Lucene search
+L

30362 matches found

Circl
Circl
added 2026/05/17 9:00 p.m.15 views

CVE-2026-38699

creationtimestamp| type| source ---|---|--- 2026-05-17 21:00:04+00:00| seen| Telegram/FMujIRa9WJxg8stLSMyK9s8hezzOoxBzO2QROQaixpXJv8...

5.8AI score
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/05/17 12:11 p.m.8 views

CVE-2018-25339 Zechat 1.5 SQL Injection via v parameter (time-based blind)

Zechat 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated attackers to extract database information using time-based blind techniques. Attackers can exploit the v parameter with sleep-based blind injection to confirm vulnerability and extract data...

8.8CVSS5.9AI score0.00267EPSS
SaveExploits0References3
CVE
CVE
added 2026/05/17 12:11 p.m.21 views

CVE-2018-25339

Zechat 1.5 contains a SQL injection vulnerability in the v parameter that enables unauthenticated attackers to extract database information via time-based blind techniques. Exploitation can be performed to confirm vulnerability and retrieve data, indicating potential impact to confidentiality. Th...

8.8CVSS5.9AI score0.00267EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/05/17 12:11 p.m.57 views

CVE-2018-25339 Zechat 1.5 SQL Injection via v parameter (time-based blind)

Zechat 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated attackers to extract database information using time-based blind techniques. Attackers can exploit the v parameter with sleep-based blind injection to confirm vulnerability and extract data...

8.8CVSS0.00267EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/05/17 12:11 p.m.22 views

EUVD-2018-21858

Zechat 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated attackers to extract database information using time-based blind techniques. Attackers can exploit the v parameter with sleep-based blind injection to confirm vulnerability and extract data...

8.8CVSS5.9AI score0.00267EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/17 12:11 p.m.24 views

CVE-2018-25339

Zechat 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated attackers to extract database information using time-based blind techniques. Attackers can exploit the v parameter with sleep-based blind injection to confirm vulnerability and extract data...

8.8CVSS5.9AI score0.00267EPSS
SaveExploits0References3Affected Software1
GithubExploit
GithubExploit
added 2026/05/17 4:08 a.m.116 views

Advance_WAF_project_CS

WAFinity - Infinite Protection, Intelligent Detection WAFin...

5.9AI score
SaveExploits0
Fedora
Fedora
added 2026/05/17 1:27 a.m.25 views

[SECURITY] Fedora 44 Update: pypy-7.3.22-2.fc44

PyPy's implementation of Python, featuring a Just-In-Time compiler on some CPU architectures, and various optimized implementations of the standard types strings, dictionaries, etc This build of PyPy has JIT-compilation enabled...

4.6CVSS5.8AI score0.00144EPSS
SaveExploits0
Packet Storm News
Packet Storm News
added 2026/05/17 12:00 a.m.21 views

Rethinking Side-Channel Analysis: Automated Discovery and Analysis of Side-Channel Leakage with LLM-Assisted Agents

Side-channel attacks exploit unintended information leakage from system behavior and continue to pose serious privacy risks in modern platforms. Despite extensive prior work, side-channel analysis remains largely manual and fragmented, typically assuming predefined target events and a fixed set o...

5.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/05/17 12:00 a.m.11 views

Fedora 44 : python-jupytext (2026-301cbbe347)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-301cbbe347 advisory. This update contains upgrades to various npm packages used during the build to address CVEs, namely: - CVE-2025-69873 ajv - CVE-2026-0540 DOMPurify ...

9.8CVSS6.5AI score0.02759EPSS
SaveExploits2References7
CNNVD
CNNVD
added 2026/05/17 12:00 a.m.17 views

Bylancer Zechat SQL注入漏洞

Bylancer Zechat is a PHP instant messaging system developed by Bylancer Corporation, which supports real-time messages, group chat, and social interactions. Version 1.5 of Bylancer Zechat has a SQL injection vulnerability. This vulnerability stems from the v parameter being subject to SQL injecti...

8.8CVSS5.9AI score0.00267EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/17 12:00 a.m.21 views

PT-2026-41565

Zechat 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated attackers to extract database information using time-based blind techniques. Attackers can exploit the v parameter with sleep-based blind injection to confirm vulnerability and extract data...

8.8CVSS5.9AI score0.00267EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/05/17 12:00 a.m.14 views

Fedora 44 : coturn (2026-3b3139882c)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3b3139882c advisory. Coturn 4.11.0 - Fix prometheus response memory leak introduced in 4.10.0 - Use constant-time compare for STUN MESSAGE-INTEGRITY HMAC - Fix format-string...

5.8AI score
SaveExploits0References1
Circl
Circl
added 2026/05/16 8:34 p.m.22 views

CVE-2026-6913

creationtimestamp| type| source ---|---|--- 2026-05-16 20:34:02+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlyowkdwxe2s...

6.4CVSS5.8AI score0.00201EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/16 4:16 p.m.16 views

CVE-2020-37244

Supsystic Membership 1.4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'search' and 'sidx' parameters. Attackers can send GET requests to the badges module with crafted payloads to extract...

8.8CVSS0.00276EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/05/16 3:26 p.m.12 views

CVE-2021-47980 Fuel CMS 1.4.13 Blind SQL Injection via col Parameter

Fuel CMS 1.4.13 contains a blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'col' parameter in the Activity Log interface. Attackers can send requests to the logs endpoint with malicious SQL payloads in the 'col...

7.1CVSS5.9AI score0.00226EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/16 3:25 p.m.9 views

CVE-2020-37244

Supsystic Membership 1.4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'search' and 'sidx' parameters. Attackers can send GET requests to the badges module with crafted payloads to extract...

8.8CVSS6.1AI score0.00276EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
added 2026/05/16 3:25 p.m.14 views

EUVD-2020-31244

Supsystic Membership 1.4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'search' and 'sidx' parameters. Attackers can send GET requests to the badges module with crafted payloads to extract...

8.8CVSS6.1AI score0.00276EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/05/16 3:25 p.m.12 views

CVE-2020-37244 WordPress Plugin Supsystic Membership 1.4.7 SQL Injection via sidx

Supsystic Membership 1.4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'search' and 'sidx' parameters. Attackers can send GET requests to the badges module with crafted payloads to extract...

8.8CVSS6.1AI score0.00276EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/05/16 3:25 p.m.46 views

CVE-2020-37244 WordPress Plugin Supsystic Membership 1.4.7 SQL Injection via sidx

Supsystic Membership 1.4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'search' and 'sidx' parameters. Attackers can send GET requests to the badges module with crafted payloads to extract...

8.8CVSS0.00276EPSS
SaveExploits0References4
Rows per page
Query Builder