Lucene search
K

36 matches found

GithubExploit
GithubExploit
added 2025/12/29 10:36 a.m.145 views

Exploit for CVE-2025-14847

CYBERDUDEBIVASH MONGODB DETECTOR TOOL v2026.1 Detect expose...

8.7CVSS7AI score0.83007EPSS
Exploits39
CVE
CVE
added 2025/07/17 9:28 p.m.21 views

CVE-2025-7398

The CVE-2025-7398 issue affects Brocade ASCG prior to version 3.3.0. The vulnerability arises from the use of medium-strength cryptography on internal ports 9000 and 8036, potentially reducing cryptographic strength for traffic on those ports. Descriptions across multiple sources consistently ref...

9.1CVSS6.7AI score0.00162EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/05/01 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an inability to determine if a port is DP++...

5.5CVSS6.4AI score0.00222EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2024/04/30 12:0 a.m.8 views

PT-2024-21586

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel, specifically in the drm/i915/bios component. It involves tolerating devdata==NULL in the intel bios encoder supports dp dual mode function. If...

5.5CVSS5.5AI score0.00222EPSS
Exploits0
OSV
OSV
added 2023/04/26 12:30 a.m.23 views

GHSA-939C-3G97-VPVV Withdrawn Advisory: Access control issues in blackbox_exporter

Withdrawn Advisory This advisory has been withdrawn because it was determined to be a configuration issue rather than a vulnerability. This link is maintained to preserve external references. For more information, see the conversation here. Original Advisory blackboxexporter v0.23.0 was discovere...

7.5CVSS7.4AI score0.00946EPSS
Exploits0References8
CVE
CVE
added 2023/04/25 12:0 a.m.61 views

CVE-2023-26735

CVE-2023-26735 affects blackbox_exporter v0.23.0. Technical details across connected sources describe an access-control issue in the probe interface that could allow an attacker to discover intranet ports/services and download resources. The primary description notes this is disputed by third par...

7.5CVSS7.6AI score0.00946EPSS
Exploits0References6Affected Software1
Github Security Blog
Github Security Blog
added 2021/09/20 8:45 p.m.50 views

Server-Side Request Forgery in UReport

UReport v2.2.9 contains a Server-Side Request Forgery SSRF in the designer page which allows attackers to detect intranet device ports...

5.3CVSS5.5AI score0.00823EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2021/09/15 5:15 p.m.9 views

CVE-2020-21122

UReport v2.2.9 contains a Server-Side Request Forgery SSRF in the designer page which allows attackers to detect intranet device ports...

5.3CVSS0.00823EPSS
Exploits1References1
OSV
OSV
added 2021/09/15 5:15 p.m.14 views

CVE-2020-21122

UReport v2.2.9 contains a Server-Side Request Forgery SSRF in the designer page which allows attackers to detect intranet device ports...

5.3CVSS6.8AI score
Exploits0References1
Prion
Prion
added 2021/09/15 5:15 p.m.12 views

Server side request forgery (ssrf)

UReport v2.2.9 contains a Server-Side Request Forgery SSRF in the designer page which allows attackers to detect intranet device ports...

5CVSS5.2AI score0.00823EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/09/15 4:16 p.m.15 views

CVE-2020-21122

UReport v2.2.9 contains a Server-Side Request Forgery SSRF in the designer page which allows attackers to detect intranet device ports...

5.2AI score0.00823EPSS
Exploits1References1
CVE
CVE
added 2021/09/15 4:16 p.m.72 views

CVE-2020-21122

CVE-2020-21122 affects UReport v2.2.9 and involves a Server-Side Request Forgery (SSRF) in the designer page. The underlying issue allows an attacker to detect intranet device ports. The linked external records (RH Red Hat, OSV, CNVD, CNNVD, GHSA, etc.) consistently describe the same vulnerabilit...

5.3CVSS5.2AI score0.00823EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2021/09/15 12:0 a.m.4 views

UReport 代码问题漏洞

UReport is a high-performance pure Java reporting engine based on the Spring architecture. a server-side request forgery vulnerability exists in the designer page of UReport version 2.2.9. An attacker can use this vulnerability to detect intranet device ports...

5.3CVSS5.7AI score0.00823EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2020/09/03 12:0 a.m.14 views

Linksys Device Detection (HNAP)

HNAP based detection of Linksys devices. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.144525";...

7.3AI score
Exploits0
OSV
OSV
added 2020/07/21 12:39 a.m.9 views

SUSE-SU-2020:1973-1 Security update for Salt

This update fixes the following issues: salt: - Fix for TypeError in Tornado importer bsc1174165 - Require python3-distro only for TW bsc1173072 - Various virt backports from 3000.2 - Avoid traceback on debug logging for swarm module bsc1172075 - Add publishbatch to ClearFuncs exposed methods -...

9.8CVSS8.6AI score0.96405EPSS
Exploits25References19
OSV
OSV
added 2020/07/21 12:38 a.m.8 views

SUSE-SU-2020:1971-1 Security update for Salt

This update fixes the following issues: salt: - Fix for TypeError in Tornado importer bsc1174165 - Require python3-distro only for TW bsc1173072 - Various virt backports from 3000.2 - Avoid traceback on debug logging for swarm module bsc1172075 - Add publishbatch to ClearFuncs exposed methods -...

9.8CVSS8.6AI score0.96405EPSS
Exploits25References19
Tenable Nessus
Tenable Nessus
added 2020/07/21 12:0 a.m.41 views

SUSE SLED15 / SLES15 Security Update : salt (SUSE-SU-2020:1974-1)

This update for salt contains the following fixes : Fix for TypeError in Tornado importer bsc1174165 Require python3-distro only for TW bsc1173072 Update to Salt version 3000: See release notes: https://docs.saltstack.com/en/latest/topics/releases/3000.html Add docker.logout to docker execution...

9.8CVSS7.8AI score0.96405EPSS
Exploits25References21
Tenable Nessus
Tenable Nessus
added 2019/04/09 12:0 a.m.13 views

Barco/AWiND WePresent Command Port Detection

Binary data barcowepresentdetect.nbin...

7.3AI score
Exploits0References5
Hacker One
Hacker One
added 2019/03/23 1:51 p.m.498 views

GSA Bounty: SSRF in Search.gov via ?url= parameter

Summary: https://search.usa.gov/helpdocs endpoint is vulnerable to SSRF via url parameter. The parameter is protected but can be bypassed using LF %0A. Steps To Reproduce: 1. Login to Search.gov and click help manual. 2. The following request was vulnerable. - Request GET...

6.8AI score
Exploits0
OpenVAS
OpenVAS
added 2018/08/22 12:0 a.m.100 views

Home Assistant Detection (HTTP)

HTTP based detection of Home Assistant. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.113249";...

7.4AI score
Exploits0References1
Rows per page
Query Builder