Lucene search
+L

3903 matches found

NVD
NVD
•added 2025/10/16 4:15 p.m.•18 views

CVE-2025-62496

A vulnerability exists in the QuickJS engine's BigInt string parsing logic jsbigintfromstring when attempting to create a BigInt from a string with an excessively large number of digits. The function calculates the necessary number of bits nbits required to store the BigInt using the formula:...

8.8CVSS0.0048EPSS
SaveExploits1References2
OSV
OSV
•added 2025/10/16 4:15 p.m.•12 views

UBUNTU-CVE-2025-62496

A vulnerability exists in the QuickJS engine's BigInt string parsing logic jsbigintfromstring when attempting to create a BigInt from a string with an excessively large number of digits. The function calculates the necessary number of bits nbits required to store the BigInt using the formula:...

8.8CVSS6.1AI score0.0048EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/10/16 3:52 p.m.•5 views

CVE-2025-62496 Integer overflow in js_bigint_from_string in QuickJS

A vulnerability exists in the QuickJS engine's BigInt string parsing logic jsbigintfromstring when attempting to create a BigInt from a string with an excessively large number of digits. The function calculates the necessary number of bits nbits required to store the BigInt using the formula:...

7.1CVSS6.1AI score0.0048EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/15 8:29 p.m.•19 views

EUVD-2025-34678

happy-dom's --disallow-code-generation-from-strings is not sufficient for isolating untrusted JavaScript...

9.4CVSS5.8AI score0.00352EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/10/13 5:29 a.m.•20 views

CVE-2025-60868

The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...

6.5CVSS6.8AI score0.00229EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/13 12:00 a.m.•21 views

Elastic Cloud Enterprise 安全漏洞

Elastic Cloud Enterprise is a cloud platform from the Dutch company Elastic. It makes it easy to deploy, operate and scale Elastic Stack in the cloud. A security vulnerability exists in Elastic Cloud Enterprise that stems from improper neutralization of special elements in the template engine,...

9.1CVSS6.7AI score0.00665EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/10 3:31 p.m.•15 views

EUVD-2025-33723

The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...

6.5CVSS6.3AI score0.00229EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/10/10 12:00 a.m.•24 views

CVE-2025-60868

The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...

0.00229EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/10 12:00 a.m.•19 views

PT-2025-41562

Name of the Vulnerable Software and Affected Versions Statamic Alt Redirect version 1.6.3 Description The Alt Redirect 1.6.3 addon for Statamic does not consistently remove query string parameters when the "Query String Strip" feature is enabled. Variations in case, encoded keys, and duplicate...

6.5CVSS6.4AI score0.00229EPSS
SaveExploits0References7
GitLab Advisory Database
GitLab Advisory Database
•added 2025/10/10 12:00 a.m.•35 views

Alt Redirect: Potential Authentication Bypass by Spoofing through query-string stripping logic flaw

The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...

6.5CVSS5.8AI score0.00229EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/09 12:00 a.m.•1 views

CVE-2025-32916: Use of GET Request Method With Sensitive Query Strings

Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions 2.4.0p13, 2.3.0p38, 2.2.0p46, and 2.1.0 EOL may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs...

4.3CVSS5.7AI score0.00192EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/10/08 12:49 p.m.•165 views

LabExploit

LiveExploit SECURITY RESEARCH TOOL - USE RESPONSIBLY A...

7.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2004-1830

Malware in sbrugna...

4.3CVSS6.4AI score0.01208EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2017-0203

Malware in sbrugna...

4.3CVSS7.3AI score0.02492EPSS
SaveExploits0References20
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2009-3258

Malware in sbrugna...

5CVSS6.4AI score0.03515EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2018-17237

Malware in sbrugna...

6.5CVSS7AI score0.01281EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2021-1789

Malware in sbrugna...

7.5CVSS7.3AI score0.01148EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•39 views

EUVD-2021-1106

Malware in sbrugna...

7.5CVSS7.5AI score0.01987EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2014-2593

Malware in sbrugna...

6.5CVSS6.4AI score0.01746EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2016-5801

Malware in sbrugna...

9.8CVSS8.2AI score0.03816EPSS
SaveExploits0References4
Rows per page
Query Builder