Lucene search
+L

1162 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 10:7 p.m.9 views

CVE-2022-3519

A vulnerability classified as problematic was found in SourceCodester Sanitization Management System 1.0. Affected by this vulnerability is an unknown functionality of the component Quote Requests Tab. The manipulation of the argument Manage Remarks leads to cross site scripting. The attack can b...

6.1CVSS6.3AI score0.00335EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:5 p.m.6 views

CVE-2021-42740

The shell-quote package before 1.7.3 for Node.js allows command injection. An attacker can inject unescaped shell metacharacters through a regex designed to support Windows drive letters. If the output of this package is passed to a real shell as a quoted argument to a command with exec, an...

9.8CVSS7.2AI score0.0434EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/22 7:23 p.m.11 views

CVE-2021-24771

The Inspirational Quote Rotator WordPress plugin through 1.0.0 does not sanitize and escape some of its quote fields when adding/editing a quote as admin, leading to Stored Cross-Site scripting issues when the quote is output in the "Quotes list" even when the unfilteredhtml capability is disallo...

4.8CVSS5.9AI score0.00598EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:40 p.m.11 views

CVE-2021-3727

Vulnerability in rand-quote and hitokoto plugins Description: the rand-quote and hitokoto fetch quotes from quotationspage.com and hitokoto.cn respectively, do some process on them and then use print -P to print them. If these quotes contained the proper symbols, they could trigger command...

9.8CVSS7.3AI score0.01031EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:24 p.m.15 views

CVE-2021-24420

The Request a Quote WordPress plugin before 2.3.4 did not sanitise and escape some of its quote fields when adding/editing a quote as admin, leading to Stored Cross-Site scripting issues when the quote is output in the 'All Quotes" table...

5.4CVSS6AI score0.00624EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/05/21 6:5 p.m.8 views

CVE-1999-0075

PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password...

5CVSS7.1AI score0.01568EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/05/14 12:0 a.m.5 views

PCMan FTP Server QUOTE Command Handler Buffer Overflow Vulnerability

PCMan FTP Server is PCMan open source set of FTP server software. PCMan FTP Server suffers from a buffer overflow vulnerability that originates from the QUOTE command handler failing to properly validate the length of input data, which can be exploited by an attacker to cause a denial of service...

9.8CVSS7.5AI score0.00658EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/04 12:3 a.m.31 views

CVE-2025-4184

A vulnerability classified as critical was found in PCMan FTP Server 2.0.7. This vulnerability affects unknown code of the component QUOTE Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

9.8CVSS7.4AI score0.00658EPSS
SaveExploits1References1
NVD
NVD
added 2025/05/02 12:15 a.m.54 views

CVE-2025-4184

A vulnerability classified as critical was found in PCMan FTP Server 2.0.7. This vulnerability affects unknown code of the component QUOTE Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

9.8CVSS0.00658EPSS
SaveExploits1References4
OSV
OSV
added 2025/05/02 12:15 a.m.10 views

CVE-2025-4184

A vulnerability classified as critical was found in PCMan FTP Server 2.0.7. This vulnerability affects unknown code of the component QUOTE Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

9.8CVSS6.1AI score0.00658EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/05/02 12:0 a.m.11 views

PCMan FTP Server 安全漏洞

PCMan FTP Server is PCMan open source set of FTP server software. PCMan FTP Server suffers from a buffer overflow vulnerability that originates from the QUOTE command handler failing to properly validate the length of input data, which can be exploited by an attacker to cause a denial of service...

9.8CVSS7.2AI score0.00658EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/05/01 11:31 p.m.8 views

CVE-2025-4184 PCMan FTP Server QUOTE Command buffer overflow

A vulnerability classified as critical was found in PCMan FTP Server 2.0.7. This vulnerability affects unknown code of the component QUOTE Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

7.5CVSS7.5AI score0.00658EPSS
SaveExploits1References4
CVE
CVE
added 2025/05/01 11:31 p.m.81 views

CVE-2025-4184

Multiple connected sources confirm CVE-2025-4184 affects PCMan FTP Server 2.0.7, arising from the QUOTE Command Handler. The issue is a buffer overflow, with remote attack potential and publicly disclosed exploit details. Public fix status is not documented in the provided references; at least on...

9.8CVSS7.5AI score0.00658EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2025/05/01 11:31 p.m.58 views

CVE-2025-4184 PCMan FTP Server QUOTE Command buffer overflow

A vulnerability classified as critical was found in PCMan FTP Server 2.0.7. This vulnerability affects unknown code of the component QUOTE Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

7.5CVSS0.00658EPSS
SaveExploits1References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/04/29 6:4 a.m.2 views

Malicious code in @baywa-re-lusy/nsemea-quote-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a970ecd3fffeb12875946cc0b4a9b9cbf2dd78228eda981cb2ad8316f22a2404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/04/29 6:4 a.m.1 views

Malicious code in nsemea-quote-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5af99966c46bd796b931ae02be0aa5469d9e60463ab86b879488fff2e1965c0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/25 5:5 p.m.12 views

CVE-2025-32514

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cscode WooCommerce Estimate and Quote wc-estimate-and-quote allows Reflected XSS.This issue affects WooCommerce Estimate and Quote: from n/a through = 1.0.2.5...

7.1CVSS7.2AI score0.00276EPSS
SaveExploits0References1
Talos Blog
Talos Blog
added 2025/04/24 6:0 p.m.15 views

Lessons from Ted Lasso for cybersecurity success

Welcome to this week's edition of the Threat Source newsletter. "Be curious, not judgmental," Ted Lasso says, misattributing Walt Whitman. We forgive Ted because... well, he's Ted Lasso. If you've not watched the first season of Ted Lasso, there is a defining moment where Ted confronts a nefariou...

7.8AI score
SaveExploits0
NVD
NVD
added 2025/04/17 4:15 p.m.4 views

CVE-2025-32514

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cscode WooCommerce Estimate and Quote wc-estimate-and-quote allows Reflected XSS.This issue affects WooCommerce Estimate and Quote: from n/a through = 1.0.2.5...

7.1CVSS0.00276EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/04/10 9:34 a.m.5 views

WordPress WooCommerce Estimate and Quote plugin <= 1.0.2.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin WooCommerce Estimate and Quote versions = 1.0.2.5...

7.1CVSS7AI score0.00276EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder