📄 Typecho 1.3.0 Cross Site Scripting

Typecho versions 1.3.0 and below suffer from a persistent cross site scripting vulnerability. // Exploit Title: Typecho = 1.3.0 Stored Cross-Site Scripting XSS // Google Dork: intext:"Powered by Typecho" inurl:/index.php // Date: 18/08/2024 // Exploit Author: Michele 'cyberaz0r' Di Bonaventura //...

CVE-2025-32187

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Quý Lê 91 Administrator Z administrator-z allows DOM-Based XSS.This issue affects Administrator Z: from n/a through = 2026.04.05...

CVE-2025-249987

creationtimestamp| type| source ---|---|--- 2025-03-11 17:44:07+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0079...

Linux Distros Unpatched Vulnerability : CVE-2024-25744

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at any given point. This is related to arch/x86/coco/tdx/tdx.c and...

Linux Distros Unpatched Vulnerability : CVE-2021-40656

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libsixel before 1.10 is vulnerable to Buffer Overflow in libsixel/src/quant.c:867. CVE-2021-40656 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2021-4173

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vim is vulnerable to Use After Free CVE-2021-4173 Note that Nessus relies on the presence of the package as reported by the vendor. C Tenable, Inc...

Linux Distros Unpatched Vulnerability : CVE-2017-16642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelibmeridian handling of 'front of' and 'back of' directiv...

Linux Distros Unpatched Vulnerability : CVE-2019-8769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catali...

CVE-2024-46657

Artifex Software mupdf v1.24.9 was discovered to contain a segmentation fault via the component /tools/pdfextract.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PDF file...

CVE-2024-10178

creationtimestamp| type| source ---|---|--- 2024-12-05 04:31:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113598339968002118 2024-12-05 06:59:16+00:00| seen| https://t.me/cvedetector/12063...

CVE-2024-52572

creationtimestamp| type| source ---|---|--- 2024-11-18 19:03:38+00:00| seen| https://t.me/cvedetector/11358 2024-11-19 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1518/ 2024-12-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-09...

CVE-2024-10329

creationtimestamp| type| source ---|---|--- 2024-11-05 14:01:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113430712301584701 2024-11-05 16:22:43+00:00| seen| https://t.me/cvedetector/9868...

Zendesk 安全漏洞

Zendesk is a complete customer service solution from Zendesk USA. A security vulnerability exists in versions of Zendesk prior to 2024-07-02, which stems from insufficient processing of emails in a way that extracts the cc field from incoming email messages to grant additional ticket viewing...

CVE-2024-6921

Cleartext Storage of Sensitive Information vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Retrieve Embedded Sensitive Data. This issue affects NACPremium: through 01082024...

CVE-2024-6484

Rejected reason: This was not a security issue in Bootstrap. Bootstrap’s JavaScript is not intended to sanitize unsafe or intentionally dangerous HTML. As such, the reported behavior fell outside the scope of Bootstrap’s security model, and the associated CVE has been rescinded...

CVE-2022-1006

creationtimestamp| type| source ---|---|--- 2022-04-11 18:16:01+00:00| seen| https://t.me/cibsecurity/40465 2025-07-22 21:02:22+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lulfobj37z2f 2025-11-12 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabiliti...

Gesior-AAC SQL Injection Vulnerability

Gesior-AAC is an official tibia.com layout created based on cipsoft. A SQL injection vulnerability exists in the shop.php file in versions of Gesior-AAC prior to 2019-05-01. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An...

CVE-2019-3474

creationtimestamp| type| source ---|---|--- 2019-02-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46450...

Precurio Intranet Portal 2.0 Cross Site Request Forgery

Exploit Title: Precurio Intranet Portal 2.0 - Cross-Site Request Forgery Add Admin Dork: N/A Date: 2018-11-12 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.precurio.org Software Link: https://netcologne.dl.sourceforge.net/project/precurio/version%202.1/precurio.zip Version: 2.0 Categor...

PAYFORT payfort-php-SDK cross-site scripting vulnerability

PayFort is an online payment gateway. payfort-php-SDK is the PayFort payment gateway SDK. A cross-site scripting vulnerability exists in Amazon PAYFORT payfort-php-SDK on 2018-04-26 and earlier versions, which can be exploited by an attacker via the error.php errormsg parameter to conduct a...