Lucene search
+L
AttackerkbMost viewed

96138 matches found

ATTACKERKB
ATTACKERKB
added 2021/08/31 12:00 a.m.27 views

Ship Ferry Ticket Reservation System v1.0 SQL-Injection-Bypass-Authentication

Description: The Ship/Ferry Ticket Reservation System v1.0 is vulnerable in the application /shipticketing/classes/Login.php from SQL-Injection-Bypass-Authentication. The parameter username from the login form is not protected correctly and there is no security and escaping from malicious payload...

0.4AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/06/08 12:00 a.m.27 views

CVE-2021-31955

Windows Kernel Information Disclosure Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

5.5CVSS8.5AI score0.81107EPSS
SaveExploits2References2
ATTACKERKB
ATTACKERKB
added 2021/05/21 3:15 p.m.27 views

CVE-2021-31474

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network Performance Monitor 2020.2.1. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SolarWinds.Serialization library. The issue results...

10CVSS7.4AI score0.94431EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2020/10/28 12:00 a.m.27 views

CVE-2018-19953

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2.1231 on build 20200302; QTS 4.4.1.1201 on build 20200130; QTS 4.3.6.1218 on build 20200214; QTS 4.3.4.1190 on buil...

6.1CVSS5.1AI score0.23894EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2020/09/17 12:00 a.m.27 views

CVE-2020-11698

An issue was discovered in Titan SpamTitan 7.07. Improper input sanitization of the parameter community on the page snmp-x.php would allow a remote attacker to inject commands into the file snmpd.conf that would allow executing commands on the target server. Recent assessments: cdelafuente-r7 at...

10CVSS9.6AI score0.73197EPSS
SaveExploits5References9
ATTACKERKB
ATTACKERKB
added 2020/07/29 1:15 p.m.27 views

CVE-2020-9691

Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a dom-based cross-site scripting vulnerability. Successful exploitation could lead to arbitrary code execution...

9.6CVSS7.9AI score0.06018EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2020/07/03 12:00 a.m.27 views

CVE-2020-1425 - Windows Codecs Library RCE

A remote code execution in Windows Codecs Library has been fixed by Microsoft with out-of-band patch on 30th June 2020. The vulnerability allows attacker to remotely execute arbitrary code, if the victim opens maliciously crafted media file. Recent assessments: busterb at July 07, 2020 6:42pm UTC...

7.8CVSS8AI score0.12375EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2020/06/29 12:00 a.m.27 views

CVE-2020-15069

Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed...

9.8CVSS8.3AI score0.10674EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2020/06/09 12:00 a.m.27 views

CVE-2020-9819

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5, watchOS 5.3.7. Processing a maliciously crafted mail message may lead to heap corruption. Recent assessments: Assessed Attacker Value: 0 Assessed...

4.3CVSS2AI score0.02178EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2020/04/06 10:00 a.m.27 views

CVE-2020-7357

Cayin CMS suffers from an authenticated OS semi-blind command injection vulnerability using default credentials. This can be exploited to inject and execute arbitrary shell commands as the root user through the 'NTPServerIP' HTTP POST parameter in system.cgi page. This issue affects several...

9.9CVSS8.9AI score0.32094EPSS
SaveExploits8References5
ATTACKERKB
ATTACKERKB
added 2020/03/11 12:00 a.m.27 views

CVE-2020-10181

goform/formEMR30 in Sumavision Enhanced Multimedia Router EMR 3.0.4.27 allows creation of arbitrary users with elevated privileges administrator on a device, as demonstrated by a setString=newuseradministrator123456 request. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value:...

9.8CVSS9.4AI score0.14666EPSS
SaveExploits5References4
ATTACKERKB
ATTACKERKB
added 2020/02/28 6:15 p.m.27 views

CVE-2020-9463

Centreon 19.10 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the serverip field in JSON data in an api/internal.php?object=centreonconfigurationremote request...

