40107 matches found
WordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by stealthcopter in WordPress Plugin Essential Addons for Elementor versions = 6.1.9...
Top 10 for LLM & Gen AI Project Ranked by OWASP
Trend Micro has become a Gold sponsor of the OWASP Top 10 for LLM and Gen AI Project, merging cybersecurity expertise with OWASP's collaborative efforts to address emerging AI security risks. This partnership underscores Trend Micro's unwavering commitment to advancing AI security, ensuring a...
📄 Rollback Rx Professional 12.8.0.0 NULL Pointer Dereference
Rollback Rx Professional version 12.8.0.0 suffers from a null pointer dereference in shieldm.sys. Title: Rollback Rx Professional 12.8.0.0 - "shieldm.sys" Null Pointer Dereference Author: Can Burak Dönmez Date: 14.04.2025 Vendor: https://horizondatasys.com Affected Version: 12.8.0.0 Tested: Win10...
CVE-2025-32103
CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows directory traversal via the /WebInterface/function/ URI to read files accessible by SMB at UNC share pathnames, bypassing SecurityManager restrictions...
CVE-2025-3567
creationtimestamp| type| source ---|---|--- 2025-04-14 13:55:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11615 2025-04-14 17:10:45+00:00| seen| https://t.me/cvedetector/22846...
📄 RemotePC Remote Code Execution
RemotePC suffers from an unauthenticated remote code execution vulnerability. The release for this on github offers no version information. Exploit Title: RemotePC - Unauthenticated RCE Date: 2025-04-14 Exploit Author: Ahmet Ümit BAYRAM Vendor: https://github.com/akoc95/RemotePC Version: latest...
CVE-2023-42875
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in arbitrary code execution. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages...
WordPress Clearfy Cache plugin <= 2.3.2 - Cross-Site Request Forgery to Plugin Settings Update via 'setup-wbcr_clearfy' vulnerability
Cross-Site Request Forgery to Plugin Settings Update via 'setup-wbcrclearfy' vulnerability discovered by Whit Taylor in WordPress Plugin Clearfy Cache versions = 2.3.2...
WordPress Photo Gallery by 10Web plugin <= 1.8.34 Reflected Cross-Site Scripting via 'image_id' Parameter vulnerability
WordPress Photo Gallery by 10Web plugin = 1.8.34 Reflected Cross-Site Scripting via 'imageid' Parameter vulnerability discovered by Ivan Kuzymchak in WordPress Plugin Photo Gallery by 10Web versions = 1.8.34...
CVE-2023-42970
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, Safari 17. Processing web content may lead to arbitrary code execution...
CVE-2023-42970
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, Safari 17. Processing web content may lead to arbitrary code execution...
CVE-2023-42875
Processing web content may lead to arbitrary code execution. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, Safari 17. The issue was addressed with improved memory handling...
KB5055547: Windows 10 LTS 1507 Security Update (April 2025)
The remote Windows host is missing security update 5055547. It is, therefore, affected by multiple vulnerabilities - Stack-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network. CVE-2025-27481 - Use after free in Windows LDAP - Lightweig...
CVE-2025-29369
creationtimestamp| type| source ---|---|--- 2025-04-10 20:49:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11340...
CVE-2025-27078
A vulnerability in a system binary of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to inject commands into the underlying operating system while using the CLI. Successful exploitation could lead to complete system compromise...
CVE-2025-27084
A vulnerability in the Captive Portal of an AOS-10 GW and AOS-8 Controller/Mobility Conductor could allow a remote attacker to conduct a reflected cross-site scripting XSS attack. Successful exploitation could enable the attacker to execute arbitrary script code in the victim's browser within the...
CVE-2025-27079
A vulnerability in the file creation process on the command line interface of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to perform remote code execution RCE. Successful exploitation could allow an attacker to execute arbitrary operating system commands on the...
CVE-2024-51944
creationtimestamp| type| source ---|---|--- 2025-04-10 19:49:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11329...