Lucene search
+L

24 matches found

Cvelist
Cvelist
added 2026/09/02 4:59 p.m.33 views

CVE-2026-84810 claude-skill-antivirus Analysis Bypass via Manifest-Only Local Directory Scan

claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md while ignoring Python source, bytecode, and other artifacts in the scripts directory. Attackers can distribute skills with malicious code in non-manifest files that receive a SAFE...

7.1CVSS0.00262EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/02 4:59 p.m.13 views

EUVD-2026-70225

claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md while ignoring Python source, bytecode, and other artifacts in the scripts directory. Attackers can distribute skills with malicious code in non-manifest files that receive a SAFE...

7.1CVSS5.9AI score0.00262EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2019-7653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowing code...

9.8CVSS7.3AI score0.02263EPSS
SaveExploits1References2
VulnCheck KEV
VulnCheck KEV
added 2025/02/27 12:00 a.m.9 views

VulnCheck KEV: CVE-2021-23263

Unauthenticated remote attackers can read textual content via FreeMarker including files /scripts/, /templates/ and some of the files in /.git/ non-binary...

7.5CVSS5.8AI score0.01581EPSS
SaveExploits0References1
Snyk
Snyk
added 2024/10/28 12:23 p.m.8 views

Command Injection

Overview pyload-ng is a The free and open-source Download Manager written in pure Python Affected versions of this package are vulnerable to Command Injection via the flashgot API and the download process. An attacker can execute arbitrary code by manipulating the download path to target the...

9.2CVSS8AI score0.00682EPSS
SaveExploits1References2
OSV
OSV
added 2024/10/25 11:15 p.m.13 views

PYSEC-2024-302

pyLoad is a free and open-source Download Manager. The folder /.pyload/scripts has scripts which are run when certain actions are completed, for e.g. a download is finished. By downloading a executable file to a folder in /scripts and performing the respective action, remote code execution can be...

2.3CVSS6.7AI score0.00682EPSS
SaveExploits1References1
PyPA
PyPA
added 2024/10/25 11:15 p.m.19 views

PYSEC-2024-302

pyLoad is a free and open-source Download Manager. The folder /.pyload/scripts has scripts which are run when certain actions are completed, for e.g. a download is finished. By downloading a executable file to a folder in /scripts and performing the respective action, remote code execution can be...

9.1CVSS6.7AI score0.00682EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/21 12:00 a.m.13 views

PT-2023-30657

Name of the Vulnerable Software and Affected Versions pyLoad version 0.5.0 Description The issue allows an authenticated user to upload files to arbitrary locations on the server, potentially leading to command execution by abusing scripts. When creating a new package, a subdirectory is created...

8.8CVSS7.5AI score0.01058EPSS
SaveExploits1References15
BDU FSTEC
BDU FSTEC
added 2022/01/04 12:00 a.m.16 views

The vulnerability in the Crafter CMS content management system’s /scripts/*, /templates/*, and /.git/* directories allows a hacker to read the textual content through FreeMarker.

The vulnerability of /scripts/, /templates/, and /.git/ in the Crafter CMS content management system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to read the textual content through FreeMarker remotely...

7.8CVSS7.2AI score0.01581EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/12/01 3:40 p.m.6 views

CVE-2021-23263

Unauthenticated remote attackers can read textual content via FreeMarker including files /scripts/, /templates/ and some of the files in /.git/ non-binary...

7.5CVSS6.8AI score0.01581EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2019/02/09 3:29 a.m.27 views

CVE-2019-7653

The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowing code injection, because "python -m" looks in this directory, as demonstrated by rdf2dot. This issue is specific to use of the debian/scripts...

9.8CVSS9.4AI score0.02263EPSS
SaveExploits1References4
OSV
OSV
added 2019/02/09 3:29 a.m.11 views

DEBIAN-CVE-2019-7653

The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowing code injection, because "python -m" looks in this directory, as demonstrated by rdf2dot. This issue is specific to use of the debian/scripts...

9.8CVSS8.4AI score0.02263EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2019/02/09 3:00 a.m.64 views

CVE-2019-7653

The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowing code injection, because "python -m" looks in this directory, as demonstrated by rdf2dot. This issue is specific to use of the debian/scripts...

9.8CVSS9.4AI score0.02263EPSS
SaveExploits1
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.19 views

BS Scripts Directory (info.php) SQL Injection Vulnerability

No description provided by source. Exploit Title: BS Script Directory remote SQL injection vulnerability Date: 15th july 2010 Author: D4rk357 Critical:high contact:d4rk357atyahoodotin Price : 24.95 $ Software Link:http://www.brotherscripts.com/productinfo.php?productsid=454 Greetz to :b0nd,...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2011/03/21 12:00 a.m.52 views

Online Store PHP Script By Goran Cross Site Scripting

f0und by: kurdish hackers team group: kurd-team c0ntact: [email protected] site: www.kurdteam.org ================================= ==============script=============== ================================= script: Online Store d0rk:Copyrights © 2009 - Online Store. All rights reserved. Powered by:...

7.4AI score
SaveExploits0
CVE
CVE
added 2010/07/28 9:00 p.m.65 views

CVE-2010-2905

CVE-2010-2905 is a SQL injection vulnerability affecting the ScriptsFeed and BrotherScripts (BS) Scripts Directory, exploitable via the id parameter in info.php and allowing remote execution of arbitrary SQL commands. The CVE has corroborating entries in multiple sources (NVD, CVE list, PRION) de...

7.5CVSS8.6AI score0.00971EPSS
SaveExploits2References4Affected Software1
CVE
CVE
added 2010/07/28 9:00 p.m.82 views

CVE-2010-2906

CVE-2010-2906 affects ScriptsFeed and BrotherScripts (BS) Scripts Directory: SQL injection in articlesdetails.php via the id parameter, allowing remote execution of arbitrary SQL commands. This is a separate vector from CVE-2010-2905 (info.php). Documented impact is partial confidentiality/integr...

7.5CVSS8.6AI score0.00961EPSS
SaveExploits2References3Affected Software1
exploitpack
exploitpack
added 2010/07/16 12:00 a.m.15 views

BS Scripts Directory - articlesdetails.php SQL Injection

BS Scripts Directory - articlesdetails.php SQL Injection Exploit Title: BS Script Directory articlesdetails remote SQL injection vulnerability Date: 16th july 2010 Author: k4k4shi Critical:high contact:lvyatlivedotde Price : 24.95 $ Software Link:http://www.brotherscripts.com/ Shoutz to :...

0.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2010/07/15 12:00 a.m.40 views

BS Scripts Directory - 'info.php' SQL Injection

Exploit Title: BS Script Directory remote SQL injection vulnerability Date: 15th july 2010 Author: D4rk357 Critical:high contact:d4rk357atyahoodotin Price : 24.95 $ Software Link:http://www.brotherscripts.com/productinfo.php?productsid=454 Greetz to :b0nd, Fbih2s,Beenu,rockey killer,The empty,...

7.5CVSS5.2AI score0.00971EPSS
SaveExploits2
Packet Storm
Packet Storm
added 2010/07/06 12:00 a.m.38 views

Bs Scripts_Directory SQL Injection

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs ScriptsDirectory Sqli/Auth Bypass Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL :http://www.brotherscripts.com/ Price:$24.95 Author :...

7.4AI score
SaveExploits0
Rows per page
Query Builder