110 matches found
CVE-2026-2732
creationtimestamp| type| source ---|---|--- 2026-03-04 08:28:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg7uhxfu6k2e...
CVE-2026-2732 Enable Media Replace <= 4.1.7 - Improper Authorization to Authenticated (Author+) Arbitrary Attachment Change via Background Replace
The Enable Media Replace plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the 'RemoveBackGroundViewController::load' function in all versions up to, and including, 4.1.7. This makes it possible for authenticated attackers, with...
MINI-5R48-VH92-2732
Bulletin has no description...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Redhat Enterprise_Linux
PoC exploit for CVE-2020-2732. It is an exploit for the PlayStation 4 on 5.05 firmware. The exploit targets the kernel and allows for arbitrary code execution. The exploit includes autolaunching code for Mira and Vortex's HEN payload. The bug was discovered by qwertyoruiopz. The exploit includes...
CGA-HPW2-2732-Q4VM
Bulletin has no description...
Linux Distros Unpatched Vulnerability : CVE-2020-2732
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some...
CVE-2025-2732 H3C Magic BE18000 HTTP POST Request getWifiNeighbour command injection
A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/wizard/getWifiNeighbour of the component HTTP POST Request Handler. The...
CVE-2025-2732
creationtimestamp| type| source ---|---|--- 2025-03-24 16:19:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114218312897136883 2025-03-25 04:23:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8589 2025-03-25 04:48:25+00:00| seen|...
CVE-2024-2732
The Themify Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'themifypostslider shortcode in all versions up to, and including, 2.0.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
Exploit for CVE-2023-2732
WP-CVE-2023-2732 python 2.7 Buy Coffee : Bitcoin $: 31mtLHq...
Exploit for CVE-2023-2732
WP-CVE-2023-2732 python 2.7 Buy Coffee : Bitcoin $: 31mtLHq...
CVE-2023-2732
creationtimestamp| type| source ---|---|--- 2023-05-26 11:05:13+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8368 2023-05-26 17:58:27+00:00| published-proof-of-concept| https://t.me/dilagrafie/3064 2023-05-31 02:55:15+00:00| published-proof-of-concept|...
CVE-2023-2732
CVE-2023-2732 affects the MStore API plugin for WordPress up to version 3.9.2. The root cause is insufficient verification of the user parameter supplied during the add listing REST API request, enabling an unauthenticated attacker to log in as any existing user on the site (e.g., an administrato...
WordPress MStore API Plugin <= 3.9.2 is vulnerable to Broken Authentication
Software MStore API Type Plugin Vulnerable versions = 3.9.2 Fixed in 3.9.3 OWASP Top 10 A2: Broken Authentication Classification Broken Authentication CVE CVE-2023-2732 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 9a2f0204ce39 Credits Lana Codes Required privilege...
CVE-2022-2732
creationtimestamp| type| source ---|---|--- 2022-08-09 16:24:34+00:00| seen| Telegram/kLw-4fuBivi3Hpds3GinHxcjEn0of5iDYYSi0EP0i4qjm3w...
CVE-2022-2732
Missing Authorization in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2732 Missing Authorization in openemr/openemr
Missing Authorization in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2732
CVE-2022-2732 affects OpenEMR repository openemr/openemr prior to 7.0.0.1 due to Missing Authorization and improper privilege checks. The issue enables unauthorized users to create and edit amendments via interface/patient_file/summary/add_edit_amendments.php, compromising integrity and privacy a...
com.evasion:API (>=1.0.0.1 <=1.0.0.3), com.evasion:CLIENT (>=1.0.0.1 <=1.0.0.3) +104 more potentially affected by CVE-2011-2732 via org.springframework.security:spring-security-core (>=2.0.0 <=2.0.6.RELEASE)
org.springframework.security:spring-security-core MAVEN version =2.0.0, =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0.1, =2.4.7, =2.4.8 and more Source cves: CVE-2011-2732 Source advisory:...
Slackware: Security Advisory (SSA:2020-086-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...