9CVSS8.1AI score0.04122EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2020/02/18 4:15 a.m.27 views

CVE-2020-8010 Nimbus protocol allows unauth read/write/execute

CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot controller component. A remote attacker can execute commands, read from, or write to the target system...

10CVSS8.7AI score0.50717EPSS
SaveExploits4References5
ATTACKERKB
ATTACKERKB
added 2020/02/13 12:15 a.m.27 views

CVE-2020-7208

LinuxKI v6.0-1 and earlier is vulnerable to an XSS which is resolved in release 6.0-2...

6.1CVSS6.9AI score0.0085EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2020/02/12 12:00 a.m.27 views

CVE-2019-19194

The Bluetooth Low Energy Secure Manager Protocol SMP implementation on Telink Semiconductor BLE SDK versions before November 2019 for TLSR8x5x through 3.4.0, TLSR823x through 1.3.0, and TLSR826x through 3.3 devices installs a zero long term key LTK if an out-of-order link-layer encryption request...

8.8CVSS3AI score0.01002EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2020/02/03 3:15 p.m.27 views

CVE-2020-8510

An issue was discovered in phpABook 0.9 Intermediate. On the login page, if one sets a userInfo cookie with the value of admin+1+en user+perms+lang, one can login as any user without a password...

9.8CVSS8.5AI score0.01247EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2020/01/27 10:15 p.m.27 views

CVE-2020-8091

svg.swf in TYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to 7.1.0 could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack on a targeted system. This may be at a contrib/websvg/svg.swf pathname...

6.1CVSS5AI score0.05214EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2020/01/14 12:00 a.m.27 views

Remote Desktop Client remote code execution vulnerability

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka ‘Remote Desktop Client Remote Code Execution Vulnerability’. Recent assessments: busterb at January 15, 2020 2:29am UTC reported: This is a client-side exploit, which...

7.5CVSS2.4AI score0.08403EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2019/09/11 12:00 a.m.27 views

CVE-2019-8451

The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery SSRF vulnerability due to a logic bug in the JiraWhitelist class. Recent assessments: h0ffayyy at September...

6.5CVSS1.7AI score0.94453EPSS
SaveExploits2References2
ATTACKERKB
ATTACKERKB
added 2019/09/08 12:00 a.m.27 views

CVE-2019-16097

core/api/user.go in Harbor 1.7.0 through 1.8.2 allows non-admin users to create admin accounts via the POST /api/users API, when Harbor is setup with DB as authentication backend and allow user to do self-registration. Fixed version: v1.7.6 v1.8.3. v.1.9.0. Workaround without applying the fix:...

6.5CVSS2.8AI score0.22443EPSS
SaveExploits5References7
ATTACKERKB
ATTACKERKB
added 2019/03/11 12:00 a.m.27 views

CVE-2018-1890

IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 152081. Recent assessments: timb-machine at March 05, 2021 12:26am UTC reported: Unlikely to be setUID, unlikely that you...

7.8CVSS3.8AI score0.00465EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2019/02/28 12:00 a.m.27 views

CVE-2018-18492: Mozilla Firefox Select Element Use-After-Free

Firefox is a free and open-source web browser developed by the Mozilla Foundation. A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select element in the options collection, which gets garbage collected, and results in a potentially...

9.8CVSS0.3AI score0.09646EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2018/04/17 12:00 a.m.27 views

TIBCO JasperReports Server Information Disclosure Vulnerability

The Spring web flows of TIBCO Software Inc.’s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contain a vulnerability which...

8.8CVSS8AI score0.4963EPSS
SaveExploits3References6
ATTACKERKB
ATTACKERKB
added 2018/03/28 12:00 a.m.27 views

CVE-2018-0159

A vulnerability in the implementation of Internet Key Exchange Version 1 IKEv1 functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability is...

7.8CVSS4.8AI score0.0687EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2017/10/24 12:00 a.m.27 views

Ayukov NFTP FTP Client Stack Buffer Overflow Analysis

Buffer Overflow vulnerability in Ayukov NFTPD 2.0 and earlier allows remote attackers to execute arbitrary code. Recent assessments: wchen-r7 at September 12, 2019 6:08pm UTC reported: Details Ayukov is an FTP client that was written by Sergey Ayukov back in 1994. Development stopped in 2011, and...

