Lucene search
+L

81 matches found

Kitploit
Kitploit
•added 2026/10/04 3:29 p.m.•11 views

Evtx_Log_Browser

Evtx 로그xml 브라우저 Windows evtx 이벤트 로그를 탐색하고 xml로 내보냅니다 최신 버전은여기에서 확인하세요 종속성: .NET Framework 4.8 Powershell 버전: 5.1...

6AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/21 1:36 p.m.•39 views

CVE-2026-94401 MISP Arbitrary Local File Read and SSRF via MISP Export Upload

MISP has a file-handling vulnerability that could let certain authenticated users make the server read files or access internal network services. When importing an XML file, MISP did not properly verify that the uploaded content was actually XML. Because of this, a user with permission to modify...

8.3CVSS0.00381EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/26 3:07 p.m.•15 views

CVE-2026-4169

A security flaw has been discovered in Tecnick TCExam up to 16.6.0. Affected is the function Fxmlexportusers of the file admin/code/tcexmlusers.php of the component XML Export. Performing a manipulation results in cross site scripting. Remote exploitation of the attack is possible. There are stil...

4.8CVSS4.3AI score0.0035EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/16 2:19 p.m.•14 views

CVE-2026-4169

A security flaw has been discovered in Tecnick TCExam up to 16.6.0. Affected is the function Fxmlexportusers of the file admin/code/tcexmlusers.php of the component XML Export. Performing a manipulation results in cross site scripting. Remote exploitation of the attack is possible. There are stil...

4.8CVSS0.0035EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/16 12:00 a.m.•1 views

CVE-2026-4169: Improper Neutralization of Input During Web Page Generation

A security flaw has been discovered in Tecnick TCExam up to 16.6.0. Affected is the function Fxmlexportusers of the file admin/code/tcexmlusers.php of the component XML Export. Performing a manipulation results in cross site scripting. Remote exploitation of the attack is possible. There are stil...

4.8CVSS3.6AI score0.0035EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/15 6:02 a.m.•53 views

CVE-2026-4169 Tecnick TCExam XML Export tce_xml_users.php F_xml_export_users cross site scripting

A security flaw has been discovered in Tecnick TCExam up to 16.6.0. Affected is the function Fxmlexportusers of the file admin/code/tcexmlusers.php of the component XML Export. Performing a manipulation results in cross site scripting. Remote exploitation of the attack is possible. There are stil...

4.8CVSS0.0035EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/03/15 6:02 a.m.•8 views

CVE-2026-4169 Tecnick TCExam XML Export tce_xml_users.php F_xml_export_users cross site scripting

A security flaw has been discovered in Tecnick TCExam up to 16.6.0. Affected is the function Fxmlexportusers of the file admin/code/tcexmlusers.php of the component XML Export. Performing a manipulation results in cross site scripting. Remote exploitation of the attack is possible. There are stil...

4.8CVSS3.7AI score0.0035EPSS
SaveExploits0References4
CVE
CVE
•added 2026/03/15 6:02 a.m.•45 views

CVE-2026-4169

The CVE-2026-4169 entry describes a cross-site scripting vulnerability in Tecnick TCExam up to version 16.6.0, specifically in the XML Export component: the function F_xml_export_users inside admin/code/tce_xml_users.php. Exploitation requires manipulating input and is noted as remotely explorabl...

4.8CVSS3.7AI score0.0035EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/03/15 6:02 a.m.•9 views

CVE-2026-4169

A security flaw has been discovered in Tecnick TCExam up to 16.6.0. Affected is the function Fxmlexportusers of the file admin/code/tcexmlusers.php of the component XML Export. Performing a manipulation results in cross site scripting. Remote exploitation of the attack is possible. There are stil...

4.8CVSS4.3AI score0.0035EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2025/12/05 4:15 a.m.•17 views

CVE-2025-13066

The Demo Importer Plus plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 2.0.6. This is due to insufficient file type validation detecting WXR files, allowing double extension files to bypass sanitization while being accepted as a valid WXR file. Th...

8.8CVSS0.00551EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2004-1628

Malware in sbrugna...

5CVSS6.4AI score0.0121EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2021-12903

Malware in sbrugna...

5.4CVSS5.4AI score0.00999EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2015-8261

Malware in sbrugna...

7.5CVSS7.4AI score0.0119EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2020-25286

Malware in sbrugna...

5.4CVSS5.5AI score0.01003EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2025-23670

Malicious code in bioql PyPI...

8.7CVSS6.3AI score0.01368EPSS
SaveExploits0References4
VulnCheck KEV
VulnCheck KEV
•added 2025/09/06 12:00 a.m.•29 views

VulnCheck KEV: CVE-2025-54125

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform Legacy Old Core and XWiki Platform Old Core versions 1.1 through 16.4.6, 16.5.0-rc-1 through 16.10.4 and 17.0.0-rc-1 through 17.1.0, the XML export of a page in XWiki that can b...

8.7CVSS5.8AI score0.01368EPSS
SaveIn wildExploits0References2
NVD
NVD
•added 2025/08/06 12:15 a.m.•26 views

CVE-2025-54125

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform Legacy Old Core and XWiki Platform Old Core versions 1.1 through 16.4.6, 16.5.0-rc-1 through 16.10.4 and 17.0.0-rc-1 through 17.1.0, the XML export of a page in XWiki that can b...

8.7CVSS0.01368EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/06 12:00 a.m.•1 views

CVE-2025-54125: Exposure of Private Personal Information to an Unauthorized Actor

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform Legacy Old Core and XWiki Platform Old Core versions 1.1 through 16.4.6, 16.5.0-rc-1 through 16.10.4 and 17.0.0-rc-1 through 17.1.0, the XML export of a page in XWiki that can b...

8.7CVSS5.7AI score0.01368EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/06 12:00 a.m.•14 views

XWiki Platform 安全漏洞

XWiki Platform is XWiki's open source suite of Wiki platforms for creating Web collaboration applications. A security vulnerability exists in XWiki Platform that stems from an XML export that may contain password and email attributes...

8.7CVSS6.8AI score0.01368EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/08/05 11:30 p.m.•9 views

CVE-2025-54125 XWiki Platform: Password and email exposure in xml.vm fields

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform Legacy Old Core and XWiki Platform Old Core versions 1.1 through 16.4.6, 16.5.0-rc-1 through 16.10.4 and 17.0.0-rc-1 through 17.1.0, the XML export of a page in XWiki that can b...

8.7CVSS6.1AI score0.01368EPSS
SaveExploits0References3
Rows per page
Query Builder