90941 matches found
CVE-2025-59462: Uncaught Exception
An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting updates and availability...
CVE-2025-59459: Allocation of Resources Without Limits or Throttling
An attacker that gains SSH access to an unprivileged account may be able to disrupt services including SSH, causing persistent loss of availability...
CVE-2025-62928: Missing Authorization
Missing Authorization vulnerability in Joby Joseph SEO Meta Description Updater seo-meta-description-updater allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEO Meta Description Updater: from n/a through = 1.2.0...
CVE-2025-62881: Missing Authorization
Missing Authorization vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Lister Lite for eBay: from n/a through = 3.8.3...
CVE-2025-62931: Missing Authorization
Missing Authorization vulnerability in microsoftstart MSN Partner Hub microsoft-start allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MSN Partner Hub: from n/a through = 2.9...
Wapiti Web Application Vulnerability Scanner 3.2.8 Source Code
Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the source code release...
CVE-2025-59460: Use of Weak Credentials
The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access. This increases the risk of unauthorised connections...
CVE-2023-49440: Improper Neutralization of Special Elements used in an SQL Command
AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."...
CVE-2025-59463: Deadlock
An attacker may cause chunk-size mismatches that block file transfers and prevent subsequent transfers...
Linux Distros Unpatched Vulnerability : CVE-2022-50580
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - blk-throttle: prevent overflow while calculating wait time There is a problem found by code review in tgwithinbpslimit that 'bpslimit jiffyelapsedrnd' might...
CVE-2025-59461: Missing Authorization
A remote unauthenticated attacker may use the unauthenticated C++ API to access or modify sensitive data and disrupt services...
web-application-vulnerability-scanner
web-application-vulnerability-scanner A Web Application Vul...
CVE-2025-12284: Improper Input Validation
Lack of Input Validation in the web UI might lead to potential exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12278: Improper Input Validation
Logout Functionality not Working.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
WEB_VULNERABILITY_SCANNER
WEBVULNERABILITYSCANNER Automatic Sql, Xss Attack Scan Tools...
CVE-2025-12217: Use of Default Credentials
SNMP Default Community String public.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12221: Cross-Site Request Forgery (CSRF)
Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
Photon OS 5.0: Abseil PHSA-2025-5.0-0656
An update of the abseil package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0656. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
ReDoc API Docs UI Exposed
Detects publicly exposed ReDoc API documentation pages. The module performs safe, read-only GET requests and reports likely ReDoc instances based on HTML markers. Module Options msf use auxiliary/scanner/http/redocexposed msf auxiliaryredocexposed show actions ...actions... msf...