Lucene search
+L

43 matches found

GithubExploit
GithubExploit
•added 2026/09/29 9:34 a.m.•30 views

intigriti-0926-writeup

Intigriti Challenge 0926 — Critter Gallery: UNION-based SQL In...

6AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2026/09/28 11:58 a.m.•35 views

intigriti-0926

Critter Gallery — SQL Injection Write-up Intigriti — Septem...

5.8AI score
SaveExploits0
AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•13 views

Astra Linux – Vulnerability in libde265

It was discovered that Libde265 v1.0.12 contains multiple buffer overflows due to vulnerabilities in the numtilecolumns and numtilerow parameters of the picparameterset::dump function...

8.1CVSS6.6AI score0.00979EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/04/20 12:00 a.m.•6 views

PT-2026-36269

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a malformed H.265 PPS NAL unit causes a segmentation fault in pic parameter set::set derived values. This issue has been patched in version 1.0.17...

7.5CVSS5.8AI score
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2008-4497

Malware in sbrugna...

7.5CVSS6.4AI score0.00967EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2002-1703

Malware in sbrugna...

6.8CVSS6.4AI score0.01306EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2025/08/06 3:15 p.m.•29 views

CVE-2025-50234

MCCMS v2.7.0 has an SSRF vulnerability located in the index method of the sys\apps\controllers\api\Gf.php file, where the pic parameter is processed. The pic parameter is decrypted using the sysauth$pic, 1 function, which utilizes a hard-coded key McEncryptionKey bD2voYwPpNuJ7B8, defined in the...

6.5CVSS6.1AI score0.00246EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/06 3:15 p.m.•39 views

CVE-2025-50234

MCCMS v2.7.0 has an SSRF vulnerability located in the index method of the sys\apps\controllers\api\Gf.php file, where the pic parameter is processed. The pic parameter is decrypted using the sysauth$pic, 1 function, which utilizes a hard-coded key McEncryptionKey bD2voYwPpNuJ7B8, defined in the...

6.5CVSS0.00246EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/08/06 12:00 a.m.•26 views

mccms security vulnerabilities

mccms Man City CMS is a rapid website builder system for individual developers of China Smokey River South chshcms. A security vulnerability exists in mccms version v2.7.0, which originates from improper handling of the pic parameter in the sysappscontrollersapiGf.php file, which may lead to SSRF...

6.5CVSS5.8AI score0.00246EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/08/06 12:00 a.m.•21 views

PT-2025-32179 · Mccms · Mccms

Name of the Vulnerable Software and Affected Versions: MCCMS version 2.7.0 Description: MCCMS v2.7.0 contains a Server-Side Request Forgery SSRF vulnerability located in the index method of the sysappscontrollersapiGf.php file. The vulnerability occurs when processing the pic parameter. The pic...

6.5CVSS6.3AI score0.00246EPSS
SaveExploits1References5
Mend
Mend
•added 2025/08/06 12:00 a.m.•7 views

CVE-2025-50234

MCCMS v2.7.0 has an SSRF vulnerability located in the index method of the sys\apps\controllers\api\Gf.php file, where the pic parameter is processed. The pic parameter is decrypted using the sysauth$pic, 1 function, which utilizes a hard-coded key McEncryptionKey bD2voYwPpNuJ7B8, defined in the...

6.9CVSS6.1AI score0.00246EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/05/29 12:00 a.m.•17 views

mccms code-related vulnerabilities

mccms Man City CMS is a rapid website building system for individual developers of China Smokey River South chshcms. A code issue vulnerability exists in version 2.7 of mccms, which stems from improper handling of the pic parameter in the file sys/apps/controllers/api/Gf.php, which may lead to...

8.8CVSS6.5AI score0.00564EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2025/04/01 12:15 a.m.•18 views

CVE-2025-3041

A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file /admin/updatestudent.php. The manipulation of the argument pic leads to unrestricted upload. It is possible to initiate the attack remotely. The exploi...

9.8CVSS6.2AI score0.00487EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•32 views

Projectworlds Online Time Table Generator Code Issues and Vulnerabilities

Projectworlds Online Time Table Generator is an online time table generator from Projectworlds India. A code issue vulnerability exists in Projectworlds Online Time Table Generator version 1.0, which stems from an incorrect manipulation of the parameter pic resulting in unlimited uploads...

9.8CVSS6.5AI score0.00487EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2025/03/31 11:15 p.m.•18 views

CVE-2025-3040

A vulnerability was found in Project Worlds Online Time Table Generator 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/addstudent.php. The manipulation of the argument pic leads to unrestricted upload. The attack may be launched remotel...

9.8CVSS5.5AI score
SaveExploits0References4
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•23 views

Projectworlds Online Time Table Generator has a security vulnerability

Projectworlds Online Time Table Generator is an online time table generator from Projectworlds India. A security vulnerability exists in Projectworlds Online Time Table Generator version 1.0, which stems from the fact that incorrect manipulation of the parameter pic can lead to unlimited uploads...

9.8CVSS6.5AI score0.00654EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•16 views

Projectworlds Online Time Table Generator has a security vulnerability

Projectworlds Online Time Table Generator is an online time table generator from Projectworlds India. A security vulnerability exists in Projectworlds Online Time Table Generator version 1.0, which stems from the fact that incorrect manipulation of the parameter pic can lead to unlimited uploads...

9.8CVSS6.5AI score0.00487EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2023/11/22 6:15 p.m.•14 views

DEBIAN-CVE-2023-43887

Libde265 v1.0.12 was discovered to contain multiple buffer overflows via the numtilecolumns and numtilerow parameters in the function picparameterset::dump...

8.1CVSS6.4AI score0.00979EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2023/11/22 6:15 p.m.•47 views

UBUNTU-CVE-2023-43887

Libde265 v1.0.12 was discovered to contain multiple buffer overflows via the numtilecolumns and numtilerow parameters in the function picparameterset::dump...

8.1CVSS6.8AI score0.00979EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/11/22 12:00 a.m.•22 views

Libde265 Security Vulnerability

Libde265 is a German h.265 video codec. A security vulnerability exists in Libde265 version v1.0.12, which originates from the inclusion of multiple buffer overflows via the numtilecolumns and numtilerow parameters in the picparameterset::dump function...

8.1CVSS7.1AI score0.00979EPSS
SaveExploits1References3
Rows per page
Query Builder