Lucene search
+L

4 matches found

RedhatCVE
RedhatCVE
•added 2025/04/17 3:29 p.m.•15 views

CVE-2025-32949

This vulnerability allows any authenticated user to cause the server to consume very large amounts of disk space when extracting a Zip Bomb. If user import is enabled which is the default setting, any registered user can upload an archive for importing. The code uses the yauzl library for reading...

6.5CVSS7AI score0.00564EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/04/15 12:00 a.m.•18 views

PT-2025-16351 · Yauzl +1 · Yauzl +1

Name of the Vulnerable Software and Affected Versions: PeerTube affected versions not specified Description: This issue allows any authenticated user to cause the server to consume large amounts of disk space by extracting a Zip Bomb. When user import is enabled, which is the default setting, any...

6.5CVSS6AI score0.00564EPSS
SaveExploits1References8
NVD
NVD
•added 2006/07/24 12:19 p.m.•24 views

CVE-2006-3796

DeluxeBB 1.07 and earlier does not properly handle a username composed of a single space character, which allows remote authenticated users to login as the "space" user, post as the guest user, and block the ability of an administrator to ban the "space" user...

7.5CVSS6.2AI score0.01553EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/07/21 12:00 a.m.•3 views

CVE-2006-3796: Undefined Security Weakness

DeluxeBB 1.07 and earlier does not properly handle a username composed of a single space character, which allows remote authenticated users to login as the "space" user, post as the guest user, and block the ability of an administrator to ban the "space" user...

7.5CVSS5.8AI score0.01553EPSS
SaveExploits0References1
Rows per page
Query Builder