Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2025-11190

CVE-2025-11190

The Kiwire Captive Portal contains an open redirection issue via the login-url parameter, allowing an attacker to redirect users to an attacker controlled website.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Synchroweb
Products
Kiwire
CVE-2025-11189

CVE-2025-11189

The Kiwire Captive Portal contains a reflected cross-site scripting (XSS) vulnerability within the login-url parameter, allowing for Javascript execution.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Synchroweb
Products
Kiwire
CVE-2025-11188

CVE-2025-11188

The Kiwire Captive Portal contains a blind SQL injection in the nas-id parameter, allowing for SQL commands to be issued and to compromise the corresponding database.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Synchroweb
Products
Kiwire