Lucene search
K

973 matches found

Cvelist
Cvelist
added 2026/06/01 12:30 p.m.27 views

CVE-2026-10257 itsourcecode Content Management System update_ss_img.php sql injection

A security flaw has been discovered in itsourcecode Content Management System 1.0. This issue affects some unknown processing of the file /admin/updatessimg.php. The manipulation of the argument topicid results in sql injection. The attack can be executed remotely. The exploit has been released t...

6.5CVSS0.00319EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/06/01 12:30 p.m.5 views

CVE-2026-10257

A security flaw has been discovered in itsourcecode Content Management System 1.0. This issue affects some unknown processing of the file /admin/updatessimg.php. The manipulation of the argument topicid results in sql injection. The attack can be executed remotely. The exploit has been released t...

6.5CVSS6.5AI score0.00319EPSS
Exploits0References6Affected Software1
CVE
CVE
added 2026/06/01 12:30 p.m.12 views

CVE-2026-10257

CVE-2026-10257 affects itsourcecode Content Management System 1.0. The vulnerability is a SQL injection caused by manipulating the topic_id parameter in /admin/update_ss_img.php, with remote exploitation possible and a publicly released exploit. MVN/NVD metrics indicate a MEDIUM impact with netwo...

6.5CVSS6.5AI score0.00319EPSS
Exploits0References6
Snyk
Snyk
added 2026/06/01 10:26 a.m.4 views

Exposure of Sensitive Information Through Metadata

Overview org.apache.activemq:activemq-broker is a high performance Apache 2.0 licensed Message Broker and JMS 1.1 implementation. Affected versions of this package are vulnerable to Exposure of Sensitive Information Through Metadata in the BrokerInfo component. An attacker can obtain sensitive...

8.2CVSS5.5AI score0.00341EPSS
Exploits0References2
NVD
NVD
added 2026/06/01 9:16 a.m.10 views

CVE-2026-10242

A weakness has been identified in itsourcecode Content Management System 1.0. This impacts an unknown function of the file /instructions.php. This manipulation of the argument topicid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the...

6.5CVSS0.0025EPSS
Exploits0References6
CVE
CVE
added 2026/06/01 8:45 a.m.11 views

CVE-2026-10242

CVE-2026-10242 affects itsourcecode Content Management System 1.0. The vulnerability is a SQL injection in the /instructions.php file caused by manipulation of the topic_id argument. It can be triggered remotely and exploitation has been publicly disclosed (exploit maturity: Proof-of-Concept). Af...

6.5CVSS6.5AI score0.0025EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/06/01 8:45 a.m.7 views

CVE-2026-10242

A weakness has been identified in itsourcecode Content Management System 1.0. This impacts an unknown function of the file /instructions.php. This manipulation of the argument topicid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the...

6.5CVSS6.5AI score0.0025EPSS
Exploits0References6Affected Software1
Vulnrichment
Vulnrichment
added 2026/06/01 8:45 a.m.7 views

CVE-2026-10242 itsourcecode Content Management System instructions.php sql injection

A weakness has been identified in itsourcecode Content Management System 1.0. This impacts an unknown function of the file /instructions.php. This manipulation of the argument topicid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the...

6.5CVSS5.7AI score0.0025EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.11 views

PT-2026-45427

A vulnerability was identified in itsourcecode Content Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit topic.php. Such manipulation of the argument topic id leads to sql injection. The attack may be launched remotely. The exploit is publicly...

6.5CVSS5.8AI score0.00204EPSS
Exploits0References7
Packet Storm News
Packet Storm News
added 2026/06/01 12:0 a.m.10 views

SECUREVENT: Hybrid AI/ML Security Monitoring for Distributed Event-Based Systems

Distributed event-based systems have become a common substrate for Internet-scale publish/subscribe services, IoT telemetry, cloud-native microservices, and security operations pipelines. Their loose coupling and asynchronous delivery improve scalability, but they also expand the attack surface:...

