Lucene search
+L

150611 matches found

BDU FSTEC
BDU FSTEC
•added 2025/09/16 12:00 a.m.•12 views

The vulnerability of the AVReg software for creating audio/video recorders lies in the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks.

The vulnerability of the AVReg software for creating audio/video recorders is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.6AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/09/16 12:00 a.m.•9 views

The vulnerability of the "Kub24" accounting management software lies in the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the "Kub24" accounting management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

8.5CVSS5.6AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/09/16 12:00 a.m.•7 views

The vulnerability of the "Kub24" accounting management software system lies in the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the "Kub24" accounting management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

8.5CVSS5.6AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/09/16 12:00 a.m.•10 views

The vulnerability of the AVReg software for creating audio/video recorders lies in the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks.

The vulnerability of the AVReg software for creating audio/video recorders is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.6AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/09/16 12:00 a.m.•7 views

The vulnerability of the AVReg software for creating audio/video recorders lies in the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks.

The vulnerability of the AVReg software for creating audio/video recorders is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.6AI score
SaveExploits0Affected Software1
OSV
OSV
•added 2025/09/15 11:15 p.m.•12 views

DEBIAN-CVE-2025-43356

The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A website may be able to access sensor information without user consent...

6.5CVSS6.1AI score0.00648EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/15 11:15 p.m.•18 views

CVE-2025-43356

The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A website may be able to access sensor information without user consent...

6.5CVSS0.00648EPSS
SaveExploits0References13
OSV
OSV
•added 2025/09/15 11:15 p.m.•12 views

UBUNTU-CVE-2025-43356

The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A website may be able to access sensor information without user consent...

6.5CVSS6.6AI score0.00648EPSS
SaveExploits0References4
OSV
OSV
•added 2025/09/15 6:15 a.m.•20 views

CVE-2025-10428

A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/seosetting.php of the component Setting Handler. The manipulation of the argument websiteimage leads to unrestricted upload. The attack can be...

8.8CVSS5.5AI score0.00421EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/09/15 5:32 a.m.•12 views

CVE-2025-10428 SourceCodester Pet Grooming Management Software Setting seo_setting.php unrestricted upload

A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/seosetting.php of the component Setting Handler. The manipulation of the argument websiteimage leads to unrestricted upload. The attack can be...

6.5CVSS6.3AI score0.00421EPSS
SaveExploits1References5
OSV
OSV
•added 2025/09/15 5:15 a.m.•21 views

CVE-2025-10427

A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown function of the file /admin/operation/user.php. Executing manipulation of the argument websiteimage can lead to unrestricted upload. It is possible to launch the attack remotely. The...

8.8CVSS5.6AI score0.00421EPSS
SaveExploits1References5
NVD
NVD
•added 2025/09/15 5:15 a.m.•28 views

CVE-2025-10427

A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown function of the file /admin/operation/user.php. Executing manipulation of the argument websiteimage can lead to unrestricted upload. It is possible to launch the attack remotely. The...

8.8CVSS0.00421EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/09/15 5:02 a.m.•36 views

CVE-2025-10427 SourceCodester Pet Grooming Management Software user.php unrestricted upload

A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown function of the file /admin/operation/user.php. Executing manipulation of the argument websiteimage can lead to unrestricted upload. It is possible to launch the attack remotely. The...

6.5CVSS0.00421EPSS
SaveExploits1References5
CVE
CVE
•added 2025/09/15 5:02 a.m.•51 views

CVE-2025-10427

SourceCodester Pet Grooming Management Software 1.0 is affected. The vulnerability lies in the file /admin/operation/user.php where manipulating the website_image argument enables unrestricted file uploads, potentially allowing remote and unauthenticated or low-privilege attackers to upload arbit...

8.8CVSS6.5AI score0.00421EPSS
SaveExploits1References5Affected Software1
Github Security Blog
Github Security Blog
•added 2025/09/15 2:29 a.m.•3 views

Malware in library-website

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/09/15 12:00 a.m.•15 views

SourceCodester Pet Grooming Management Software 代码问题漏洞

SourceCodester Pet Grooming Management Software is an open source pet grooming management system from SourceCodester. A code issue vulnerability exists in version 1.0 of SourceCodester Pet Grooming Management Software, which stems from an incorrect manipulation of the parameter websiteimage in th...

8.8CVSS6.6AI score0.00421EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/09/15 12:00 a.m.•27 views

SourceCodester Pet Grooming Management Software 代码问题漏洞

SourceCodester Pet Grooming Management Software is a SourceCodester open source pet grooming management system. A code issue vulnerability exists in version 1.0 of SourceCodester Pet Grooming Management Software, which stems from an incorrect manipulation of the parameter websiteimage in the file...

8.8CVSS6.5AI score0.00421EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2025/09/14 12:00 a.m.•23 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...

5.5CVSS6.7AI score0.05313EPSS
SaveExploits0References2Affected Software1
Circl
Circl
•added 2025/09/13 5:41 a.m.•23 views

CVE-2025-10340

creationtimestamp| type| source ---|---|--- 2025-09-13 05:41:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyp2x3edci2i...

5.1CVSS5.8AI score0.00258EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/09/12 12:00 a.m.•19 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE lies in the insufficient protection of website structures, which allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

8.7CVSS5.9AI score0.00318EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder