1141 matches found
CVE-2025-48165
Incorrect Privilege Assignment vulnerability in DELUCKS DELUCKS SEO delucks-seo allows Privilege Escalation.This issue affects DELUCKS SEO: from n/a through = 2.6.0...
CVE-2025-53560
Deserialization of Untrusted Data vulnerability in rascals Noisa noisa allows Object Injection.This issue affects Noisa: from n/a through = 2.6.0...
Mupen64Plus 安全漏洞
Mupen64Plus is an open source console emulator from Mupen64Plus. A security vulnerability exists in Mupen64Plus version 2.6.0, which stems from an array overflow in the writerdramregs function that could lead to the execution of arbitrary commands...
PT-2025-34465 · Unknown · Audiobookshelf
Name of the Vulnerable Software and Affected Versions: Audiobookshelf versions 2.6.0 through 2.26.3 Description: Audiobookshelf is an open-source self-hosted audiobook server. The application does not properly restrict redirect callback URLs during OIDC authentication. An attacker can craft a log...
CVE-2025-53560
Deserialization of Untrusted Data vulnerability in rascals Noisa noisa allows Object Injection.This issue affects Noisa: from n/a through = 2.6.0...
CVE-2025-53561
Path Traversal: '.../...//' vulnerability in miniOrange Prevent files / folders access prevent-file-access allows Path Traversal.This issue affects Prevent files / folders access: from n/a through = 2.6.0...
CVE-2025-48165
Incorrect Privilege Assignment vulnerability in DELUCKS DELUCKS SEO delucks-seo allows Privilege Escalation.This issue affects DELUCKS SEO: from n/a through = 2.6.0...
CVE-2025-48165 WordPress DELUCKS SEO Plugin <= 2.6.0 - Privilege Escalation Vulnerability
Incorrect Privilege Assignment vulnerability in DELUCKS DELUCKS SEO delucks-seo allows Privilege Escalation.This issue affects DELUCKS SEO: from n/a through = 2.6.0...
CVE-2025-48165
CVE-2025-48165 concerns an "Incorrect Privilege Assignment" vulnerability in the WordPress plugin DELUCKS SEO (versions up to 2.6.0). Public sources consistently describe privilege escalation via misassigned privileges within the DELUCKS SEO plugin, affecting WordPress sites using the plugin thro...
CVE-2025-53560 WordPress Noisa theme <= 2.6.0 - PHP Object Injection Vulnerability
Deserialization of Untrusted Data vulnerability in rascals Noisa noisa allows Object Injection.This issue affects Noisa: from n/a through = 2.6.0...
CVE-2025-53560
CVE-2025-53560 affects WordPress Noisa theme versions up to 2.6.0, where deserialization of untrusted data enables PHP object injection. Patchstack indicates the fix is in 2.6.2; upgrading to Noisa 2.6.2+ is the recommended remediation. If upgrading is not possible, avoid deserializing untrusted ...
CVE-2025-53561
CVE-2025-53561: Path traversal vulnerability in WordPress plugin Prevent files / folders access (
PT-2025-33981 · Unknown · Rascals Noisa
Name of the Vulnerable Software and Affected Versions: rascals Noisa versions through 2.6.0 Description: A deserialization of untrusted data issue in rascals Noisa allows object injection. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
Linux Distros Unpatched Vulnerability : CVE-2025-32803
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In some cases, Kea log files or lease files may be world-readable. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through...
CVE-2025-53278 WordPress WP AdCenter plugin <= 2.6.0 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPeka WP AdCenter allows Stored XSS. This issue affects WP AdCenter: from n/a through 2.6.0...
CVE-2025-53278
CVE-2025-53278 affects the WordPress plugin WP AdCenter (formerly WPeka WP AdCenter), with an XSS vulnerability introduced by improper input neutralization in web page generation. Affected versions are up to 2.6.0. The issue is a stored Cross-Site Scripting flaw that could allow malicious payload...
DEBIAN-CVE-2025-32803
In some cases, Kea log files or lease files may be world-readable. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8...
DEBIAN-CVE-2025-32802
Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions...
UBUNTU-CVE-2025-32801
Kea configuration and API directives can be used to load a malicious hook library. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through...