Threats tagged 'web'

380 threats

Severity	CVSS	Threat	Source	Published
Medium	–	phpMyFAQ 2.9.8 - Cross-Site Request Forgery (CSRF) Medium2025-12-03Exploit-DB RSS Feed phpMyFAQ 2.9.8 - Cross-Site Request Forgery (CSRF) Exploit #web #csrf #php	Exploit-DB RSS Feed	2025-12-03
Medium	–	phpMyFAQ 2.9.8 - Cross-Site Request Forgery(CSRF) Medium2025-12-03Exploit-DB RSS Feed phpMyFAQ 2.9.8 - Cross-Site Request Forgery(CSRF) Exploit #web #csrf #php	Exploit-DB RSS Feed	2025-12-03
Medium	–	phpMyFaq 2.9.8 · Cross Site Request Forgery (CSRF) Medium2025-12-03Exploit-DB RSS Feed phpMyFaq 2.9.8 - Cross Site Request Forgery (CSRF) Exploit #web #csrf #php	Exploit-DB RSS Feed	2025-12-03
Medium	–	openSIS Community Edition 8.0 · SQL Injection Medium2025-12-03Exploit-DB RSS Feed openSIS Community Edition 8.0 - SQL Injection Exploit #web #exploit	Exploit-DB RSS Feed	2025-12-03
Medium	–	PluckCMS 4.7.10 · Unrestricted File Upload Medium2025-12-03Exploit-DB RSS Feed PluckCMS 4.7.10 - Unrestricted File Upload Exploit #web #exploit	Exploit-DB RSS Feed	2025-12-03
Medium	–	RosarioSIS 6.7.2 - Cross-Site Scripting (XSS) Medium2025-12-03Exploit-DB RSS Feed RosarioSIS 6.7.2 - Cross-Site Scripting (XSS) Exploit #ios #web #xss	Exploit-DB RSS Feed	2025-12-03
Medium	–	RosarioSIS 6.7.2 · Cross Site Scripting (XSS) Medium2025-12-03Exploit-DB RSS Feed RosarioSIS 6.7.2 - Cross Site Scripting (XSS) Exploit #ios #web #xss	Exploit-DB RSS Feed	2025-12-03
Medium	–	phpMyAdmin 5.0.0 · SQL Injection Medium2025-12-03Exploit-DB RSS Feed phpMyAdmin 5.0.0 - SQL Injection Exploit #web #php #exploit	Exploit-DB RSS Feed	2025-12-03
Medium	–	OpenRepeater 2.1 · OS Command Injection Medium2025-12-03Exploit-DB RSS Feed OpenRepeater 2.1 - OS Command Injection Exploit #web #exploit	Exploit-DB RSS Feed	2025-12-03
Medium	–	phpIPAM 1.4 - SQL-Injection Medium2025-12-03Exploit-DB RSS Feed phpIPAM 1.4 - SQL-Injection Exploit #web #php #exploit	Exploit-DB RSS Feed	2025-12-03
Medium	–	MobileDetect 2.8.31 - Cross-Site Scripting (XSS) Medium2025-12-03Exploit-DB RSS Feed MobileDetect 2.8.31 - Cross-Site Scripting (XSS) Exploit #web #mobile #xss	Exploit-DB RSS Feed	2025-12-03
Medium	–	phpIPAM 1.6 - Reflected Cross-Site Scripting (XSS) Medium2025-12-02Exploit-DB RSS Feed phpIPAM 1.6 - Reflected Cross-Site Scripting (XSS) Exploit #web #xss #php	Exploit-DB RSS Feed	2025-12-02
Medium	–	phpIPAM 1.6 - Reflected-Cross-Site Scripting (XSS) Medium2025-12-02Exploit-DB RSS Feed phpIPAM 1.6 - Reflected-Cross-Site Scripting (XSS) Exploit #web #xss #php	Exploit-DB RSS Feed	2025-12-02
Medium	–	Piwigo 13.6.0 · SQL Injection Medium2025-12-02Exploit-DB RSS Feed Piwigo 13.6.0 - SQL Injection Exploit #web #exploit	Exploit-DB RSS Feed	2025-12-02
Medium	–	phpIPAM 1.5.1 · SQL Injection Medium2025-12-02Exploit-DB RSS Feed phpIPAM 1.5.1 - SQL Injection Exploit #web #php #exploit	Exploit-DB RSS Feed	2025-12-02
Medium	–	phpMyFAQ 3.1.7 - Reflected Cross-Site Scripting (XSS) Medium2025-12-02Exploit-DB RSS Feed phpMyFAQ 3.1.7 - Reflected Cross-Site Scripting (XSS) Exploit #web #xss #php	Exploit-DB RSS Feed	2025-12-02
Medium	–	YOURLS 1.8.2 - Cross-Site Request Forgery (CSRF) Medium2025-12-02Exploit-DB RSS Feed YOURLS 1.8.2 - Cross-Site Request Forgery (CSRF) Exploit #web #csrf #exploit	Exploit-DB RSS Feed	2025-12-02
Not rated	–	Canon Says Subsidiary Impacted by Oracle EBS Hack 2025-11-25SecurityWeek More than 100 alleged victims of the Oracle EBS campaign have been added to the Cl0p ransomware website. The post Canon Says Subsidiary Impacted by Oracle EBS Hack appeared first on SecurityWeek . Malware #web Germany+5	SecurityWeek	2025-11-25
Not rated	–	Mazda Says No Data Leakage or Operational Impact From Oracle Hack 2025-11-24SecurityWeek The Cl0p ransomware group has listed Mazda and Mazda USA as victims of the Oracle EBS campaign on its leak website. The post Mazda Says No Data Leakage or Operational Impact From Oracle Hack appeared first on SecurityWeek . Threat Actor #web Germany+9	SecurityWeek	2025-11-24
Not rated	–	Syncro + Lovable: RAT delivery via AI-generated websites \| Kaspersky official blog 2025-11-21Kaspersky Security Blog Attackers are building fake websites with Lovable and using these to distribute a trojanized version of the Syncro remote access tool (RAT). Malware #remote #web Germany+9	Kaspersky Security Blog	2025-11-21

Page 14 of 19