Lucene search
+L

15596 matches found

Positive Technologies
Positive Technologies
added 2025/12/04 12:0 a.m.11 views

PT-2025-49173

Name of the Vulnerable Software and Affected Versions Monkeytype versions prior to 25.49.0 Description The software exhibits improper handling of user input, potentially allowing an attacker to execute malicious JavaScript code on users who view a malicious quote submission. The quote.text and...

7.1CVSS6.1AI score0.00234EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2025/12/04 12:0 a.m.10 views

PT-2025-49030

Name of the Vulnerable Software and Affected Versions dayrui XunRuiCMS versions up to 4.7.1 Description A server-side request forgery condition exists in dayrui XunRuiCMS. The issue is located in the file admin79f2ec220c7e.php?c=api&m=test site domain within the Project Domain Change Test...

7.2CVSS4.5AI score0.00402EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2025/12/04 12:0 a.m.6 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unreleased test context that could lead to a memory leak...

6.1AI score0.00182EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/04 12:0 a.m.12 views

PT-2025-49055

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the mm/damon/sysfs interface. This interface dynamically allocates a damon ctx object for testing the validity of inputs for online DAMON...

5.4AI score0.00641EPSS
SaveExploits4References391
EUVD
EUVD
added 2025/12/03 9:31 p.m.4 views

EUVD-2025-201106

An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN .example.com...

6.5CVSS6.3AI score0.00288EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/12/03 9:24 p.m.3 views

EUVD-2025-201136

Malicious code in chai-test-await npm...

6.6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/03 9:24 p.m.6 views

Malicious code in chai-test-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc4f5ebd52a0912210e31f29b89e1199fadcf3bfddd5557b38e388f9b6df8315 The package chai-test-await was found to contain malicious code. Source: ghsa-malware a25b0475f84c41d68c89ffad60b4dc123876d634fbe93a793fae42da8e1112b...

6.9AI score
SaveExploits0References4
OSV
OSV
added 2025/12/03 9:24 p.m.7 views

MAL-2025-192289 Malicious code in chai-test-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc4f5ebd52a0912210e31f29b89e1199fadcf3bfddd5557b38e388f9b6df8315 The package chai-test-await was found to contain malicious code. Source: ghsa-malware a25b0475f84c41d68c89ffad60b4dc123876d634fbe93a793fae42da8e1112b...

6.8AI score
SaveExploits0References4
OSV
OSV
added 2025/12/03 8:16 p.m.7 views

UBUNTU-CVE-2025-61727

An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN .example.com...

6.5CVSS6.7AI score0.00288EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/12/03 5:1 p.m.8 views

CVE-2025-59693

The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allows a physically proximate attacker to obtain debug access and escalate privileges by bypassing the tamper label and opening the chassis without leaving evidence, and accessing th...

9.8CVSS7AI score0.00738EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/12/03 3:30 p.m.9 views

EUVD-2025-200969

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the testmail function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

6.5CVSS7.8AI score0.02375EPSS
SaveExploits2References4
NVD
NVD
added 2025/12/03 3:15 p.m.10 views

CVE-2025-57200

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the testmail function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

6.5CVSS0.02375EPSS
SaveExploits2References1
GithubExploit
GithubExploit
added 2025/12/03 1:44 p.m.318 views

Exploit for CVE-2025-41115

Grafana SCIMalform CVE-2025-41115 Overview This re...

10CVSS6.8AI score0.16905EPSS
SaveExploits1
Cvelist
Cvelist
added 2025/12/03 12:0 a.m.38 views

CVE-2025-57200

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the testmail function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

0.02375EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2025/12/03 12:0 a.m.4 views

CVE-2025-57200

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the testmail function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

8AI score0.02375EPSS
SaveExploits2References2
Packet Storm News
Packet Storm News
added 2025/12/03 12:0 a.m.7 views

ReFuzz: Reusing Tests for Processor Fuzzing with Contextual Bandits

Processor designs rely on iterative modifications and reuse well-established designs. However, this reuse of prior designs also leads to similar vulnerabilities across multiple processors. As processors grow increasingly complex with iterative modifications, efficiently detecting vulnerabilities...

7AI score
SaveExploits0
Packet Storm
Packet Storm
added 2025/12/03 12:0 a.m.218 views

📄 Microsoft Windows 11 Build 10.0.22631.6199 Registry Vulnerability Testing Tool

This is a C/C++ proof-of-concept PoC program designed to test for a specific vulnerability within the Windows Registry handling mechanism, often related to key duplication or improper permission checks during certain API calls like RegCopyTreeW...

6.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/12/02 12:22 p.m.18 views

CVE-2020-36872

BACnet Test Server versions up to and including 1.01 contains a remote denial of service vulnerability in its BACnet/IP BVLC packet handling. The server fails to properly validate the BVLC Length field in incoming UDP BVLC frames on the default BACnet port 47808/udp. A remote unauthenticated...

8.7CVSS6.8AI score0.00482EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/12/02 5:10 a.m.4 views

EUVD-2025-200182

Malicious code in wfui-test-e2e npm...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/02 5:10 a.m.9 views

Malicious code in wfui-test-e2e (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f560542e2d2fa22d83add8cd46675e252d841fe3b08edfd847677a98547e86a7 The package wfui-test-e2e was found to contain malicious code. Source: ghsa-malware 3440ad1d2e090dbea33cc7a6b8e4cda047b6e20b31fc8bbd3d9e13b1f1758c56...

7AI score
SaveExploits0References1
Rows per page
Query Builder