Lucene search
+L

32888 matches found

NVD
NVD
added 2025/04/10 8:15 a.m.28 views

CVE-2025-32206

Unrestricted Upload of File with Dangerous Type vulnerability in LABCAT Processing Projects processing-projects allows Upload a Web Shell to a Web Server.This issue affects Processing Projects: from n/a through = 1.0.2...

9.1CVSS0.00574EPSS
SaveExploits1References1
NVD
NVD
added 2025/04/10 8:15 a.m.42 views

CVE-2025-32202

Unrestricted Upload of File with Dangerous Type vulnerability in Brian Batt - elearningfreak.com Insert or Embed Articulate Content into WordPress insert-or-embed-articulate-content-into-wordpress allows Upload a Web Shell to a Web Server.This issue affects Insert or Embed Articulate Content into...

9.1CVSS0.00415EPSS
SaveExploits1References1
NVD
NVD
added 2025/04/10 8:15 a.m.41 views

CVE-2025-32140

Unrestricted Upload of File with Dangerous Type vulnerability in Nirmal Kumar Ram WP Remote Thumbnail wp-remote-thumbnail allows Upload a Web Shell to a Web Server.This issue affects WP Remote Thumbnail: from n/a through = 1.3.2...

9.9CVSS0.00519EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/04/10 8:09 a.m.13 views

CVE-2025-32206 WordPress Processing Projects Plugin <= 1.0.2 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in LABCAT Processing Projects allows Upload a Web Shell to a Web Server. This issue affects Processing Projects: from n/a through 1.0.2...

9.1CVSS9.1AI score0.00574EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/04/10 8:09 a.m.46 views

CVE-2025-32202 WordPress Insert or Embed Articulate Content into WordPress plugin <= 4.3000000025 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Brian Batt - elearningfreak.com Insert or Embed Articulate Content into WordPress insert-or-embed-articulate-content-into-wordpress allows Upload a Web Shell to a Web Server.This issue affects Insert or Embed Articulate Content into...

9.1CVSS0.00415EPSS
SaveExploits1References1
CVE
CVE
added 2025/04/10 8:09 a.m.69 views

CVE-2025-32202

CVE-2025-32202 corresponds to a WordPress plugin vulnerability in Insert or Embed Articulate Content into WordPress (

9.1CVSS7.2AI score0.00415EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/04/10 8:09 a.m.8 views

CVE-2025-32202 WordPress Insert or Embed Articulate Content into WordPress plugin <= 4.3000000025 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Brian Batt - elearningfreak.com Insert or Embed Articulate Content into WordPress allows Upload a Web Shell to a Web Server. This issue affects Insert or Embed Articulate Content into WordPress: from n/a through 4.3000000025...

9.1CVSS9.2AI score0.00415EPSS
SaveExploits1References1
CVE
CVE
added 2025/04/10 8:09 a.m.87 views

CVE-2025-32140

CVE-2025-32140 affects the WordPress plugin WP Remote Thumbnail. Multiple sources confirm a vulnerability in versions up to 1.3.1 (with Patchstack citing 1.3.2 as affected) where an attacker with at least contributor privileges can abuse an unsanitized remote_thumb URL to upload arbitrary files, ...

9.9CVSS7.2AI score0.00519EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/04/10 8:09 a.m.15 views

CVE-2025-32140 WordPress WP Remote Thumbnail Plugin <= 1.3.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Nirmal Kumar Ram WP Remote Thumbnail allows Upload a Web Shell to a Web Server. This issue affects WP Remote Thumbnail: from n/a through 1.3.1...

9.9CVSS6.9AI score0.00519EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/04/10 12:00 a.m.15 views

PT-2025-15941 · Unknown · Labcat Processing Projects

Name of the Vulnerable Software and Affected Versions: LABCAT Processing Projects versions 1.0.0 through 1.0.2 Description: The issue allows an attacker to upload a web shell to a web server, potentially leading to unauthorized access and control. This is due to an unrestricted upload of files wi...

9.1CVSS9.2AI score0.00574EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2025/04/10 12:00 a.m.14 views

MongoDB Shell < 2.3.9 Control Character Injection (MONGOSH-2024, MONGOSH-2025, MONGOSH-2026)

The version of MongoDB Shell installed on the remote host is prior to 2.3.9. It is, therefore, affected by a vulnerability as referenced in the MONGOSH-2024, MONGOSH-2025, MONGOSH-2026 advisories. - The MongoDB Shell may be susceptible to control character injection where an attacker with control...

8.8CVSS6AI score0.003EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/04/10 12:00 a.m.24 views

MongoDB Shell < 2.3.0 Control Character Injection (MONGOSH-2028)

The version of MongoDB Shell installed on the remote host is prior to 2.3.0. It is, therefore, affected by a vulnerability as referenced in the MONGOSH-2028 advisory. - mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a...

7.8CVSS5.5AI score0.00144EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/04/10 12:00 a.m.14 views

WordPress plugin Processing Projects 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in WordPress...

9.1CVSS8.7AI score0.00574EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/04/10 12:00 a.m.15 views

WordPress plugin WP Remote Thumbnail 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

9.9CVSS8.7AI score0.00519EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/04/10 12:00 a.m.14 views

PT-2025-15982 · Maxkb · Maxkb

Name of the Vulnerable Software and Affected Versions: MaxKB versions prior to 1.10.4-lts Description: A reverse shell vulnerability exists in the module of the function library, allowing privileged users to create a reverse shell. This issue is related to the function library module...

7.2CVSS7AI score0.0027EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2025/04/10 12:00 a.m.14 views

PT-2025-15939 · WordPress · Insert/Embed Articulate Content

Name of the Vulnerable Software and Affected Versions: Insert or Embed Articulate Content into WordPress versions 4.3000000025 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, enabling an attacker to upload a web shell to a web server. This can ...

9.1CVSS9.1AI score0.00415EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/04/10 12:00 a.m.11 views

MaxKB 代码注入漏洞

MaxKB is a 1Panel-dev open source open source knowledge base question and answer system based on a large language model and RAG. MaxKB suffers from a code injection vulnerability that stems from a reverse shell vulnerability in the function library module that allows a privileged user to create a...

7.2CVSS7.4AI score0.0027EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:00 a.m.12 views

The vulnerability of the Shell command shell in Windows operating systems, allowing a hacker to execute arbitrary code

The vulnerability of the Shell command shell in Windows operating systems relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00779EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/04/10 12:00 a.m.9 views

WordPress plugin Insert or Embed Articulate Content into WordPress 代码问题漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A code issue vulnerability exists in the WordPress plugin Insert or...

9.1CVSS8.7AI score0.00415EPSS
SaveExploits1References1
NVD
NVD
added 2025/04/09 5:15 p.m.12 views

CVE-2025-32576

Cross-Site Request Forgery CSRF vulnerability in Agence web Eoxia - Montpellier WP shop wpshop allows Upload a Web Shell to a Web Server.This issue affects WP shop: from n/a through = 2.6.1...

9.6CVSS0.00248EPSS
SaveExploits0References1
Rows per page
Query Builder