568 matches found
CVE-2023-4870 SourceCodester Contact Manager App Contact Information index.php cross site scripting
A vulnerability classified as problematic has been found in SourceCodester Contact Manager App 1.0. This affects an unknown part of the file index.php of the component Contact Information Handler. The manipulation of the argument contactID with the input "alert1 leads to cross site scripting. It ...
CVE-2025-34073
creationtimestamp| type| source ---|---|--- 2023-08-16 22:01:49+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/maltrailrce.rb 2025-07-04 21:02:22+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lt65boaqfs2s 2025-08-15...
CVE-2023-39269
A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RUGGEDCOM i803NC, RUGGEDCOM M2100, RUGGEDCOM M2100F, RUGGEDCOM M2100NC, RUGGEDCOM M2200, RUGGEDCOM M2200F, RUGGEDCOM M2200NC, RUGGEDCOM M969...
CVE-2023-33921
A vulnerability has been identified in CP-8031 MASTER MODULE All versions CPCI85 V05, CP-8050 MASTER MODULE All versions CPCI85 V05. The affected devices contain an exposed UART console login interface. An attacker with direct physical access could try to bruteforce or crack the root password to...
Hey Yara, find some vulnerabilities
Intro Intro Finding vulnerabilities in software is no easy task by itself. Doing this at cloud scale is very challenging to perform manually, and we use tools to help us identify patterns or vulnerability signatures. Yara is one of those tools. Yara is a very popular tool with Blue teams, malware...
CVE-2023-28464
creationtimestamp| type| source ---|---|--- 2023-03-28 18:25:20+00:00| seen| Telegram/8p6JA5oMMOqwPorrqcuvwcmg79aWDchpNaHDfTZK-qhrPOA 2023-03-31 20:22:24+00:00| seen| https://t.me/cibsecurity/61255...
Understanding metrics to measure SOC effectiveness
The security operations center SOC plays a critical role in protecting an organizations assets and reputation by identifying, analyzing, and responding to cyberthreats in a timely and effective manner. Additionally, SOCs also help to improve overall security posture by providing add-on services...
PT-2023-11318 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not describe a vulnerability but rather a rejected CVE candidate number. There is no general information about an issue, estimated number of...
Siemens Desigo PXC and DXR Devices Uncontrolled Resource Consumption (CVE-2022-24040)
A vulnerability has been identified in Desigo DXR2 All versions V01.21.142.5-22, Desigo PXC3 All versions V01.21.142.4-18, Desigo PXC4 All versions V02.20.142.10-10884, Desigo PXC5 All versions V02.20.142.10-10884. The web application fails to enforce an upper bound to the cost factor of the PBKD...
content.numetro.co.za Cross Site Scripting vulnerability OBB-3111961
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GSD-2022-1007290 net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
net: rds: don't hold sock lock when cancelling work from rdstcpresetcallbacks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commi...
PT-2022-17585 · Muhammara +1 · Muhammara +1
Name of the Vulnerable Software and Affected Versions: muhammara versions prior to 2.6.0 hummus versions prior to 1.0.111 Description: The issue allows for Denial of Service DoS when the PDFStreamForResponse function is used with invalid data. Recommendations: For muhammara versions prior to 2.6....
CVE-2022-39001
The number identification module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause data disclosure...
CVE-2022-35742
creationtimestamp| type| source ---|---|--- 2022-08-29 20:46:30+00:00| published-proof-of-concept| https://t.me/avleonovrus/79 2022-09-16 11:00:33+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6810 2023-09-21 09:22:26+00:00| seen| https://t.me/avleonovrus/67...
编号已被CVE保留
No details are available at this time...
CVE-2022-34607
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the HOST parameter at /doping.asp...
A Simple Formula for Getting Your IT Security Budget Approved
Although there is a greater awareness of cybersecurity threats than ever before, it is becoming increasingly difficult for IT departments to get their security budgets approved. Security budgets seem to shrink each year and IT pros are constantly being asked to do more with less. Even so, the...
Users Account Pre-Takeover or Users Account Takeover.
Team, May you all be well on your side of the screen. : While Doing some research on the https://microweber.org, I was able to find a Pre-Account Takeover vulnerability. Kindly check the proof of concept video & reproduction steps for better understanding. Proof of concept: I have uploaded the bo...
CVE-2010-10001
creationtimestamp| type| source ---|---|--- 2022-03-29 00:40:42+00:00| seen| https://t.me/cibsecurity/39688 2025-04-15 14:55:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11830...