Lucene search
+L

10 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2023-2383

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.01046EPSS
SaveExploits0References6
OSV
OSV
•added 2023/08/15 8:08 p.m.•26 views

GHSA-XVHG-W6QC-M3QQ Yaklang Plugin's Fuzztag Component Allows Unauthorized Local File Reading

Impact The Yak Engine has been found to contain a local file inclusion LFI vulnerability. This vulnerability allows attackers to include files from the server's local file system through the web application. When exploited, this can lead to the unintended exposure of sensitive data, potential...

7.5CVSS7.1AI score0.01046EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2023/08/15 8:08 p.m.•47 views

Yaklang Plugin's Fuzztag Component Allows Unauthorized Local File Reading

Impact The Yak Engine has been found to contain a local file inclusion LFI vulnerability. This vulnerability allows attackers to include files from the server's local file system through the web application. When exploited, this can lead to the unintended exposure of sensitive data, potential...

7.5CVSS6.7AI score0.01046EPSS
SaveExploits0References6Affected Software1
Prion
Prion
•added 2023/08/14 8:15 p.m.•33 views

Remote code execution

yaklang is a programming language designed for cybersecurity. The Yak Engine has been found to contain a local file inclusion LFI vulnerability. This vulnerability allows attackers to include files from the server's local file system through the web application. When exploited, this can lead to t...

5CVSS7.7AI score0.01046EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2023/08/14 7:59 p.m.•44 views

CVE-2023-40023 Yaklang Plugin's Fuzztag Component Allows Unauthorized Local File Reading

yaklang is a programming language designed for cybersecurity. The Yak Engine has been found to contain a local file inclusion LFI vulnerability. This vulnerability allows attackers to include files from the server's local file system through the web application. When exploited, this can lead to t...

6.5CVSS7.9AI score0.01046EPSS
SaveExploits0References3
OSV
OSV
•added 2023/08/14 7:59 p.m.•36 views

CVE-2023-40023 Yaklang Plugin's Fuzztag Component Allows Unauthorized Local File Reading

yaklang is a programming language designed for cybersecurity. The Yak Engine has been found to contain a local file inclusion LFI vulnerability. This vulnerability allows attackers to include files from the server's local file system through the web application. When exploited, this can lead to t...

6.5CVSS7.5AI score
SaveExploits0References5
Mend
Mend
•added 2023/08/14 7:59 p.m.•2 views

CVE-2023-40023

yaklang is a programming language designed for cybersecurity. The Yak Engine has been found to contain a local file inclusion LFI vulnerability. This vulnerability allows attackers to include files from the server's local file system through the web application. When exploited, this can lead to t...

7.5CVSS0.01046EPSS
SaveExploits0References7
CVE
CVE
•added 2023/08/14 7:59 p.m.•70 views

CVE-2023-40023

The CVE-2023-40023 issue affects the Yak Engine (Yaklang) plugin’s Fuzztag component, which contains a Local File Inclusion (LFI) flaw that can allow an attacker to read files from the server’s local filesystem via the web application. Affected are versions prior to 1.2.4-sp1; the vulnerability i...

7.5CVSS7.1AI score0.01046EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2023/08/14 12:00 a.m.•19 views

PT-2023-27218 · Unknown · Yak Engine

Name of the Vulnerable Software and Affected Versions: Yak Engine versions prior to 1.2.4-sp1 Description: The Yak Engine contains a local file inclusion LFI vulnerability, allowing attackers to include files from the server's local file system through the web application. This can lead to...

7.5CVSS7.7AI score0.01046EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/14 12:00 a.m.•6 views

CVE-2023-40023: Exposure of Sensitive Information to an Unauthorized Actor

yaklang is a programming language designed for cybersecurity. The Yak Engine has been found to contain a local file inclusion LFI vulnerability. This vulnerability allows attackers to include files from the server's local file system through the web application. When exploited, this can lead to t...

7.5CVSS7.1AI score0.01046EPSS
SaveExploits0References2
Rows per page
Query Builder