Lucene search
+L

148571 matches found

BDU FSTEC
BDU FSTEC
added 2025/07/16 12:0 a.m.15 views

The vulnerability of the pgAdmin 4 database management tool lies in the redirection of the URL to an unreliable website, allowing a hacker to redirect users to any given URL address.

The vulnerability of the pgAdmin 4 database management tool is related to the redirection of the URL to an unreliable website. Exploiting this vulnerability allows a malicious actor to redirect users to an arbitrary URL address...

6.4CVSS6AI score0.0091EPSS
SaveExploits0References4Affected Software6
NVD
NVD
added 2025/07/15 7:15 p.m.37 views

CVE-2025-53903

The Scratch Channel is a news website that is under development as of time of this writing. The file /api/users.js doesn't properly sanitize text box inputs, leading to a potential vulnerability to cross-site scripting attacks. Commit 90b39eb56b27b2bac29001abb1a3cac0964b8ddb addresses this issue...

5.3CVSS0.00327EPSS
SaveExploits0References2
OSV
OSV
added 2025/07/15 6:22 p.m.9 views

CVE-2025-53903 The Scratch Channel Has Potential Cross-Site Scripting (XSS) Vulnerability

The Scratch Channel is a news website that is under development as of time of this writing. The file /api/users.js doesn't properly sanitize text box inputs, leading to a potential vulnerability to cross-site scripting attacks. Commit 90b39eb56b27b2bac29001abb1a3cac0964b8ddb addresses this issue...

5.3CVSS6.2AI score
SaveExploits0References4
CVE
CVE
added 2025/07/15 6:22 p.m.34 views

CVE-2025-53903

CVE-2025-53903 affects The Scratch Channel’s web application, with a cross-site scripting (XSS) vulnerability stemming from unsanitized input in /api/users.js. The issue is addressed by commit 90b39eb56b27b2bac29001abb1a3cac0964b8ddb. Public documents describe the vulnerability and fix; exploitat...

5.3CVSS5.9AI score0.00327EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/07/15 12:7 a.m.20 views

CVE-2025-53891 TIME LINE has Improper File Validation in Upload Section

The timelineofficial/Time-Line- repository contains the source code for the TIME LINE website. A vulnerability was found in the TIME LINE website where uploaded files instruction/message media are not strictly validated for type and size. A user may upload renamed or oversized files that can...

4.3CVSS0.00333EPSS
SaveExploits0References1
NVD
NVD
added 2025/07/14 4:15 a.m.15 views

CVE-2025-7620

The cross-browser document creation component produced by Digitware System Integration Corporation has a Remote Code Execution vulnerability. If a user visits a malicious website while the component is active, remote attackers can cause the system to download and execute arbitrary programs...

8.8CVSS0.00273EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/07/13 12:0 a.m.12 views

The vulnerability of the platform for creating, publishing, and reproducing digital advertising on Adobe Experience Manager (AEM) Screens lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the platform for creating, publishing, and reproducing digital advertising within Adobe Experience Manager AEM Screens is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary...

5.5CVSS5.9AI score0.00228EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/07/13 12:0 a.m.13 views

The vulnerability of the ColdFusion software platform, related to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

6.4CVSS5.9AI score0.01051EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/07/13 12:0 a.m.15 views

The vulnerability of the ColdFusion software platform, related to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.00731EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/07/13 12:0 a.m.13 views

The vulnerability of the ColdFusion software platform, related to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.00731EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/07/13 12:0 a.m.15 views

The vulnerability of the ColdFusion software platform, related to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.00697EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/07/13 12:0 a.m.15 views

The vulnerability of the platform for creating, publishing, and reproducing digital advertising on Adobe Experience Manager (AEM) Screens lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the platform for creating, publishing, and reproducing digital advertising within Adobe Experience Manager AEM Screens is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary...

5.5CVSS5.9AI score0.00228EPSS
SaveExploits0References2
Circl
Circl
added 2025/07/10 11:44 a.m.22 views

CVE-2024-45434

creationtimestamp| type| source ---|---|--- 2025-07-10 11:44:34+00:00| seen| https://t.me/truesecator/7214 2025-07-11 16:54:30+00:00| seen| https://poliverso.org/objects/0477a01e-b4308b36-ebbc56807a759460 2025-07-13 12:46:38+00:00| seen| https://mstdn.ca/users/rfwaveio/statuses/114845993855424429...

9.8CVSS8.2AI score0.064EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2025/07/10 12:0 a.m.30 views

The vulnerability of Websoft HCM’s automation software for HR processes lies in the lack of measures taken to protect the website structure, allowing attackers to carry out XSS attacks.

The vulnerability of Websoft HCM’s automation software for HR processes is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks by injecting specially crafted JavaScript code into HTML pages...

3.1CVSS5.5AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/10 12:0 a.m.12 views

The vulnerability of Websoft HCM’s automation software for HR processes lies in the lack of measures taken to protect the website structure, allowing attackers to carry out XSS attacks.

The vulnerability of Websoft HCM’s automation software for HR processes is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks by sending specially crafted HTTP requests remotely...

6.4CVSS5.4AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/09 12:0 a.m.20 views

The vulnerability of the “Export to Excel” plugin, which exists due to the lack of protective measures for website structures, allows attackers to carry out XSS attacks.

The vulnerability of the “Export to Excel” plugin exists due to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.3CVSS5.4AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/09 12:0 a.m.18 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of website structures, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.0029EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/09 12:0 a.m.10 views

The vulnerability of the PI Connector for CygNet software in data integration lies in the insufficient protection of the website structure, which allows attackers to carry out XSS attacks.

The vulnerability of the PI Connector for CygNet data integration software is related to insufficient protection of the website structure. Exploiting this vulnerability could allow an attacker to carry out XSS attacks...

5.5CVSS5.5AI score0.00131EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/09 12:0 a.m.10 views

The vulnerability of the “Export/Import Products to Excel” plugin, which exists due to the lack of protective measures for the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the “Export/Import Products to Excel” plugin exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.3CVSS5.4AI score
SaveExploits0References1Affected Software1
RedHat Linux
RedHat Linux
added 2025/07/07 2:28 a.m.6 views

webkitgtk: Website may be able to track sensitive user information

A vulnerability was found in WebKitGTK. This security issue leads to tracking sensitive user information via a website...

6.5CVSS5.7AI score0.00926EPSS
SaveExploits0References5
Rows per page
Query Builder