 2024/03/12 1:15 p.m.•34 views

CVE-2024-2393

A vulnerability was found in SourceCodester CRUD without Page Reload 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file adduser.php. The manipulation of the argument city leads to sql injection. The attack can be launched remotely. The...

9.8CVSS6.8AI score0.00693EPSS
SaveExploits1References3
CVE
CVE
•added 2024/03/12 1:00 p.m.•69 views

CVE-2024-2393

SourceCodester CRUD without Page Reload 1.0 is affected by a SQL injection in add_user.php via the city parameter. This vulnerability is exploitable remotely and has had an exploit disclosed publicly. Affected functionality is described as unknown in the file add_user.php; no product/vendor versi...

9.8CVSS6.8AI score0.00693EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/03/12 1:00 p.m.•12 views

CVE-2024-2393 SourceCodester CRUD without Page Reload add_user.php sql injection

A vulnerability was found in SourceCodester CRUD without Page Reload 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file adduser.php. The manipulation of the argument city leads to sql injection. The attack can be launched remotely. The...

6.5CVSS7.4AI score0.00693EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/12 12:00 a.m.•2 views

CVE-2024-2393: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester CRUD without Page Reload 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file adduser.php. The manipulation of the argument city leads to sql injection. The attack can be launched remotely. The...

9.8CVSS5.5AI score0.00693EPSS
SaveExploits1References2
OSV
OSV
•added 2024/02/03 4:16 p.m.•16 views

CVE-2024-1215

A vulnerability was found in SourceCodester CRUD without Page Reload 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file fetchdata.php. The manipulation of the argument username/city leads to cross site scripting. The attack may be launched...

6.1CVSS3.8AI score0.00566EPSS
SaveExploits1References3
NVD
NVD
•added 2024/02/03 4:16 p.m.•30 views

CVE-2024-1215

A vulnerability was found in SourceCodester CRUD without Page Reload 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file fetchdata.php. The manipulation of the argument username/city leads to cross site scripting. The attack may be launched...

6.1CVSS4.4AI score0.00566EPSS
SaveExploits1References3
Prion
Prion
•added 2024/02/03 4:16 p.m.•33 views

Cross site scripting

A vulnerability was found in SourceCodester CRUD without Page Reload 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file fetchdata.php. The manipulation of the argument username/city leads to cross site scripting. The attack may be launched...

4CVSS6.4AI score0.00566EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2024/02/03 3:31 p.m.•158 views

CVE-2024-1215

CVE-2024-1215 affects SourceCodester CRUD without Page Reload 1.0. The vulnerability resides in fetch_data.php where manipulating the username or city parameter triggers a cross-site scripting (XSS) issue. Exploitation can be performed remotely, and public PoCs/claims exist. The issue is tied to ...

6.1CVSS6AI score0.00566EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2024/02/03 3:31 p.m.•37 views

CVE-2024-1215 SourceCodester CRUD without Page Reload fetch_data.php cross site scripting

A vulnerability was found in SourceCodester CRUD without Page Reload 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file fetchdata.php. The manipulation of the argument username/city leads to cross site scripting. The attack may be launched...

4CVSS6.2AI score0.00566EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/03 12:00 a.m.•1 views

CVE-2024-1215: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester CRUD without Page Reload 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file fetchdata.php. The manipulation of the argument username/city leads to cross site scripting. The attack may be launched...

6.1CVSS3.8AI score0.00566EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2020/02/17 12:00 a.m.•12 views

The vulnerability of the FTP file transfer protocol in Firefox browsers allows attackers to compromise data integrity.

The vulnerability of the FTP file transfer protocol in Firefox is related to an initialization error in the modal notification that can be triggered when the page is reloaded. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

4.3CVSS6.7AI score0.00787EPSS
SaveExploits1References6Affected Software3
Rows per page
Query Builder