Lucene search
+L

40032 matches found

EUVD
EUVD
•added 2025/12/29 3:30 p.m.•18 views

EUVD-2025-205576

A vulnerability was determined in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/search-invoices.php. Executing manipulation of the argument searchdata can lead to cross site scripting. The attack can be launched remotely...

4.8CVSS5.3AI score0.00241EPSS
SaveExploits1References6
NVD
NVD
•added 2025/12/29 1:15 p.m.•19 views

CVE-2025-15188

A vulnerability was determined in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/search-invoices.php. Executing a manipulation of the argument searchdata can lead to cross site scripting. The attack can be launched remotel...

4.8CVSS0.00241EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/12/29 1:15 p.m.•21 views

CVE-2025-15188

A vulnerability was determined in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/search-invoices.php. Executing a manipulation of the argument searchdata can lead to cross site scripting. The attack can be launched remotel...

4.8CVSS4.1AI score0.00241EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/12/29 12:32 p.m.•57 views

CVE-2025-15188 Campcodes Complete Online Beauty Parlor Management System search-invoices.php cross site scripting

A vulnerability was determined in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/search-invoices.php. Executing a manipulation of the argument searchdata can lead to cross site scripting. The attack can be launched remotel...

4.8CVSS0.00241EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/29 12:32 p.m.•36 views

CVE-2025-15188

CVE-2025-15188 affects Campcodes Complete Online Beauty Parlor Management System 1.0. The vulnerability is a cross-site scripting flaw in the file /admin/search-invoices.php triggered by manipulating the searchdata parameter. It can be exploited remotely, and multiple sources indicate the exploit...

4.8CVSS3.6AI score0.00241EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/29 12:32 p.m.•13 views

CVE-2025-15188 Campcodes Complete Online Beauty Parlor Management System search-invoices.php cross site scripting

A vulnerability was determined in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/search-invoices.php. Executing a manipulation of the argument searchdata can lead to cross site scripting. The attack can be launched remotel...

4.8CVSS3.6AI score0.00241EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2025/12/29 12:32 p.m.•11 views

CVE-2025-15188

A vulnerability was determined in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/search-invoices.php. Executing a manipulation of the argument searchdata can lead to cross site scripting. The attack can be launched remotel...

4.8CVSS3.8AI score0.00241EPSS
SaveExploits1References5Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2025/12/29 4:12 a.m.•27 views

libvpx:vpx_enc_fuzzer_vp9: Use-of-uninitialized-value in vp9_diamond_search_sad_c

Project: https://chromium.googlesource.com/webm/libvpx Detailed Report: https://oss-fuzz.com/testcase?key=4641403482472448 Project: libvpx Fuzzing Engine: libFuzzer Fuzz Target: vpxencfuzzervp9 Job Type: libfuzzermsanlibvpx Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

5.4AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/12/29 12:00 a.m.•17 views

CampCodes Complete Online Beauty Parlor Management System č·Øē«™č„šęœ¬ę¼ę“ž

Complete Online Beauty Parlor Management System is an online beauty parlor management system. Complete Online Beauty Parlor Management System suffers from a cross-site scripting vulnerability that stems from an incorrect manipulation of the parameter searchdata in the file...

4.8CVSS5.5AI score0.00241EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/29 12:00 a.m.•8 views

CVE-2025-15188: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/search-invoices.php. Executing a manipulation of the argument searchdata can lead to cross site scripting. The attack can be launched remotel...

4.8CVSS3.6AI score0.00241EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
•added 2025/12/29 12:00 a.m.•18 views

ManageEngine Exchange Reporter Plus Service Outage

The vulnerability of the Content Search module in the ManageEngine Exchange Reporter Plus monitoring, analysis, and reporting tool is related to the use of a regular expression with high computational complexity. Exploiting this vulnerability could allow a malicious actor to cause service...

4.3CVSS5.7AI score0.01137EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/29 12:00 a.m.•21 views

Instant Search XSS

The vulnerability of the Instant Search function in the Content Search module of the ManageEngine Exchange Reporter Plus software exists because measures to protect the website structure have not been taken. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...

7.5CVSS5.6AI score0.00454EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/12/29 12:00 a.m.•21 views

PT-2025-53715

Name of the Vulnerable Software and Affected Versions Campcodes Complete Online Beauty Parlor Management System version 1.0 Description A flaw exists in Campcodes Complete Online Beauty Parlor Management System 1.0 that could allow for cross site scripting. The issue is located in the...

4.8CVSS3.9AI score0.00241EPSS
SaveExploits1References11
RedhatCVE
RedhatCVE
•added 2025/12/27 7:43 a.m.•22 views

CVE-2025-59888

Improper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access to the file system. This security issue has been fixed in the latest version of EUC which is available on the Eaton download center...

6.7CVSS7.5AI score0.00189EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/12/27 5:26 a.m.•282 views

Exploit for Insufficient Type Distinction in Rarlab Winrar

CVE Exploit Finder Author: Your Name/Handle Focus: Automated V...

7.8CVSS6.8AI score0.99815EPSS
SaveExploits49
RedhatCVE
RedhatCVE
•added 2025/12/27 12:05 a.m.•32 views

CVE-2024-44065

Time-based blind SQL Injection vulnerability in Cloudlog v2.6.15 at the endpoint /index.php/logbookadvanced/search in the qsoresults parameter...

9.8CVSS5.9AI score0.00384EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/12/27 12:00 a.m.•20 views

NewStart CGSL MAIN 7.02 : libpq Multiple Vulnerabilities (NS-SA-2025-0255)

The remote NewStart CGSL host, running version MAIN 7.02, has libpq packages installed that are affected by multiple vulnerabilities: - Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables e.g. PATH...

8.8CVSS8AI score0.04393EPSS
SaveExploits1References11
RedhatCVE
RedhatCVE
•added 2025/12/26 6:54 p.m.•16 views

CVE-2025-68942

A flaw was found in Gitea. A remote attacker could exploit a Cross-Site Scripting XSS vulnerability by injecting malicious scripts into the search input box. This occurs because the application improperly uses v-html instead of v-text for rendering user input. Successful exploitation allows for t...

5.4CVSS7.7AI score0.00247EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/12/26 6:30 p.m.•18 views

EUVD-2024-55363

Time-based blind SQL Injection vulnerability in Cloudlog v2.6.15 at the endpoint /index.php/logbookadvanced/search in the qsoresults parameter...

9.8CVSS5.9AI score0.00384EPSS
SaveExploits1References3
GithubExploit
GithubExploit
•added 2025/12/26 2:19 p.m.•211 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell Scanner – CVE-2025-55182 šŸ” Ferramenta educacion...

10CVSS7.9AI score0.99802EPSS
SaveExploits400
Rows per page
Query Builder