9.8CVSS0.8AI score0.60328EPSS
SaveExploits16References3
ATTACKERKB
ATTACKERKB
added 2017/09/29 12:00 a.m.27 views

CVE-2017-12234

Multiple vulnerabilities in the implementation of the Common Industrial Protocol CIP feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerabilities are due to the...

7.8CVSS5.1AI score0.07128EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2016/11/10 12:00 a.m.27 views

CVE-2016-7243

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka “Scripting Engine Memory Corruption Vulnerability,” a different vulnerability than CVE-2016-7200, CVE-2016-7201,...

8.8CVSS8.4AI score0.8249EPSS
SaveExploits18References4
ATTACKERKB
ATTACKERKB
added 2016/04/12 12:00 a.m.27 views

CVE-2016-0162

Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScript code, aka “Internet Explorer Information Disclosure Vulnerability.” Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

4.3CVSS5.5AI score0.22088EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2016/03/12 12:00 a.m.27 views

CVE-2016-0993

Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary...

9.3CVSS9.2AI score0.194EPSS
SaveExploits1References9
ATTACKERKB
ATTACKERKB
added 2015/07/16 12:00 a.m.27 views

Oracle Java JRE AES Intrinsics Remote Denial of Service

Unspecified vulnerability in Oracle Java SE 8u45 and Java SE Embedded 8u33 allows remote attackers to affect availability via unknown vectors related to Security. Recent assessments: jcran at November 14, 2019 9:43pm UTC reported: Causes a hard crash for the web application server for example,...

5CVSS2.6AI score0.03491EPSS
SaveExploits0References9
ATTACKERKB
ATTACKERKB
added 2015/02/11 12:00 a.m.27 views

CVE-2015-0071

Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka “Internet Explorer ASLR Bypass Vulnerability.” Recent assessments: gwillcox-r7 at November 23, 2020 6:02pm UTC reported: Reported as exploited in the wild as part o...

6.5CVSS6.1AI score0.33581EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2015/01/23 12:00 a.m.27 views

CVE-2015-0311

Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015. Recent assessments:...

10CVSS9.8AI score0.8582EPSS
SaveExploits5References15
ATTACKERKB
ATTACKERKB
added 2014/07/26 12:00 a.m.27 views

Shunra Network Virtualization for Hewlett-Packard toServerObject() Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Network Visualization. Authentication is not required to exploit this vulnerability. Recent assessments: wchen-r7 at September 12, 2019 6:07pm UTC reported: The specific flaw exists...

9.4CVSS7.8AI score0.19407EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2013/02/14 12:00 a.m.27 views

CVE-2013-0641

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value...

9.3CVSS7.8AI score0.32449EPSS
SaveExploits0References13
ATTACKERKB
ATTACKERKB
added 2012/12/03 12:00 a.m.27 views

CVE-2012-5611 MySQL Buffer Overflow

Stack-based buffer overflow in the aclget function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to...

6.5CVSS4.1AI score0.23956EPSS
SaveExploits3References13
ATTACKERKB
ATTACKERKB
added 2005/09/02 12:00 a.m.27 views

CVE-2005-2773

HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 node parameter to connectedNodes.ovpl, 2 cdpView.ovpl, 3 freeIPaddrs.ovpl, and 4 ecscmg.ovpl. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker...

9.8CVSS8AI score0.74592EPSS
SaveExploits10References9
ATTACKERKB
ATTACKERKB
added 2026/08/18 3:43 p.m.26 views

CVE-2026-45128

MyBB is free and open source forum software. Prior to 1.8.40, the ACP Users View Manager module does not validate requests correctly, allowing same-site attackers to change a victim administrator's default user list view by embedding a specially crafted URL. The Set as Default control named...

