Lucene search
+L

178 matches found

Cvelist
Cvelist
added 2025/03/06 9:31 p.m.17 views

CVE-2025-2043 LinZhaoguan pb-cms Add New Topic admin#themes deserialization

A vulnerability was found in LinZhaoguan pb-cms 1.0.0 and classified as critical. This issue affects some unknown processing of the file /adminthemes of the component Add New Topic Handler. The manipulation of the argument Topic Key leads to deserialization. The attack may be initiated remotely...

5.8CVSS0.00457EPSS
Exploits0References4
OSV
OSV
added 2025/02/27 6:15 p.m.4 views

CVE-2025-1745

A vulnerability has been found in LinZhaoguan pb-cms 2.0 and classified as problematic. This vulnerability affects unknown code of the component Logout. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may...

5.3CVSS4.6AI score0.0026EPSS
Exploits1References4
NVD
NVD
added 2025/02/27 6:15 p.m.9 views

CVE-2025-1745

A vulnerability has been found in LinZhaoguan pb-cms 2.0 and classified as problematic. This vulnerability affects unknown code of the component Logout. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may...

5.3CVSS0.0026EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/02/27 5:31 p.m.6 views

CVE-2025-1745 LinZhaoguan pb-cms Logout cross-site request forgery

A vulnerability has been found in LinZhaoguan pb-cms 2.0 and classified as problematic. This vulnerability affects unknown code of the component Logout. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may...

5.3CVSS4.8AI score0.0026EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/02/27 5:31 p.m.18 views

CVE-2025-1745 LinZhaoguan pb-cms Logout cross-site request forgery

A vulnerability has been found in LinZhaoguan pb-cms 2.0 and classified as problematic. This vulnerability affects unknown code of the component Logout. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may...

5.3CVSS0.0026EPSS
Exploits1References4
CVE
CVE
added 2025/02/27 5:31 p.m.45 views

CVE-2025-1745

CVE-2025-1745 affects LinZhaoguan pb-cms 2.0, specifically the Logout component. The issue enables cross-site request forgery and can be exploited remotely; the exploit has been disclosed publicly. Concrete details across connected sources consistently identify the affected product/version and th...

5.3CVSS4.8AI score0.0026EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2025/02/27 12:0 a.m.7 views

pb-cms 安全漏洞

pb-cms waterfall content management system is a content management system by LinZhaoguan Personal Developer. A security vulnerability exists in pb-cms version 2.0, which stems from a cross-site request forgery...

5.3CVSS4.9AI score0.0026EPSS
Exploits1References6
OSV
OSV
added 2025/01/09 10:15 p.m.3 views

CVE-2024-51229

Cross Site Scripting vulnerability in LinZhaoguan pb-cms v.2.0 allows a remote attacker to execute arbitrary code via the theme management function...

8.8CVSS6.1AI score0.00839EPSS
Exploits1References1
NVD
NVD
added 2025/01/09 10:15 p.m.16 views

CVE-2024-51229

Cross Site Scripting vulnerability in LinZhaoguan pb-cms v.2.0 allows a remote attacker to execute arbitrary code via the theme management function...

8.8CVSS0.00839EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/01/09 12:0 a.m.7 views

PT-2025-2898 · Linzhaoguan · Linzhaoguan Pb-Cms

Name of the Vulnerable Software and Affected Versions: LinZhaoguan pb-cms version 2.0 Description: The issue allows a remote attacker to execute arbitrary code via the theme management function. This is a result of a Cross Site Scripting vulnerability. Recommendations: For LinZhaoguan pb-cms...

8.8CVSS7.5AI score0.00839EPSS
Exploits1References5
CVE
CVE
added 2025/01/09 12:0 a.m.54 views

CVE-2024-51229

CVE-2024-51229 : A cross-site scripting (XSS) flaw in LinZhaoguan pb-cms version 2.0 is exposed via the theme management function, allowing a remote attacker to execute arbitrary code. Multiple sources (NVD, Red Hat advisory, CNVD/CNNVD, CVE listings) corroborate the impact as remote, with high s...

8.8CVSS7.5AI score0.00839EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/09 12:0 a.m.6 views

CVE-2024-51229

Cross Site Scripting vulnerability in LinZhaoguan pb-cms v.2.0 allows a remote attacker to execute arbitrary code via the theme management function...

7.3AI score0.00839EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.6 views

pb-cms 安全漏洞

pb-cms waterfall content management system is a content management system by LinZhaoguan Personal Developer. A security vulnerability exists in pb-cms version v.2.0. A remote attacker can exploit the vulnerability to execute arbitrary code via the theme management feature...

8.8CVSS7.7AI score0.00839EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/01/09 12:0 a.m.19 views

CVE-2024-51229

Cross Site Scripting vulnerability in LinZhaoguan pb-cms v.2.0 allows a remote attacker to execute arbitrary code via the theme management function...

0.00839EPSS
Exploits1References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/11/27 3:33 a.m.4 views

Malicious code in pb-ts-gen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe9b35837a3cf72fbba62ab3098ec2b11f3a3532e261421c03538399d5f64751 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References3
OSV
OSV
added 2024/11/27 3:33 a.m.7 views

MAL-2024-11065 Malicious code in pb-ts-gen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe9b35837a3cf72fbba62ab3098ec2b11f3a3532e261421c03538399d5f64751 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References3
NVD
NVD
added 2024/11/04 10:15 a.m.22 views

CVE-2024-33031

Memory corruption while processing the update SIM PB records request...

6.7CVSS0.00103EPSS
Exploits0References1
CVE
CVE
added 2024/11/04 10:4 a.m.56 views

CVE-2024-33031

CVE-2024-33031 concerns memory corruption in Qualcomm chipsets, attributed to the Radio Interface Layer (RIL) when processing the update SIM PB records request. The CVE is described as an improper input validation bug in RIL, with a CVSSv3.1 base score of 6.7 (Medium). The impact is listed as hig...

6.7CVSS6.8AI score0.00103EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/04 10:4 a.m.17 views

CVE-2024-33031 Improper Input Validation in RIL

Memory corruption while processing the update SIM PB records request...

6.7CVSS7.4AI score0.00103EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/04 10:4 a.m.26 views

CVE-2024-33031 Improper Input Validation in RIL

Memory corruption while processing the update SIM PB records request...

6.7CVSS0.00103EPSS
Exploits0References1
Rows per page
Query Builder