Lucene search
+L

11 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2025-19131

Malicious code in bioql PyPI...

8.1CVSS7.6AI score0.01139EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•27 views

EUVD-2025-19133

Malicious code in bioql PyPI...

5.9CVSS6.4AI score0.00492EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/27 6:18 p.m.•47 views

CVE-2025-6444

ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability. This vulnerability allows remote attackers to relay NTLM credentials on affected installations of ServiceStack. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

5.9CVSS6.5AI score0.00492EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/25 6:15 p.m.•24 views

CVE-2025-6445

ServiceStack FindType Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ServiceStack. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

8.1CVSS0.01139EPSS
SaveExploits0References2
NVD
NVD
•added 2025/06/25 6:15 p.m.•29 views

CVE-2025-6444

ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability. This vulnerability allows remote attackers to relay NTLM credentials on affected installations of ServiceStack. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

5.9CVSS0.00492EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/25 5:42 p.m.•203 views

CVE-2025-6445

CVE-2025-6445 affects ServiceStack via the FindType method, where lack of validation of a user-supplied path in file operations enables remote code execution in the context of the current process. Documented by multiple connected sources (e.g., ZDI advisory ZDI-25-416; Red Hat CVE entry) with att...

8.1CVSS8.1AI score0.01139EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/06/23 12:00 a.m.•25 views

PT-2025-26618 · Unknown · Servicestack

Name of the Vulnerable Software and Affected Versions: ServiceStack affected versions not specified Description: This issue allows remote attackers to relay NTLM credentials on affected installations of ServiceStack. The specific flaw exists within the implementation of the GetErrorResponse metho...

5.9CVSS6.4AI score0.00492EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/06/23 12:00 a.m.•50 views

PT-2025-26619 · Unknown · Servicestack

Name of the Vulnerable Software and Affected Versions: ServiceStack affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of ServiceStack. The specific flaw exists within the implementation of the FindType method, which...

8.1CVSS8.1AI score0.01139EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
•added 2025/06/23 12:00 a.m.•23 views

ServiceStack FindType Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of ServiceStack. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the implementation o...

8.1CVSS8.1AI score0.01139EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/06/23 12:00 a.m.•15 views

ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability

This vulnerability allows remote attackers to relay NTLM credentials on affected installations of ServiceStack. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the implementation o...

5.9CVSS6.5AI score0.00492EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:06 p.m.•35 views

CVE-2020-28042

ServiceStack before 5.9.2 mishandles JWT signature verification unless an application has a custom ValidateToken function that establishes a valid minimum length for a signature...

5.3CVSS6.5AI score0.02325EPSS
SaveExploits1
Rows per page
Query Builder