Lucene search
+L

8788 matches found

Tenable Nessus
Tenable Nessus
•added 2025/03/19 12:00 a.m.•46 views

Jenkins plugins Multiple Vulnerabilities (2025-03-19)

According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - The implementation of EdDSA in EdDSA-Java aka ed25519-java through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA...

6.5CVSS6.1AI score0.00309EPSS
SaveExploits0References4
NVD
NVD
•added 2025/03/17 12:15 p.m.•21 views

CVE-2025-2375

A vulnerability, which was classified as problematic, was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. Affected is an unknown function of the file /profile.php of the component Admin Profile Page. The manipulation of the argument email leads to cross site scripting. It...

5.4CVSS0.00352EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/03/17 11:00 a.m.•32 views

CVE-2025-2374 PHPGurukul Human Metapneumovirus Testing Management System profile.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This issue affects some unknown processing of the file /profile.php. The manipulation of the argument aid/adminname/mobilenumber/email leads to sql injection. The...

6.5CVSS0.00446EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/03/17 10:00 a.m.•30 views

CVE-2025-2372 PHPGurukul Human Metapneumovirus Testing Management System Password Recovery Page password-recovery.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This affects an unknown part of the file /password-recovery.php of the component Password Recovery Page. The manipulation of the argument username leads to sql injection. It is...

7.5CVSS0.00534EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/03/17 9:31 a.m.•13 views

CVE-2025-2371 PHPGurukul Human Metapneumovirus Testing Management System Registered Mobile Number Search registered-user-testing.php cross site scripting

A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /registered-user-testing.php of the component Registered Mobile Number Search. The manipulation of the...

5.1CVSS3.8AI score0.00371EPSS
SaveExploits1References5
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/03/17 6:37 a.m.•9 views

Malicious code in malwaretesting2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 992d4e35601291d8af779953d2f285061a62412b41ee8a799245b99892ce7efc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/17 12:00 a.m.•4 views

CVE-2025-2375: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. Affected is an unknown function of the file /profile.php of the component Admin Profile Page. The manipulation of the argument email leads to cross site scripting. It...

5.4CVSS3.7AI score0.00352EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/03/17 12:00 a.m.•11 views

PHPGurukul Human Metapneumovirus Testing Management System 代码注入漏洞

PHPGurukul Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system from PHPGurukul, Inc. A code injection vulnerability exists in version 1.0 of the PHPGurukul Human Metapneumovirus Testing Management System, which stems from an incorrect manipulation o...

5.4CVSS4.7AI score0.00352EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/17 12:00 a.m.•6 views

CVE-2025-2372: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This affects an unknown part of the file /password-recovery.php of the component Password Recovery Page. The manipulation of the argument username leads to sql injection. It is...

9.8CVSS6.9AI score0.00534EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/03/17 12:00 a.m.•14 views

PHPGurukul Human Metapneumovirus Testing Management System 注入漏洞

Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. The Human Metapneumovirus Testing Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter...

8.8CVSS7.1AI score0.00446EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/03/17 12:00 a.m.•13 views

PHPGurukul Human Metapneumovirus Testing Management System 注入漏洞

Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. A SQL injection vulnerability exists in the Human Metapneumovirus Testing Management System due to a lack of validation of an externally-entered SQL statement in the parameter username in the...

9.8CVSS7.8AI score0.00534EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/03/17 12:00 a.m.•15 views

PHPGurukul Human Metapneumovirus Testing Management System 注入漏洞

Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. The Human Metapneumovirus Testing Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter...

8.8CVSS7AI score0.00446EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/17 12:00 a.m.•5 views

CVE-2025-2373: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This vulnerability affects unknown code of the file /checkavailability.php. The manipulation of the argument mobnumber/employeeid leads to sql injection. The attack can be initiated...

8.8CVSS6.4AI score0.00446EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/17 12:00 a.m.•7 views

CVE-2025-2371: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /registered-user-testing.php of the component Registered Mobile Number Search. The manipulation of the...

5.4CVSS3.5AI score0.00371EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/17 12:00 a.m.•4 views

CVE-2025-2374: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This issue affects some unknown processing of the file /profile.php. The manipulation of the argument aid/adminname/mobilenumber/email leads to sql injection. The...

8.8CVSS6.4AI score0.00446EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2025/03/16 12:00 a.m.•14 views

The vulnerability of microprogrammed software in Intel NUC laptops arises from insufficient testing of input data, allowing attackers to exploit this weakness to gain increased privileges.

The vulnerability of Intel NUC laptop microprogramming software exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.5CVSS5.5AI score0.00166EPSS
SaveExploits0References2Affected Software9
GithubExploit
GithubExploit
•added 2025/03/15 11:21 a.m.•396 views

Exploit for OS Command Injection in Php

PHP-CGI Injector 🚀 CVE-2024-4577 & CVE-2024-8926 Exploit To...

9.8CVSS7.1AI score0.99987EPSS
SaveExploits69
Fedora
Fedora
•added 2025/03/15 12:46 a.m.•20 views

[SECURITY] Fedora 42 Update: python3.6-3.6.15-43.fc42

Python 3.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software...

6.3CVSS7.4AI score0.01556EPSS
SaveExploits0
Packet Storm
Packet Storm
•added 2025/03/14 12:00 a.m.•287 views

Loaded Commerce 6.6 Client-Side Template Injection

Loaded Commerce version 6.6 suffers from a client-side template injection vulnerability. Exploit Title: Loaded Commerce 6.6 Client-Side Template InjectionCSTI AngularJS Date: 03/13/2025 Exploit Author: tmrswrr Vendor Homepage: https://loadedcommerce.com/ Version: 6.6 Tested on:...

7.7AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2025/03/13 12:00 a.m.•17 views

Penetration Testing Steps and Tools

This whitepaper goes over reconnaissance of a target, various types of attacks leveraged during penetration testing, and provides examples of the commands used in the process...

7.1AI score
SaveExploits0
Rows per page
Query Builder