Lucene search
+L

1410 matches found

Vulnrichment
Vulnrichment
added 2025/10/23 8:10 p.m.11 views

CVE-2025-57848 Container-native-virtualization: privilege escalation via excessive /etc/passwd permissions

A container privilege escalation flaw was found in certain Container-native Virtualization images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container,...

6.4CVSS6.9AI score0.00177EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2025/10/23 8:10 p.m.9 views

CVE-2025-57848

A container privilege escalation flaw was found in certain Container-native Virtualization images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container,...

5.2CVSS7.2AI score0.00177EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/22 9:31 p.m.13 views

EUVD-2025-35622

A container privilege escalation flaw was found in certain AMQ Broker images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root...

5.2CVSS6.8AI score0.00191EPSS
SaveExploits0References4
CVE
CVE
added 2025/10/22 6:19 p.m.31 views

CVE-2025-58712

CVE-2025-58712 affects Red Hat AMQ Broker container images. The root cause is that the /etc/passwd file is created with group-writable permissions during build time. In vulnerable conditions, a non-root caller inside an affected container who is in the root group can modify /etc/passwd to add a n...

6.4CVSS6.9AI score0.00191EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/10/22 6:19 p.m.5 views

CVE-2025-58712 Amq: privilege escalation via excessive /etc/passwd permissions

A container privilege escalation flaw was found in certain AMQ Broker images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root...

6.4CVSS6.9AI score0.00191EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2025/10/20 1:47 p.m.262 views

Exploit for Deserialization of Untrusted Data in Google Android

Project Documentation Official QQ Group: 745307987 Although P...

7.8CVSS5.8AI score0.00779EPSS
SaveExploits12
CNVD
CNVD
added 2025/10/15 12:00 a.m.18 views

Project Monitoring System useredit.php File SQL Injection Vulnerability

Project Monitoring System is a project monitoring system. Project Monitoring System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter uid in the file /useredit.php. An attacker can exploit this vulnerabilit...

9.8CVSS8.3AI score0.00387EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/10/12 3:17 p.m.20 views

CVE-2025-11605

A vulnerability was identified in code-projects Client Details System 1.0. Impacted is an unknown function of the file /admin/update-profile.php. Such manipulation of the argument uid leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

6.5CVSS7.1AI score0.00332EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/11 2:32 p.m.15 views

EUVD-2025-33865

A vulnerability was identified in code-projects Client Details System 1.0. Impacted is an unknown function of the file /admin/update-profile.php. Such manipulation of the argument uid leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

6.5CVSS6.6AI score0.00332EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/10/11 12:00 a.m.12 views

Code-Projects Client Details System SQL注入漏洞

Client Details System is a client information system. Client Details System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter uid in the file /admin/update-profile.php. An attacker can exploit this...

8.8CVSS7.9AI score0.00332EPSS
SaveExploits1References6
NVD
NVD
added 2025/10/10 9:16 p.m.13 views

CVE-2025-11585

A vulnerability was found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /useredit.php. The manipulation of the argument uid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

9.8CVSS0.00387EPSS
SaveExploits1References5
OSV
OSV
added 2025/10/10 9:16 p.m.11 views

CVE-2025-11585

A vulnerability was found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /useredit.php. The manipulation of the argument uid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

9.8CVSS5.7AI score0.00387EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/10/10 9:02 p.m.6 views

CVE-2025-11585 code-projects Project Monitoring System useredit.php sql injection

A vulnerability was found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /useredit.php. The manipulation of the argument uid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

7.5CVSS6.7AI score0.00387EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/10/10 9:02 p.m.23 views

CVE-2025-11585 code-projects Project Monitoring System useredit.php sql injection

A vulnerability was found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /useredit.php. The manipulation of the argument uid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

7.5CVSS0.00387EPSS
SaveExploits1References5
GithubExploit
GithubExploit
added 2025/10/10 6:28 a.m.302 views

Exploit for Injection in Google Android

EXPLOITER: Automated Exploit for CVE-2024-0044 EXPLOITER...

7.8CVSS6.9AI score0.0146EPSS
SaveExploits17
CNNVD
CNNVD
added 2025/10/10 12:00 a.m.12 views

Code-Projects Project Monitoring System SQL注入漏洞

Project Monitoring System is a project monitoring system. Project Monitoring System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter uid in the file /useredit.php. An attacker can exploit this vulnerabilit...

9.8CVSS8.2AI score0.00387EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2006-5855

Malware in sbrugna...

4.1CVSS6AI score0.00318EPSS
SaveExploits0References14
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2014-4279

Malware in sbrugna...

2.1CVSS8AI score0.00231EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-1999-0169

Malware in sbrugna...

10CVSS6.4AI score0.01941EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2005-4452

Malware in sbrugna...

7.5CVSS6.4AI score0.03113EPSS
SaveExploits1References3
Rows per page
Query Builder