Lucene search
+L

31 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/05 12:46 p.m.•21 views

Malicious code in evo-web-base-analytics-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a5ea39e9c916ea6155783b98eeb71551a8a7966edad05852816786e902ac92 On require, index.js auto-loads support.js which reassembles download hosts at runtime from string fragments e.g. Cloudflare Workers subdomains under...

5.6AI score
SaveExploits0References2
Prion
Prion
•added 2023/12/15 8:15 a.m.•21 views

Information disclosure

SmartStar Software CWS is a web-base integration platform, it has a vulnerability of using a hard-coded for a specific account with low privilege. An unauthenticated remote attacker can exploit this vulnerability to run partial processes and obtain partial information, but can't disrupt service o...

6.4CVSS7.2AI score0.00552EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/12/15 7:46 a.m.•45 views

CVE-2023-48375 SmartStar Software CWS Web-Base - Broken Access Control

SmartStar Software CWS is a web-based integration platform, it has a vulnerability of missing authorization and users are able to access data or perform actions that they should not be allowed to perform via commands. An authenticated with normal user privilege can execute administrator privilege...

8.8CVSS8.9AI score0.00687EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/12/15 7:39 a.m.•49 views

CVE-2023-48374 SmartStar Software CWS Web-Base - Use of Hard-coded Credentials

SmartStar Software CWS is a web-base integration platform, it has a vulnerability of using a hard-coded for a specific account with low privilege. An unauthenticated remote attacker can exploit this vulnerability to run partial processes and obtain partial information, but can't disrupt service o...

6.5CVSS6.7AI score0.00552EPSS
SaveExploits0References1
CVE
CVE
•added 2023/12/15 7:39 a.m.•59 views

CVE-2023-48374

The CVE-2023-48374 entry pertains to SmartStar Software CWS, a web-based integration platform. The vulnerability is described as using a hard-coded credential for a specific low-privilege account, enabling an unauthenticated remote attacker to run partial processes and view partial information. T...

6.5CVSS6.5AI score0.00552EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/05 12:00 a.m.•3 views

CVE-2021-26971: Undefined Security Weakness

A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform versions: Prior to 8.2.12.0. Vulnerabilities in the AirWave web-base management interface could allow remote authenticated users to run arbitrary commands on the underlying host. A...

6.5CVSS6.5AI score0.01337EPSS
SaveExploits0References1
zdt
zdt
•added 2011/05/20 12:00 a.m.•23 views

Ultimate PHP Board 2.2.7 Broken Authentication and Session Management

Exploit for php platform in category web applications Exploit Title : Ultimate PHP Board 2.2.7 "Broken Authentication and Session Management" Date : 2011.05.17 Author : i2sec - Gi bum Hong Software Link : http://sourceforge.net/projects/textmb/files/UPB/UPB%202.2.7/ Version : 2.2.7 Tested on :...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2010/05/07 12:00 a.m.•29 views

Mandriva Update for mds MDVA-2010:142 (mds)

Check for the Version of mds OpenVAS Vulnerability Test Mandriva Update for mds MDVA-2010:142 mds Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

0.1AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2010/02/15 12:00 a.m.•49 views

Mandriva Update for mmc-web-base MDVA-2010:051 (mmc-web-base)

Check for the Version of mmc-web-base OpenVAS Vulnerability Test Mandriva Update for mmc-web-base MDVA-2010:051 mmc-web-base Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

10CVSS0.4AI score0.06515EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2010/01/29 12:00 a.m.•58 views

Mandriva Update for mmc MDVA-2010:044 (mmc)

Check for the Version of mmc OpenVAS Vulnerability Test Mandriva Update for mmc MDVA-2010:044 mmc Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

6CVSS5.2AI score0.01768EPSS
SaveExploits3References2
NVD
NVD
•added 2009/05/22 11:52 a.m.•32 views

CVE-2009-1751

SQL injection vulnerability in listlist.php in Realty Webware Technologies Web-Base 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS8.4AI score0.00987EPSS
SaveExploits2References4
Prion
Prion
•added 2009/05/22 11:52 a.m.•25 views

Sql injection

SQL injection vulnerability in listlist.php in Realty Webware Technologies Web-Base 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS9.1AI score0.00987EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
•added 2009/05/21 6:00 p.m.•42 views

CVE-2009-1751

SQL injection vulnerability in listlist.php in Realty Webware Technologies Web-Base 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

8.4AI score0.00987EPSS
SaveExploits2References4
CVE
CVE
•added 2009/05/21 6:00 p.m.•68 views

CVE-2009-1751

CVE-2009-1751 describes an SQL injection in Realty Webware Technologies Web-Base 1.0, exploitable via the id parameter in list_list.php. The vulnerability allows remote attackers to craft input that alters SQL queries, with a CVSSv2 base score of 7.5 (HIGH) and network attack vector with no authe...

7.5CVSS8.7AI score0.00987EPSS
SaveExploits2References4Affected Software1
seebug.org
seebug.org
•added 2009/05/21 12:00 a.m.•24 views

Realty Web-Base 1.0 (list_list.php id) SQL Injection Vulnerability

No description provided by source. --------------------------------------------------------------- ------------------------------------------------------------ Realty Web-Base v1.0 listlist.php id SQL Injection Vulnerability --------------------------------------------------------------- Founder ...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2009/05/21 12:00 a.m.•34 views

Realty Web-Base 1.0 SQL Injection

--------------------------------------------------------------- ------------------------------------------------------------ Realty Web-Base v1.0 listlist.php id SQL Injection Vulnerability --------------------------------------------------------------- Founder : ThE g0bL!N Home:WwW.h4ckF0u.CoM...

0.5AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/05/21 12:00 a.m.•5 views

CVE-2009-1751: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in listlist.php in Realty Webware Technologies Web-Base 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.00987EPSS
SaveExploits2References2
Exploit DB
Exploit DB
•added 2009/05/20 12:00 a.m.•57 views

Realty Web-Base 1.0 - 'list_list.php?id' SQL Injection

--------------------------------------------------------------- ------------------------------------------------------------ Realty Web-Base v1.0 listlist.php id SQL Injection Vulnerability --------------------------------------------------------------- Founder : ThE g0bL!N Home:WwW.h4ckF0u.CoM...

7.5CVSS5.8AI score0.00987EPSS
SaveExploits2
zdt
zdt
•added 2009/05/20 12:00 a.m.•29 views

Realty Web-Base 1.0 (list_list.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Realty Web-Base 1.0 listlist.php id SQL Injection Vulnerability ==================================================================...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/05/20 12:00 a.m.•19 views

Realty Web-Base 1.0 - list_list.php?id SQL Injection

Realty Web-Base 1.0 - listlist.php?id SQL Injection --------------------------------------------------------------- ------------------------------------------------------------ Realty Web-Base v1.0 listlist.php id SQL Injection Vulnerability...

0.4AI score
SaveExploits0
Rows per page
Query Builder