Lucene search
+L

150611 matches found

BDU FSTEC
BDU FSTEC
•added 2025/07/13 12:00 a.m.•22 views

The vulnerability of the ColdFusion software platform, related to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.00879EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/07/13 12:00 a.m.•19 views

The vulnerability of the platform for creating, publishing, and reproducing digital advertising on Adobe Experience Manager (AEM) Screens lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the platform for creating, publishing, and reproducing digital advertising within Adobe Experience Manager AEM Screens is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary...

5.5CVSS5.9AI score0.00272EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/07/13 12:00 a.m.•20 views

The vulnerability of the ColdFusion software platform, related to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

6.4CVSS5.9AI score0.01326EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/07/13 12:00 a.m.•22 views

The vulnerability of the ColdFusion software platform, related to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.00879EPSS
SaveExploits0References2
Circl
Circl
•added 2025/07/10 11:44 a.m.•36 views

CVE-2024-45434

creationtimestamp| type| source ---|---|--- 2025-07-10 11:44:34+00:00| seen| https://t.me/truesecator/7214 2025-07-11 16:54:30+00:00| seen| https://poliverso.org/objects/0477a01e-b4308b36-ebbc56807a759460 2025-07-13 12:46:38+00:00| seen| https://mstdn.ca/users/rfwaveio/statuses/114845993855424429...

9.8CVSS8.2AI score0.07314EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2025/07/10 12:00 a.m.•37 views

The vulnerability of Websoft HCM’s automation software for HR processes lies in the lack of measures taken to protect the website structure, allowing attackers to carry out XSS attacks.

The vulnerability of Websoft HCM’s automation software for HR processes is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks by injecting specially crafted JavaScript code into HTML pages...

3.1CVSS5.5AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/07/10 12:00 a.m.•16 views

The vulnerability of Websoft HCM’s automation software for HR processes lies in the lack of measures taken to protect the website structure, allowing attackers to carry out XSS attacks.

The vulnerability of Websoft HCM’s automation software for HR processes is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks by sending specially crafted HTTP requests remotely...

6.4CVSS5.4AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/07/09 12:00 a.m.•13 views

The vulnerability of the “Export/Import Products to Excel” plugin, which exists due to the lack of protective measures for the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the “Export/Import Products to Excel” plugin exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.3CVSS5.4AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/07/09 12:00 a.m.•27 views

The vulnerability of the “Export to Excel” plugin, which exists due to the lack of protective measures for website structures, allows attackers to carry out XSS attacks.

The vulnerability of the “Export to Excel” plugin exists due to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.3CVSS5.4AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/07/09 12:00 a.m.•22 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of website structures, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.00357EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/07/09 12:00 a.m.•18 views

The vulnerability of the PI Connector for CygNet software in data integration lies in the insufficient protection of the website structure, which allows attackers to carry out XSS attacks.

The vulnerability of the PI Connector for CygNet data integration software is related to insufficient protection of the website structure. Exploiting this vulnerability could allow an attacker to carry out XSS attacks...

5.5CVSS5.5AI score0.00149EPSS
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2025/07/08 3:54 a.m.•2 views

Malware in auth0-styleguide-website

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
RedHat Linux
RedHat Linux
•added 2025/07/07 2:28 a.m.•14 views

webkitgtk: A malicious website may exfiltrate data cross-origin

A flaw was found in WebKitGTK. A malicious website may steal data cross-origin due to improper security checks within the web browser or rendering engine, leading to unauthorized disclosure of information...

6.5CVSS5.7AI score0.00394EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/07/07 2:28 a.m.•13 views

webkitgtk: Visiting a malicious website may lead to address bar spoofing

A flaw was found in WebKit. This flaw allows a remote attacker to conduct spoofing attacks by exploiting an inconsistent user interface issue. The attacker could perform address bar spoofing by tricking a victim into visiting a specially crafted website...

6.5CVSS5.8AI score0.00933EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2025/07/07 2:28 a.m.•18 views

webkit: visiting a malicious website may lead to address bar spoofing

A flaw was found in WebKit that may allow a remote attacker to conduct spoofing attacks by exploiting an inconsistent user interface issue. By tricking a victim into visiting a specially crafted website, the attacker could perform address bar spoofing...

7.5CVSS5.8AI score0.00853EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/07/07 2:28 a.m.•17 views

webkitgtk: A website may able to track visited websites in private browsing

A flaw was found in webkitgtk where a website may be able to track the websites a user visited in private browsing mode...

5.3CVSS5.7AI score0.00418EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/07/07 2:28 a.m.•16 views

webkit: processing malicious web content may lead to a denial of service

A flaw was found in WebKit. This issue may allow an attacker to trigger a denial of service condition by convincing a victim to visit a specially crafted website...

6.5CVSS5.7AI score0.00981EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/07/07 2:28 a.m.•11 views

webkitgtk: Memory corruption leading to arbitrary code execution

A flaw was found in the webkitgtk package. Affected versions of this package could allow a remote attacker to execute arbitrary code on the system caused by a memory corruption issue in the WebKit component. An attacker can execute arbitrary code on the system by persuading a victim to visit a...

8.8CVSS7.7AI score0.03706EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/07/07 2:28 a.m.•14 views

webkitgtk: Website may be able to track sensitive user information

A vulnerability was found in WebKitGTK. This security issue leads to tracking sensitive user information via a website...

6.5CVSS5.7AI score0.00926EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/07/07 2:28 a.m.•10 views

webkitgtk: Integer overflow leading to arbitrary code execution

A flaw was found in the webkitgtk package. Affected versions of this package could allow a remote attacker to execute arbitrary code on the system caused by an integer overflow in the WebKit component. An attacker can execute arbitrary code on the system by persuading a victim to visit a speciall...

8.8CVSS7.8AI score0.03521EPSS
SaveExploits0References6
Rows per page
Query Builder