Lucene search
K

92 matches found

Positive Technologies
Positive Technologies
added 2026/05/08 12:0 a.m.5 views

PT-2026-39131

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFS implementation where the system fails to return an error when a directory alias is found through nfs3 do create, nfs add or obtain, or d splice alias. In such...

5.5CVSS5.7AI score0.00013EPSS
Exploits0References17
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2005-4725

Malware in sbrugna...

4.3CVSS6.4AI score0.00396EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2005-4761

Malware in sbrugna...

7.5CVSS6.4AI score0.00584EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2014-5496

Malware in sbrugna...

5.4CVSS6.4AI score0.00134EPSS
Exploits0References4
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-34958 Malicious code in test-mlw2-biker-bungs-racer-misgo (npm)

The package test-mlw2-biker-bungs-racer-misgo was found to contain malicious code...

7.2AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.2 views

Malicious code in test-mlw2-biker-bungs-racer-misgo (npm)

The package test-mlw2-biker-bungs-racer-misgo was found to contain malicious code...

7AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 10:17 a.m.7 views

CVE-2024-30927

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component...

6.3CVSS7.3AI score0.00257EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:17 a.m.3 views

CVE-2024-30923

SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering...

9.8CVSS8.8AI score0.0493EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:12 a.m.4 views

CVE-2005-4768

SQL injection vulnerability in manageaccount.php in Tux Racer TuxBank 0.7x and 0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter in a manageaccount action to index.php...

7.5CVSS8.8AI score0.00584EPSS
Exploits1References1
NVD
NVD
added 2024/04/18 10:15 p.m.11 views

CVE-2024-30927

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component...

6.3CVSS7AI score0.00257EPSS
Exploits2References2
OSV
OSV
added 2024/04/18 10:15 p.m.2 views

CVE-2024-30927

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component...

6.3CVSS6.2AI score0.00257EPSS
Exploits2References2
OSV
OSV
added 2024/04/18 9:15 p.m.0 views

CVE-2024-30923

SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering...

9.8CVSS6.2AI score
Exploits0References2
NVD
NVD
added 2024/04/18 9:15 p.m.9 views

CVE-2024-30923

SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering...

9.8CVSS8.3AI score0.0493EPSS
Exploits2References2
CNNVD
CNNVD
added 2024/04/18 12:0 a.m.2 views

DerbyNet 安全漏洞

DerbyNet is a simple code for a match broadcasting program. A cross-site scripting vulnerability exists in the DerbyNet racerid parameter due to improper validation of user-supplied input by the racer-results.php script. An attacker could use this vulnerability to steal the victim's cookie-based...

6.3CVSS6.4AI score0.00257EPSS
Exploits2References2
CNNVD
CNNVD
added 2024/04/18 12:0 a.m.1 views

DerbyNet 安全漏洞

DerbyNet is a simple code for a match broadcasting program. A security vulnerability exists in DerbyNet version v9.0. A remote attacker can exploit this vulnerability to execute arbitrary code via the where clause in the Racer document rendering...

9.8CVSS7.7AI score0.0493EPSS
Exploits2References2
Cvelist
Cvelist
added 2024/04/18 12:0 a.m.12 views

CVE-2024-30923

SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering...

8.7AI score0.0493EPSS
Exploits2References1
CVE
CVE
added 2024/04/18 12:0 a.m.52 views

CVE-2024-30927

CVE-2024-30927 affects DerbyNet v9.0 and earlier, with a Cross Site Scripting vulnerability in the racer-results.php component. The issue stems from improper handling/validation of user-supplied input (notably the racerid parameter), allowing an attacker to inject arbitrary script that can be exe...

6.3CVSS7.2AI score0.00257EPSS
Exploits2References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/18 12:0 a.m.13 views

CVE-2024-30927

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component...

7.3AI score0.00257EPSS
Exploits2References1
Vulnrichment
Vulnrichment
added 2024/04/18 12:0 a.m.10 views

CVE-2024-30923

SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering...

8.7AI score0.0493EPSS
Exploits2References1
CVE
CVE
added 2024/04/18 12:0 a.m.52 views

CVE-2024-30923

DerbyNet v9.0 and earlier versions are affected by an SQL Injection in the print/render/racer.inc path that allows remote code execution via the where clause in Racer Document Rendering. Root cause is insufficient sanitization of the where parameter, enabling attackers to manipulate SQL queries. ...

9.8CVSS8.7AI score0.0493EPSS
Exploits2References2Affected Software1
Rows per page
Query Builder