Lucene search
K

194 matches found

Nuclei
Nuclei
added 10 hours ago17 views

SRS Simple Hits Counter 1.0.3-1.0.4 - Unauthenticated Blind SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' in SRS Simple Hits Counter Plugin for WordPress 1.0.3 and 1.0.4 allows a remote, unauthenticated attacker to determine the value of database fields. id: CVE-2020-5766 info: name: SRS Simple Hits Counter 1.0.3-1.0.4...

7.5CVSS7.4AI score0.39068EPSS
Exploits3References2
Nuclei
Nuclei
added 2026/05/29 3:59 a.m.17 views

SRS - Command Injection

SRS's v5.0.137v5.0.156, v6.0.18v6.0.47 api-server server is vulnerable to a drive-by command injection. id: CVE-2023-34105 info: name: SRS - Command Injection author: iamnoooob,rootxharsh,pdresearch severity: high description: | SRS's v5.0.137v5.0.156, v6.0.18v6.0.47 api-server server is vulnerab...

7.5CVSS7.1AI score0.85502EPSS
Exploits1References2
NVD
NVD
added 2026/05/08 5:16 p.m.8 views

CVE-2026-42030

MapServer is a system for developing web-based GIS applications. From version 6.0 to before version 8.6.2, a reflected XSS vulnerability in MapServer's WMS server allows an unauthenticated attacker to inject arbitrary HTML/JavaScript into the browser of any user who opens a crafted WMS URL. The...

6.1CVSS0.00016EPSS
Exploits1References2
EUVD
EUVD
added 2026/05/08 3:56 p.m.6 views

EUVD-2026-28807

MapServer is a system for developing web-based GIS applications. From version 6.0 to before version 8.6.2, a reflected XSS vulnerability in MapServer's WMS server allows an unauthenticated attacker to inject arbitrary HTML/JavaScript into the browser of any user who opens a crafted WMS URL. The...

6.1CVSS5.9AI score0.00016EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/05/08 3:56 p.m.6 views

CVE-2026-42030 MapServer: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in OpenLayers viewer

MapServer is a system for developing web-based GIS applications. From version 6.0 to before version 8.6.2, a reflected XSS vulnerability in MapServer's WMS server allows an unauthenticated attacker to inject arbitrary HTML/JavaScript into the browser of any user who opens a crafted WMS URL. The...

6.1CVSS5.9AI score0.00016EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-18734

Malware in sbrugna...

7.5CVSS7.6AI score0.01035EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-13474

Malware in sbrugna...

3.3CVSS4.2AI score0.00057EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-26870

Malicious code in bioql PyPI...

7.2CVSS7.1AI score0.07702EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-30995

Malicious code in bioql PyPI...

7.2CVSS6.6AI score0.00459EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-43615

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00669EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2021-8789

Malicious code in bioql PyPI...

7.2CVSS7.1AI score0.00441EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-26838

Malicious code in bioql PyPI...

8.8CVSS8.5AI score0.0015EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:46 a.m.5 views

CVE-2023-22709

Cross-Site Request Forgery CSRF vulnerability in Atif N SRS Simple Hits Counter plugin = 1.1.0 versions...

8.8CVSS7.1AI score0.0015EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:55 a.m.4 views

CVE-2023-34105

SRS is a real-time video server supporting RTMP, WebRTC, HLS, HTTP-FLV, SRT, MPEG-DASH, and GB28181. Prior to versions 5.0.157, 5.0-b1, and 6.0.48, SRS's api-server server is vulnerable to a drive-by command injection. An attacker may send a request to the /api/v1/snapshots endpoint containing an...

7.5CVSS8AI score0.85502EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:26 p.m.5 views

CVE-2021-38544

Sony SRS-XB33 and SRS-XB43 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, t...

5.9CVSS7.1AI score0.00292EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:38 p.m.6 views

CVE-2021-30300

Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when processing the SRS configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

7.5CVSS7.6AI score0.0026EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:48 p.m.5 views

CVE-2020-26104

In cPanel before 88.0.3, an insecure SRS secret is used on a templated VM SEC-552...

7.5CVSS6.9AI score0.01035EPSS
Exploits0
OSV
OSV
added 2025/03/19 4:15 p.m.1 views

CVE-2025-23382

Dell Secure Connect Gateway SCG 5.0 Appliance - SRS, versions 5.26, contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.c...

5.8CVSS5.8AI score0.00303EPSS
Exploits0References1
NVD
NVD
added 2025/02/24 3:15 p.m.6 views

CVE-2025-27327

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Winlin Live Streaming Video Player – by SRS Player srs-player allows DOM-Based XSS.This issue affects Live Streaming Video Player – by SRS Player: from n/a through = 1.0.18...

6.5CVSS0.00178EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/02/24 3:13 p.m.2 views

WordPress Live Streaming Video Player – by SRS Player plugin <= 1.0.18 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin Live Streaming Video Player – by SRS Player versions = 1.0.18...

6.5CVSS6.1AI score0.00178EPSS
Exploits0Affected Software1
Rows per page
Query Builder