Lucene search
+L

21356 matches found

osv_ubuntu
osv_ubuntu
•added 2025/10/09 10:15 a.m.•27 views

UBUNTU-CVE-2025-39955

In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcpsksk-fastopenrsk in tcpdisconnect. syzbot reported the splat below where a socket had tcpsksk-fastopenrsk in the TCPESTABLISHED state. 0 syzbot reused the server-side TCP Fast Open socket as a new client before the...

7.8CVSS6.5AI score0.00161EPSS
SaveExploits0References34
osv_cve
osv_cve
•added 2025/10/09 9:47 a.m.•24 views

CVE-2025-39955 tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().

In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcpsksk-fastopenrsk in tcpdisconnect. syzbot reported the splat below where a socket had tcpsksk-fastopenrsk in the TCPESTABLISHED state. 0 syzbot reused the server-side TCP Fast Open socket as a new client before the...

6.4AI score
SaveExploits0References13
The Hacker News
The Hacker News
•added 2025/10/09 9:10 a.m.•15 views

From Phishing to Malware: AI Becomes Russia's New Cyber Weapon in War on Ukraine

Russian hackers' adoption of artificial intelligence AI in cyber attacks against Ukraine has reached a new level in the first half of 2025 H1 2025, the country's State Service for Special Communications and Information Protection SSSCIP said. "Hackers now employ it not only to generate phishing...

9.9CVSS6.6AI score0.98972EPSS
SaveExploits43
The Hacker News
The Hacker News
•added 2025/10/09 9:10 a.m.•16 views

From Phishing to Malware: AI Becomes Russia's New Cyber Weapon in War on Ukraine

Russian hackers' adoption of artificial intelligence AI in cyber attacks against Ukraine has reached a new level in the first half of 2025 H1 2025, the country's State Service for Special Communications and Information Protection SSSCIP said. "Hackers now employ it not only to generate phishing...

5.2AI score
SaveExploits0
NVD
NVD
•added 2025/10/09 4:16 a.m.•21 views

CVE-2025-11530

A weakness has been identified in code-projects Online Complaint Site 1.0. Affected is an unknown function of the file /cms/admin/state.php. This manipulation of the argument state causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...

8.8CVSS0.00381EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/10/09 4:16 a.m.•30 views

CVE-2025-11530

A weakness has been identified in code-projects Online Complaint Site 1.0. Affected is an unknown function of the file /cms/admin/state.php. This manipulation of the argument state causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...

8.8CVSS5.7AI score0.00381EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/09 3:32 a.m.•17 views

EUVD-2025-33256

A weakness has been identified in code-projects Online Complaint Site 1.0. Affected is an unknown function of the file /cms/admin/state.php. This manipulation of the argument state causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...

8.8CVSS6.3AI score0.00381EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
•added 2025/10/09 3:32 a.m.•9 views

CVE-2025-11530 code-projects Online Complaint Site state.php sql injection

A weakness has been identified in code-projects Online Complaint Site 1.0. Affected is an unknown function of the file /cms/admin/state.php. This manipulation of the argument state causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...

6.5CVSS6.5AI score0.00381EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/10/09 3:32 a.m.•34 views

CVE-2025-11530 code-projects Online Complaint Site state.php sql injection

A weakness has been identified in code-projects Online Complaint Site 1.0. Affected is an unknown function of the file /cms/admin/state.php. This manipulation of the argument state causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...

6.5CVSS0.00381EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/09 1:48 a.m.•22 views

EUVD-2025-33264

The WP Go Maps formerly WP Google Maps plugin for WordPress is vulnerable to Cross-Site Request Forgery CSRF in all versions up to, and including, 9.0.46. This is due to the plugin exposing state-changing REST actions through an AJAX bridge without proper CSRF token validation, and having...

5.4CVSS5.4AI score0.00192EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/10/09 12:00 a.m.•24 views

WordPress plugin WP Go Maps has a cross-site request forgeing vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress...

5.4CVSS6.5AI score0.00192EPSS
SaveExploits0References6
Packet Storm News
Packet Storm News
•added 2025/10/09 12:00 a.m.•14 views

A Meta-Complexity Characterization of Minimal Quantum Cryptography

We give a meta-complexity characterization of EFI pairs, which are considered the "minimal" primitive in quantum cryptography and are equivalent to quantum commitments. More precisely, we show that the existence of EFI pairs is equivalent to the following: there exists a non-uniformly samplable...

6.5AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/09 12:00 a.m.•4 views

CVE-2025-11530: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Online Complaint Site 1.0. Affected is an unknown function of the file /cms/admin/state.php. This manipulation of the argument state causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...

8.8CVSS6.5AI score0.00381EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/10/09 12:00 a.m.•22 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to properly handle an IOMMU attach operation when a PCI device is accidentally removed, which coul...

7.1AI score0.00144EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/09 12:00 a.m.•15 views

Code-Projects Online Complaint Site SQL Injection Vulnerability

Online Complaint Site is an online complaint site. Online Complaint Site suffers from a SQL injection vulnerability that originates from the lack of validation of the parameter state in the file /cms/admin/state.php for externally entered SQL statements. An attacker can exploit this vulnerability...

8.8CVSS7AI score0.00381EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/10/09 12:00 a.m.•19 views

PT-2025-41356

Name of the Vulnerable Software and Affected Versions code-projects Online Complaint Site version 1.0 Description A flaw exists in code-projects Online Complaint Site 1.0 that allows for remote SQL injection. The issue is located in the file /cms/admin/state.php and involves manipulation of the...

8.8CVSS6.3AI score0.00381EPSS
SaveExploits1References10
EUVD
EUVD
•added 2025/10/08 12:31 a.m.•19 views

EUVD-2025-31876

EUVD-2025-31876...

4.8CVSS6.4AI score0.00241EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/10/08 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2023-53585

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bpf: reject unhashed sockets in bpfskassign The semantics for bpfskassign are as follows: sk...

5.5CVSS5.9AI score0.00156EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/10/08 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2022-50425

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/fpu: Fix copyxstatetouabi to copy init states correctly When an extended state component is not present in fpstate, but in init state, the function copies...

5.5CVSS5.8AI score0.0014EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/10/08 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2023-53539

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rxe: Fix incomplete state save in rxerequester If a send packet is dropped by the IP layer in rxerequester the call to rxexmitpacket can fail with err ==...

7.8CVSS7AI score0.00164EPSS
SaveExploits0References3
Rows per page
Query Builder