5.8AI score
Exploits0
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.11 views

PT-2026-45351

A weakness has been identified in itsourcecode Content Management System 1.0. This impacts an unknown function of the file /instructions.php. This manipulation of the argument topic id causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the...

6.5CVSS6.5AI score0.0025EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.13 views

PT-2026-45406

A security flaw has been discovered in itsourcecode Content Management System 1.0. This issue affects some unknown processing of the file /admin/update ss img.php. The manipulation of the argument topic id results in sql injection. The attack can be executed remotely. The exploit has been release...

6.5CVSS5.7AI score0.00319EPSS
Exploits0References7
CNNVD
CNNVD
added 2026/06/01 12:0 a.m.6 views

itsourcecode Content Management System SQL注入漏洞

itsourcecode Content Management System is an open-source content management system developed by itsourcecode. Version 1.0 of the itsourcecode Content Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the topicid parameter in the file...

6.5CVSS6.6AI score0.00204EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/06/01 12:0 a.m.6 views

itsourcecode Content Management System SQL注入漏洞

itsourcecode Content Management System is an open-source content management system developed by itsourcecode. Version 1.0 of the itsourcecode Content Management System has a SQL injection vulnerability. This vulnerability stems from improper handling of the topicid parameter in the file...

6.5CVSS6.6AI score0.00319EPSS
Exploits0References7
CNNVD
CNNVD
added 2026/06/01 12:0 a.m.10 views

itsourcecode Content Management System SQL注入漏洞

itsourcecode Content Management System is an open-source content management system developed by itsourcecode. Version 1.0 of the itsourcecode Content Management System has a SQL injection vulnerability. This vulnerability arises from improper handling of the topicid parameter in the file...

6.5CVSS6.6AI score0.0025EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.7 views

PT-2026-45407

A weakness has been identified in itsourcecode Content Management System 1.0. Impacted is an unknown function of the file /admin/add sub topic.php. This manipulation of the argument topic id causes sql injection. The attack is possible to be carried out remotely. The exploit has been made availab...

6.5CVSS5.7AI score0.00319EPSS
Exploits0References7
CNNVD
CNNVD
added 2026/06/01 12:0 a.m.9 views

itsourcecode Content Management System SQL注入漏洞

itsourcecode Content Management System is an open-source content management system developed by itsourcecode. Version 1.0 of the itsourcecode Content Management System has a SQL injection vulnerability. This vulnerability arises from improper handling of the topicid parameter in the...

6.5CVSS6.6AI score0.00319EPSS
Exploits0References7
IBM Security Bulletins
IBM Security Bulletins
added 2026/05/29 9:1 a.m.6 views

Security Bulletin: There is a vulnerability in kafka-clients-3.9.1.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-35554)

Summary There is a vulnerability in kafka-clients-3.9.1.jar used by IBM Maximo Manage application in IBM Maximo Application Suite. Vulnerability Details CVEID:CVE-2026-35554 DESCRIPTION: A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be...

8.7CVSS6AI score0.00328EPSS
Exploits0Affected Software1
OSV
OSV
added 2026/05/29 8:51 a.m.8 views

BIT-RABBITMQ-2026-44838 RabbitMQ MQTT Topic Permission Authorization Bypass

RabbitMQ is a messaging and streaming broker. From 4.2.0 to before 4.2.4, RabbitMQ's MQTT plugin allows for topic-level authorization using regular expressions with variable substitution. Administrators can create patterns such as ^clientid-sensors$ to restrict user access to topics that include...

8.1CVSS5.8AI score0.0025EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/05/29 12:0 a.m.32 views

Linux Distros Unpatched Vulnerability : CVE-2026-44838

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 4.2.0 to before 4.2.4, RabbitMQ's MQTT plugin allows for topic-level authorization using regular expressions...

8.1CVSS5.5AI score0.0025EPSS
Exploits0References2
Rows per page
Query Builder