CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

438 matches found

Nuclei•added 2026/10/30 2:04 a.m.•66 views

GP Premium <= 2.4.0 - Cross-Site Scripting

The GP Premium plugin for WordPress up to 2.4.0 is vulnerable to reflected XSS via the 'message' parameter in inc/verify.php lines 95-101, where a message passed with slactivation=false is URL-decoded and used unsanitized in addsettingserror, allowing XSS payloads to be reflected in admin notices...

6.1CVSS5.8AI score0.00637EPSS

SaveExploits0References2

Kitploit•added 2026/10/29 5:57 p.m.•30 views

CVE-2024-0710

CVE-2024-0710 Vulnerability: CVE-2024-0710 Unauthenticated Form Submission Unique ID Modification CVSS: 5.3 Medium Software: GP Unique ID gp-unique-id Affected versions: = 1.5.5 Patched version: 1.5.6 Developer: Gravity Wiz Researcher: Karl Emil Nikka, Nikka Systems Publicly published: 2024-04-10...

5.3CVSS5.9AI score0.0103EPSS

SaveExploits0

Positive Technologies•added 2026/10/21 12:00 a.m.•6 views

PT-2026-120610

WarehousePG WHPG 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability CWE-862 in gp add coordinator standby. The function is named gp add master standby in WHPG 6, and WHPG 7 keeps that name as an alias. Unlike the other segment add and remove...

2.3CVSS5.8AI score0.00216EPSS

SaveExploits0References2

Positive Technologies•added 2026/10/21 12:00 a.m.•9 views

PT-2026-120609

WarehousePG WHPG 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability CWE-862 in the built-in cluster expansion functions gp expand lock catalog and gp expand bump version. Any authenticated database role can run them, and neither checks privileges. ...

7.1CVSS5.9AI score0.00216EPSS

SaveExploits0References2

Positive Technologies•added 2026/10/21 12:00 a.m.•8 views

PT-2026-120608

WarehousePG WHPG 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability CWE-862 in the built-in function gp log backend memory contexts. Any authenticated database role can run this function without a GRANT. It also gets around the superuser restriction that PostgreSQL places on...

5.3CVSS5.9AI score0.00216EPSS

SaveExploits0References2

Packet Storm News•added 2026/10/19 12:00 a.m.•16 views

Mal-AAEGAN: Adversarial Autoencoder with Double-Critic WGAN-GP for Malware Generation

Machine-learning ML malware detectors are known to be vulnerable to adversarial samples. Generative adversarial networks GANs such as MalGAN, Mal-LSGAN, and our previous Mal-D2GAN can craft adversarial malware to probe and harden these detectors, yet they operate directly on a high-dimensional,...

6AI score

SaveExploits0

Packet Storm News•added 2026/09/16 12:00 a.m.•19 views

A GAN-Based Framework for Robust DDoS Attack Detection

The availability and consistency of online services remain vulnerable due to Distributed Denial of Service DDoS attacks. These attacks are evolving by adopting more complex strategies to evade traditional network security systems. Despite the effectiveness of machine learning models in detecting...

5.8AI score

SaveExploits0

Github Security Blog•added 2026/09/13 4:58 a.m.•2 views

Malicious code in gp-actions (npm)

Source: ossf-package-analysis 0af07f18bec84cba6878dd345ea1281728e0257d285118a40d835d7c9a2985a6 The OpenSSF Package Analysis project identified 'gp-actions' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. --...

5.9AI score