Lucene search
+L

150558 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2020-17061

Malware in sbrugna...

5.3CVSS6AI score0.01059EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2019-3395

Malware in sbrugna...

6.5CVSS7.5AI score0.01147EPSS
SaveExploits0References12
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2018-3530

Malware in sbrugna...

8.8CVSS7.8AI score0.00625EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2021-26230

Malware in sbrugna...

4.3CVSS5.7AI score0.01046EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2020-23749

Malware in sbrugna...

6.1CVSS6.3AI score0.00829EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2017-11156

Malware in sbrugna...

8.8CVSS6.6AI score0.00686EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2015-4522

Malware in sbrugna...

4.3CVSS8.1AI score0.02155EPSS
SaveExploits0References16
OSV
OSV
•added 2025/10/06 10:15 a.m.•15 views

CVE-2025-11331

A vulnerability was found in IdeaCMS up to 1.8. The impacted element is an unknown function of the file app/common/logic/admin/Config.php of the component Website Name Handler. Performing manipulation of the argument 网站名称 results in command injection. The attack may be initiated remotely. The...

7.2CVSS5.5AI score0.1749EPSS
SaveExploits1References4
CVE
CVE
•added 2025/10/06 10:02 a.m.•54 views

CVE-2025-11331

IdeaCMS up to version 1.8 contains a command injection in the Website Name Handler component, via the argument 网站名称 manipulated in app/common/logic/admin/Config.php. The vulnerability arises from an unknown function handling that input, enabling remote execution after exploitation. Public exploit...

7.2CVSS5AI score0.1749EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/06 10:02 a.m.•12 views

CVE-2025-11331 IdeaCMS Website Name Config.php command injection

A vulnerability was found in IdeaCMS up to 1.8. The impacted element is an unknown function of the file app/common/logic/admin/Config.php of the component Website Name Handler. Performing manipulation of the argument 网站名称 results in command injection. The attack may be initiated remotely. The...

5.8CVSS6.4AI score0.1749EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/06 10:02 a.m.•20 views

EUVD-2025-32529

A vulnerability was found in IdeaCMS up to 1.8. The impacted element is an unknown function of the file app/common/logic/admin/Config.php of the component Website Name Handler. Performing manipulation of the argument 网站名称 results in command injection. The attack may be initiated remotely. The...

5.8CVSS6.2AI score0.1749EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/10/06 10:02 a.m.•30 views

CVE-2025-11331 IdeaCMS Website Name Config.php command injection

A vulnerability was found in IdeaCMS up to 1.8. The impacted element is an unknown function of the file app/common/logic/admin/Config.php of the component Website Name Handler. Performing manipulation of the argument 网站名称 results in command injection. The attack may be initiated remotely. The...

5.8CVSS0.1749EPSS
SaveExploits1References4
OSV
OSV
•added 2025/10/06 4:02 a.m.•1 views

CVE-2025-11319 nahiduddinahammed Hospital-Management-System-Website delete.php sql injection

A weakness has been identified in nahiduddinahammed Hospital-Management-System-Website up to e6562429e14b2f88bd2139cae16e87b965024097. This issue affects some unknown processing of the file /delete.php. This manipulation of the argument ai causes sql injection. It is possible to initiate the atta...

5.3CVSS5.6AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/06 12:00 a.m.•6 views

CVE-2025-11331: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in IdeaCMS up to 1.8. The impacted element is an unknown function of the file app/common/logic/admin/Config.php of the component Website Name Handler. Performing manipulation of the argument 网站名称 results in command injection. The attack may be initiated remotely. The...

7.2CVSS5.3AI score0.1749EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/06 12:00 a.m.•3 views

CVE-2025-11319: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in nahiduddinahammed Hospital-Management-System-Website up to e6562429e14b2f88bd2139cae16e87b965024097. This issue affects some unknown processing of the file /delete.php. This manipulation of the argument ai causes sql injection. It is possible to initiate the atta...

6.5CVSS5.4AI score0.00248EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/06 12:00 a.m.•22 views

PT-2025-40888

Name of the Vulnerable Software and Affected Versions IdeaCMS versions up to 1.8 Description A command injection issue exists in IdeaCMS. The issue is located in an unknown function within the app/common/logic/admin/Config.php file of the Website Name Handler component. Manipulation of the 网站名称...

7.2CVSS4.8AI score0.1749EPSS
SaveExploits1References8
NVD
NVD
•added 2025/10/05 2:15 p.m.•29 views

CVE-2025-11291

A security flaw has been discovered in ixmaps website2017 up to 0c71cffa0162186bc057a76766bc97e9f5a3a2d0. This impacts an unknown function of the file /map.php of the component HTTP GET Request Handler. Performing manipulation of the argument trid results in cross site scripting. The attack can b...

5.3CVSS0.00417EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/05 12:00 a.m.•4 views

CVE-2025-11291: Improper Neutralization of Input During Web Page Generation

A security flaw has been discovered in ixmaps website2017 up to 0c71cffa0162186bc057a76766bc97e9f5a3a2d0. This impacts an unknown function of the file /map.php of the component HTTP GET Request Handler. Performing manipulation of the argument trid results in cross site scripting. The attack can b...

5.3CVSS3.8AI score0.00417EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/10/04 12:56 a.m.•35 views

CVE-2025-60451

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists due to insufficient validation and sanitization of SVG file uploads in the app\system\include\module\uploadify.class.php component, specifically in the website settings module...

6.1CVSS6AI score0.00228EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-24922

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00174EPSS
SaveExploits0References1
Rows per page
Query Builder