Lucene search
K

633 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:50 a.m.2 views

CVE-2020-10951

Western Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on sign-in pages...

4.7CVSS7.1AI score0.00247EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:54 a.m.0 views

CVE-2021-41126

October is a Content Management System CMS and web platform built on the the Laravel PHP Framework. In affected versions administrator accounts which had previously been deleted may still be able to sign in to the backend using October CMS v2.0. The issue has been patched in v2.1.12 of the...

7.2CVSS6.9AI score0.00485EPSS
Exploits0References1
OSV
OSV
added 2026/01/06 1:29 p.m.2 views

MAL-2026-93 Malicious code in okta-signin-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1968f15d4faab74927023ad015e009d98087c120d8cb31b4a754faff297219b7 The package okta-signin-widget was found to contain malicious code. Source: ghsa-malware...

6.8AI score
Exploits0References1
The Hacker News
The Hacker News
added 2025/12/29 9:44 a.m.5 views

27 Malicious npm Packages Used as Phishing Infrastructure to Steal Login Credentials

Cybersecurity researchers have disclosed details of what has been described as a "sustained and targeted" spear-phishing campaign that has published over two dozen packages to the npm registry to facilitate credential theft. The activity, which involved uploading 27 npm packages from six differen...

6.5AI score
Exploits0
Microsoft KB
Microsoft KB
added 2025/12/09 8:0 a.m.37 views

October 14, 2025—KB5066835 (OS Builds 26200.6899 and 26100.6899)

October 14, 2025—KB5066835 OS Builds 26200.6899 and 26100.6899 Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. This might affect the ability of certain personal and business devices to boot secure...

7.8CVSS7.2AI score0.04972EPSS
Exploits5
The Hacker News
The Hacker News
added 2025/11/27 3:37 p.m.4 views

Microsoft to Block Unauthorized Scripts in Entra ID Logins with 2026 CSP Update

Microsoft has announced plans to improve the security of Entra ID authentication by blocking unauthorized script injection attacks starting a year from now. The update to its Content Security Policy CSP aims to enhance the Entra ID sign-in experience at "login.microsoftonline.com" by only letting...

7AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/11/04 12:53 a.m.7 views

CVE-2025-63451

Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/sign-in.php...

9.8CVSS8AI score0.00062EPSS
Exploits1References1
EUVD
EUVD
added 2025/11/03 6:31 p.m.1 views

EUVD-2025-37495

Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/sign-in.php...

9.8CVSS7.5AI score0.00062EPSS
Exploits1References2
OSV
OSV
added 2025/11/03 4:15 p.m.0 views

CVE-2025-63451

Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/sign-in.php...

9.8CVSS5.9AI score
Exploits0References1
NVD
NVD
added 2025/11/03 4:15 p.m.4 views

CVE-2025-63451

Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/sign-in.php...

9.8CVSS0.00062EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/11/03 12:0 a.m.1 views

CVE-2025-63451

Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/sign-in.php...

7.6AI score0.00062EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/11/03 12:0 a.m.2 views

PT-2025-44778

Name of the Vulnerable Software and Affected Versions Car-Booking-System-PHP version 1.0 Description Car-Booking-System-PHP version 1.0 is susceptible to SQL Injection in the /carlux/sign-in.php file. The vulnerability exists due to insufficient input validation when processing user-supplied data...

9.8CVSS7.6AI score0.00062EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/11/03 12:0 a.m.2 views

CarLux 安全漏洞

CarLux is a car booking system by the individual developer AKSHIT SONANI. A security vulnerability exists in CarLux version 1.0, which originates from a SQL injection vulnerability in the file /carlux/sign-in.php...

9.8CVSS7.8AI score0.00062EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/11/03 12:0 a.m.4 views

CVE-2025-63451

Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/sign-in.php...

0.00062EPSS
Exploits1References1
CVE
CVE
added 2025/11/03 12:0 a.m.10 views

CVE-2025-63451

CVE-2025-63451 affects Car-Booking-System-PHP v1.0 vulnerable via SQL Injection in /carlux/sign-in.php due to insufficient input validation. Underlying flaw enables unauthorized data access/manipulation with high impact across confidentiality, integrity, and availability (CVSS 3.1: 9.8). Evidence...

9.8CVSS7.6AI score0.00062EPSS
Exploits1References1Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2008-5787

Malware in sbrugna...

6.8CVSS6.2AI score0.01166EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-13380

Malware in sbrugna...

8.6CVSS8.8AI score0.00222EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-11062

Malware in sbrugna...

10CVSS9.3AI score0.05628EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-1066

Malware in sbrugna...

6.1CVSS6.1AI score0.0018EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2017-1269

Malware in sbrugna...

8.8CVSS8.6AI score0.00316EPSS
Exploits1References4
Rows per page
Query Builder