Lucene search
+L

15719 matches found

NVD
NVD
added 2025/08/14 5:15 p.m.12 views

CVE-2025-50817

A vulnerability in the Python-Future 1.0.0 module allows for arbitrary code execution via the unintended import of a file named test.py. When the module is loaded, it automatically imports test.py, if present in the same directory or in the sys.path. This behavior can be exploited by an attacker...

5.4CVSS0.0029EPSS
SaveExploits0References4
OSV
OSV
added 2025/08/14 5:15 p.m.10 views

CVE-2025-50817

A vulnerability in the Python-Future 1.0.0 module allows for arbitrary code execution via the unintended import of a file named test.py. When the module is loaded, it automatically imports test.py, if present in the same directory or in the sys.path. This behavior can be exploited by an attacker...

5.4CVSS6.8AI score0.0029EPSS
SaveExploits0References4
OSV
OSV
added 2025/08/14 5:15 p.m.8 views

UBUNTU-CVE-2025-50817

A vulnerability in the Python-Future 1.0.0 module allows for arbitrary code execution via the unintended import of a file named test.py. When the module is loaded, it automatically imports test.py, if present in the same directory or in the sys.path. This behavior can be exploited by an attacker...

5.4CVSS6.9AI score0.0029EPSS
SaveExploits0References5
NVD
NVD
added 2025/08/14 1:15 p.m.15 views

CVE-2025-8963

A vulnerability was determined in jeecgboot JimuReport up to 2.1.1. Affected by this issue is some unknown functionality of the file /drag/onlDragDataSource/testConnection of the component Data Large Screen Template. The manipulation leads to deserialization. The attack may be launched remotely...

9.8CVSS0.00476EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/08/14 1:02 p.m.9 views

CVE-2025-8963 jeecgboot JimuReport Data Large Screen Template testConnection deserialization

A vulnerability was determined in jeecgboot JimuReport up to 2.1.1. Affected by this issue is some unknown functionality of the file /drag/onlDragDataSource/testConnection of the component Data Large Screen Template. The manipulation leads to deserialization. The attack may be launched remotely...

6.5CVSS7.1AI score0.00476EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/08/14 1:02 p.m.26 views

CVE-2025-8963 jeecgboot JimuReport Data Large Screen Template testConnection deserialization

A vulnerability was determined in jeecgboot JimuReport up to 2.1.1. Affected by this issue is some unknown functionality of the file /drag/onlDragDataSource/testConnection of the component Data Large Screen Template. The manipulation leads to deserialization. The attack may be launched remotely...

6.5CVSS0.00476EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/08/14 11:29 a.m.28 views

CVE-2025-40761

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions, RUGGEDCOM ROX MX5000RE All versions, RUGGEDCOM ROX RX1400 All versions, RUGGEDCOM ROX RX1500 All versions, RUGGEDCOM ROX RX1501 All versions, RUGGEDCOM ROX RX1510 All versions, RUGGEDCOM ROX RX1511 All versions, RUGGEDCOM R...

8.6CVSS7.3AI score0.00237EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/14 2:24 a.m.27 views

CVE-2025-42955

Due to a missing authorization check in SAP Cloud Connector, an attacker on an adjacent network with low privileges could send a crafted request to the endpoint responsible for testing LDAP connections. A successful exploit could lead to reduced performance, hence a low-impact on availability of...

3.5CVSS7.1AI score0.0044EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/14 12:00 a.m.20 views

PT-2025-33349

Name of the Vulnerable Software and Affected Versions: Python-Future version 1.0.0 Description: A vulnerability in the Python-Future module allows for arbitrary code execution via the unintended import of a file named test.py. When the module is loaded, it automatically imports test.py, if presen...

8.6CVSS6.6AI score0.0029EPSS
SaveExploits0References29
Debian CVE
Debian CVE
added 2025/08/14 12:00 a.m.22 views

CVE-2025-50817

Removed by vendor...

5.4CVSS6.7AI score0.0029EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/08/14 12:00 a.m.18 views

PT-2025-33419 · Sourcecodester · Covid19 Testing Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester COVID 19 Testing Management System version 1.0 Description: A vulnerability was identified in the system that allows for SQL injection. The issue affects an unknown part of the file /test-details.php. Manipulation of the remark...

9.8CVSS7.5AI score0.00421EPSS
SaveExploits1References10
CVE
CVE
added 2025/08/14 12:00 a.m.94 views

CVE-2025-50817

Summary of CVE-2025-50817 : IBM security bulletins describe an arbitrary code execution in Python-Future 1.0.0 via unintended import of a local file named test.py when the module is loaded. The risk relies on an attacker who can write files to the server; Python’s import mechanism loads test.py f...

5.4CVSS7.2AI score0.0029EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/08/14 12:00 a.m.10 views

JimuReport 代码问题漏洞

JimuReport is a free reporting tool open source by JEECG in China. A code issue vulnerability exists in JimuReport 2.1.1 and earlier versions, which stems from a misbehavior in file /drag/onlDragDataSource/testConnection leading to deserialization...

9.8CVSS7AI score0.00476EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/08/14 12:00 a.m.26 views

CVE-2025-50817

A vulnerability in the Python-Future 1.0.0 module allows for arbitrary code execution via the unintended import of a file named test.py. When the module is loaded, it automatically imports test.py, if present in the same directory or in the sys.path. This behavior can be exploited by an attacker...

0.0029EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/08/14 12:00 a.m.9 views

SourceCodester COVID 19 Testing Management System 注入漏洞

SourceCodester COVID 19 Testing Management System is a SourceCodester open source web-based application that provides an online platform for personal and Covid test management to manage individual testing processes and results. An injection vulnerability exists in version 1.0 of the SourceCodeste...

9.8CVSS7.8AI score0.00421EPSS
SaveExploits1References7
OSV
OSV
added 2025/08/13 4:15 p.m.11 views

CVE-2025-50611

A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN00473154 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wlsecset5g and wlsecrpset5g in the payload, which can cause the program to crash and potentially...

7.5CVSS5.9AI score0.00397EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/08/13 4:29 a.m.21 views

CVE-2025-8854

Stack-based buffer overflow in LoadOFF in bulletphysics bullet3 before 3.26 on all platforms allows remote attackers to execute arbitrary code via a crafted OFF file with an overlong initial token processed by the VHACD test utility or invoked indirectly through PyBullet's vhacd function...

8.4CVSS8.7AI score0.00583EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/08/13 12:00 a.m.19 views

CVE-2025-50611

A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN00473154 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wlsecset5g and wlsecrpset5g in the payload, which can cause the program to crash and potentially...

0.00397EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/08/13 12:00 a.m.26 views

CVE-2025-50617

A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN0046ed68 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wpsset in the payload, which can cause the program to crash and potentially lead to a Denial of...

0.00397EPSS
SaveExploits1References1
CVE
CVE
added 2025/08/13 12:00 a.m.60 views

CVE-2025-50611

Netis WF2880 vulnerability CVE-2025-50611: A buffer overflow in the FUN_00473154 function of the cgitest.cgi file in firmware version 2.1.40207 can be triggered by crafted payloads that set wl_sec_set_5g and wl_sec_rp_set_5g, causing the program to crash and potentially leading to a Denial of Ser...

7.5CVSS7.5AI score0.00397EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder