Lucene search
K

10 matches found

ATTACKERKB
ATTACKERKB
added 2026/04/24 7:15 p.m.3 views

CVE-2026-41426

pretalx is a conference planning tool. Prior to 2026.1.0, an unauthenticated attacker can send arbitrary HTML-rendered emails from a pretalx instance's configured sender address by embedding malformed HTML or markdown link syntax in a user-controlled template placeholder such as the account displ...

6.1CVSS5.6AI score0.00048EPSS
Exploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2026/04/02 10:54 p.m.3 views

CVE-2026-34528

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to version 2.62.2, the signupHandler in File Browser applies default user permissions via d.settings.Defaults.Applyuser, then strips only Admin. The Execu...

9.8CVSS6.1AI score0.00085EPSS
Exploits1References1
Snyk
Snyk
added 2026/03/31 11:44 p.m.3 views

Incorrect Privilege Assignment

Overview github.com/filebrowser/filebrowser/v2/http is a web file browser. Affected versions of this package are vulnerable to Incorrect Privilege Assignment in the signupHandler in File Browser. An attacker can gain unauthorized command execution capabilities by self-registering when server-side...

9.8CVSS6AI score0.00085EPSS
Exploits1References2
Snyk
Snyk
added 2026/03/05 6:5 p.m.2 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the firstname and lastname inputs when processed by editUser.tpl.php. An attacker can inject arbitrary HTML content by submitting crafted input, which is rendered when other users view the affected profile,...

5.4CVSS5.6AI score
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2012-1998

Malware in sbrugna...

4.3CVSS6.4AI score0.00318EPSS
Exploits2References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2008-2309

Malware in sbrugna...

4.6CVSS6.2AI score0.00052EPSS
Exploits1References8
0day.today
0day.today
added 2012/04/02 12:0 a.m.29 views

CMS Made Simple <= 1.10.3 XSS Vulnerability

Exploit for php platform in category web applications +---------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : CMS Made Simple = 1.10.3 XSS Vulnerability Date : 02-04-2012 Author : Ivano Binetti...

7.1AI score0.00318EPSS
Exploits2
Prion
Prion
added 2008/07/01 6:41 p.m.22 views

Arbitrary file deletion

Apple Mac OS X before 10.5 uses weak permissions for the User Template directory, which allows local users to gain privileges by inserting a Trojan horse file into this directory...

4.6CVSS6.2AI score0.00052EPSS
Exploits1References7Affected Software2
NVD
NVD
added 2008/07/01 6:41 p.m.13 views

CVE-2008-2313

Apple Mac OS X before 10.5 uses weak permissions for the User Template directory, which allows local users to gain privileges by inserting a Trojan horse file into this directory...

4.6CVSS6AI score0.00052EPSS
Exploits1References7
Cvelist
Cvelist
added 2008/07/01 6:0 p.m.19 views

CVE-2008-2313

Apple Mac OS X before 10.5 uses weak permissions for the User Template directory, which allows local users to gain privileges by inserting a Trojan horse file into this directory...

6AI score0.00052EPSS
Exploits1References7
Rows per page
Query Builder