Lucene search
+L

5825 matches found

Vulnrichment
Vulnrichment
•added 2025/09/02 9:02 p.m.•7 views

CVE-2025-9834 PHPGurukul Small CRM registration.php cross site scripting

A flaw has been found in PHPGurukul Small CRM 4.0. Affected by this issue is some unknown functionality of the file /registration.php. Executing manipulation of the argument Username can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and...

5.1CVSS5.2AI score0.00285EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/09/02 12:00 a.m.•18 views

PHPGurukul Small CRM 安全漏洞

Small CRM is a customer relationship management system. Small CRM suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter Username in the file /registration.php, which can be exploited by an attacker to...

5.4CVSS6.2AI score0.00285EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/02 12:00 a.m.•5 views

CVE-2025-9834: Improper Neutralization of Input During Web Page Generation

A flaw has been found in PHPGurukul Small CRM 4.0. Affected by this issue is some unknown functionality of the file /registration.php. Executing manipulation of the argument Username can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and...

5.4CVSS4.1AI score0.00285EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/08/30 6:18 p.m.•20 views

CVE-2025-58218

Deserialization of Untrusted Data vulnerability in enituretechnology Small Package Quotes – USPS Edition small-package-quotes-usps-edition allows Object Injection.This issue affects Small Package Quotes – USPS Edition: from n/a through = 1.3.9...

7.2CVSS5.9AI score0.00402EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/08/27 7:08 p.m.•19 views

WordPress Small Package Quotes – USPS Edition Plugin <= 1.3.9 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Drew / mcdruid in WordPress Plugin Small Package Quotes – USPS Edition versions = 1.3.9...

7.2CVSS7AI score0.00402EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/08/27 6:15 p.m.•14 views

CVE-2025-58218

Deserialization of Untrusted Data vulnerability in enituretechnology Small Package Quotes – USPS Edition small-package-quotes-usps-edition allows Object Injection.This issue affects Small Package Quotes – USPS Edition: from n/a through = 1.3.9...

7.2CVSS0.00402EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/27 5:45 p.m.•26 views

CVE-2025-58218 WordPress Small Package Quotes – USPS Edition Plugin <= 1.3.9 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in enituretechnology Small Package Quotes – USPS Edition small-package-quotes-usps-edition allows Object Injection.This issue affects Small Package Quotes – USPS Edition: from n/a through = 1.3.9...

7.2CVSS0.00402EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/27 5:45 p.m.•35 views

CVE-2025-58218

CVE-2025-58218 describes a Deserialization of Untrusted Data vulnerability in the WordPress plugin Small Package Quotes – USPS Edition (enituretechnology) affecting versions n/a through 1.3.9. The issue is described as PHP Object Injection via untrusted data deserialization, leading to potential ...

7.2CVSS5.9AI score0.00402EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/27 5:45 p.m.•3 views

CVE-2025-58218 WordPress Small Package Quotes – USPS Edition Plugin <= 1.3.9 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in enituretechnology Small Package Quotes – USPS Edition small-package-quotes-usps-edition allows Object Injection.This issue affects Small Package Quotes – USPS Edition: from n/a through = 1.3.9...

7.2CVSS5.9AI score0.00402EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/27 12:00 a.m.•14 views

WordPress plugin Small Package Quotes – USPS Edition 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

7.2CVSS7.2AI score0.00402EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/27 12:00 a.m.•5 views

CVE-2025-58218: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in enituretechnology Small Package Quotes – USPS Edition small-package-quotes-usps-edition allows Object Injection.This issue affects Small Package Quotes – USPS Edition: from n/a through = 1.3.9...

7.2CVSS5.8AI score0.00402EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/25 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2016-9812

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The gstmpegtssectionnew function in the mpegts decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service out-of-bounds read via a...

7.5CVSS7.2AI score0.03539EPSS
SaveExploits0References2
OSV
OSV
•added 2025/08/22 4:15 p.m.•14 views

AZL-66599 CVE-2025-38622 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: net: drop UFO packets in udprcvsegment When sending a packet with virtionethdr to tun device, if the gsotype in virtionethdr is SKBGSOUDP and the gsosize is less than udphdr size, below crash may happen. ------------ cut here...

5.5CVSS5.6AI score0.00176EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/21 7:29 a.m.•24 views

USN-7701-3 linux-iot vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Device tree and open firmware driver; - SCSI subsystem; - TTY drivers; - SMB network file system; - Bluetooth...

9.8CVSS6.7AI score0.00894EPSS
SaveExploits0References8
Ubuntu
Ubuntu
•added 2025/08/20 7:43 a.m.•19 views

USN-7701-2: Linux kernel (FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Device tree and open firmware driver; - SCSI subsystem; - TTY drivers; - SMB network file system; - Bluetooth...

9.8CVSS7AI score0.00894EPSS
SaveExploits0
Akamai Blog
Akamai Blog
•added 2025/08/18 10:20 a.m.•14 views

How Cloud Wrapper Evolved to Optimize Small-Object Caching

Learn how Akamai's Cloud Wrapper evolved to optimize small-object caching, reduce egress costs, and boost SEO rankings for web and media assets...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•9 views

Malicious code in emulate-slow-execute-try-small (npm)

The package emulate-slow-execute-try-small was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•9 views

Malicious code in long-report-info-emulate-small (npm)

The package long-report-info-emulate-small was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•9 views

Malicious code in minify-monitor-small-phi-nu (npm)

The package minify-monitor-small-phi-nu was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•5 views

Malicious code in rho-rho-runtime-small-root (npm)

The package rho-rho-runtime-small-root was found to contain malicious code...

7AI score
SaveExploits0
Rows per page
Query Builder