3.5CVSS5.3AI score0.00132EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/18 3:25 p.m.26 views

CVE-2026-73073

Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command...

7.1CVSS5.8AI score0.00147EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/18 3:22 p.m.26 views

CVE-2026-75914

CodeWhale versions before 0.8.64 contain a path traversal vulnerability in the imageanalyze tool that fails to canonicalize symlinks before reading files. Attackers can create workspace symlinks pointing to external files with image extensions to leak file bytes to the vision endpoint without use...

8.7CVSS5.3AI score0.00423EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/18 2:00 p.m.26 views

CVE-2026-73359

Subscriber Cross Site Scripting XSS in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent = 4.3.9 versions...

6.5CVSS5AI score0.00211EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/17 7:15 p.m.26 views

CVE-2026-75012

A security vulnerability has been detected in TOTOLINK EX1200L 9.3.5u.6146B20201023. Affected by this issue is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Password Configuration Handler. The manipulation leads to null pointer dereference. The attack can be...

7.1CVSS6.1AI score0.0036EPSS
SaveExploits1References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/17 11:04 a.m.26 views

CVE-2026-74878

opensslencrypt versions before 1.4.0 use an in-memory rate limiter for TOTP brute-force protection that is not shared across workers and is lost on server restart. Attackers can distribute authentication attempts across multiple server instances or retry immediately after a restart to bypass rate...

9.8CVSS5.3AI score0.00398EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/17 11:04 a.m.26 views

CVE-2026-74868

SiYuan versions before 3.7.4 contain an unthrottled brute-force vulnerability in the Publish Service Basic Auth implementation PublishServiceTransport.RoundTrip in kernel/server/proxy/publish.go. The Publish Service runs on a separate, unauthenticated-by-default listener default TCP port 6808 and...

8.7CVSS5.5AI score0.00375EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/16 6:38 a.m.26 views

CVE-2026-18347

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.1.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

4.3CVSS5.5AI score0.00305EPSS
SaveExploits0References13
ATTACKERKB
ATTACKERKB
added 2026/08/15 9:44 p.m.26 views

CVE-2026-73052

SiYuan before v3.7.4 stores attribute-view field names without HTML escaping and interpolates them directly into option elements via innerHTML in the sort menu. Attackers can inject markup by renaming a database field to execute arbitrary JavaScript when users open the sort menu, with Node...

9.4CVSS5.9AI score0.003EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/15 5:45 p.m.26 views

CVE-2026-19903

A vulnerability has been found in SourceCodester Online Clothing Store 1.0. This affects an unknown part of the file /db/shopping.sql of the component SQL Database Backup. The manipulation leads to files or directories accessible. Remote exploitation of the attack is possible. The exploit has bee...

5.6AI score0.00311EPSS
SaveExploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/15 1:36 p.m.26 views

CVE-2026-19474

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, request.saveRequestFiles can leave completed temporary files on disk when a client disconnects while the parser is advancing between multipart parts. The iterator rejection that...

5.3AI score0.00278EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/15 1:26 p.m.26 views

CVE-2026-18549

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 5.3.0 up to but not including 10.1.1, when the busboy fileSize limit truncates a file part, the plugin clears its internal current-file reference while the underlying stream is still open. If the client then aborts t...

5.3AI score0.0034EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/15 12:28 p.m.26 views

CVE-2026-74555

In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix HA resume deadlock and hisisas disk-wake race Commit fbefe22811c3 "scsi: libsas: Don't always drain event workqueue for HA resume" introduced sasresumehanosync to avoid a deadlock: the PHYERESUMETIMEOUT handler,...

5.4AI score0.00161EPSS
SaveExploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/15 12:27 p.m.26 views

CVE-2026-74498

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fillmax is set When a USB audio endpoint requests full packet transfers via the fillmax descriptor flag, dataepsetparams promotes ep-curpacksize to ep-maxpacksize. However,...

5.5AI score0.00177EPSS
SaveExploits0References6Affected Software1
Total number of security vulnerabilities5000