Lucene search
K

720 matches found

Wordfence Blog
Wordfence Blog
added 2 days ago7 views

Attackers Actively Exploiting Critical Vulnerability in Everest Forms Pro Plugin

On March 30th, 2026, we publicly disclosed a critical Remote Code Execution vulnerability in Everest Forms Pro, a WordPress plugin with an estimated 4,000 active installations. This vulnerability can be leveraged by unauthenticated attackers to execute arbitrary PHP code on the server, leading to...

9.8CVSS6.7AI score0.00313EPSS
Exploits0
CNNVD
CNNVD
added 2026/05/15 12:0 a.m.5 views

AMD Ryzen 安全漏洞

The AMD Ryzen is a central processing unit CPU developed by American semiconductor company AMD. Several AMD products have security vulnerabilities, which stem from buffer overflow attacks. These vulnerabilities may allow local attackers to write beyond the bounds of the system, resulting in...

6.8CVSS6AI score0.00016EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/26 1:19 p.m.1 views

EUVD-2018-21812

Bome Restorator 1793 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can create a malicious payload exceeding 4000 bytes and paste it into the Name input field to trigger an...

6.9CVSS5.7AI score0.00017EPSS
Exploits0References4
EUVD
EUVD
added 2026/04/26 1:19 p.m.2 views

EUVD-2018-21792

TransMac 12.2 contains a buffer overflow vulnerability in the license key input field that allows local attackers to crash the application by submitting an oversized string. Attackers can generate a payload file containing 4000 bytes of data, paste it into the License Key field, and trigger a...

6.9CVSS5.8AI score0.00006EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2026/04/15 12:40 p.m.143 views

Exploit for Missing Encryption of Sensitive Data in Apache Tomcat

CVE-2026-34486 — Apache Tomcat EncryptInterceptor RCE Apa...

7.5CVSS6AI score0.02218EPSS
Exploits5
Cvelist
Cvelist
added 2026/03/22 12:11 a.m.23 views

CVE-2019-25584 RarmaRadio 2.72.3 Server Field Buffer Overflow Denial of Service

RarmaRadio 2.72.3 contains a buffer overflow vulnerability in the Server field of the Network settings that allows local attackers to crash the application by supplying an excessively long string. Attackers can paste a malicious payload exceeding 4000 bytes into the Server field via the Settings...

6.9CVSS0.0002EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/02/10 12:0 a.m.2 views

AMD Ryzen 安全漏洞

The AMD Ryzen is a central processing unit CPU developed by American semiconductor company AMD. The AMD Ryzen has a security vulnerability caused by insufficient parameter cleaning, which may lead to memory overwriting and the execution of arbitrary code. The following products are affected: AMD...

5.4CVSS6AI score0.00026EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/10 12:0 a.m.3 views

AMD多款产品 安全漏洞

AMD Ryzen and AMD Athlon are both products of American semiconductor company AMD. AMD Ryzen is a type of Central Processing Unit CPU. AMD Athlon is a series of microprocessors. Several AMD products have security vulnerabilities, which stem from improper handling of input parameters and may lead t...

4.8CVSS5.8AI score0.00021EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/27 3:23 p.m.2 views

CVE-2025-59092

An RPC service, which is part of exos 9300, is reachable on port 4000, run by the process FSMobilePhoneInterface.exe. This service is used for interprocess communication between services and the Kaba exos 9300 GUI, containing status information about the Access Managers. Interacting with the...

8.7CVSS6AI score0.00142EPSS
Exploits0References1
NVD
NVD
added 2026/01/26 10:16 a.m.2 views

CVE-2025-59092

An RPC service, which is part of exos 9300, is reachable on port 4000, run by the process FSMobilePhoneInterface.exe. This service is used for interprocess communication between services and the Kaba exos 9300 GUI, containing status information about the Access Managers. Interacting with the...

8.7CVSS0.00142EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/26 10:3 a.m.2 views

CVE-2025-59092

An RPC service, which is part of exos 9300, is reachable on port 4000, run by the process FSMobilePhoneInterface.exe. This service is used for interprocess communication between services and the Kaba exos 9300 GUI, containing status information about the Access Managers. Interacting with the...

8.7CVSS6AI score0.00142EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/26 10:3 a.m.4 views

CVE-2025-59092 Unauthenticated RPC Service in dormakaba Kaba exos 9300

An RPC service, which is part of exos 9300, is reachable on port 4000, run by the process FSMobilePhoneInterface.exe. This service is used for interprocess communication between services and the Kaba exos 9300 GUI, containing status information about the Access Managers. Interacting with the...

8.7CVSS6AI score0.00142EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/26 12:0 a.m.4 views

PT-2026-4742

An RPC service, which is part of exos 9300, is reachable on port 4000, run by the process FSMobilePhoneInterface.exe. This service is used for interprocess communication between services and the Kaba exos 9300 GUI, containing status information about the Access Managers. Interacting with the...

8.7CVSS6AI score0.00142EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.3 views

MiracleLinux 4 : nss-3.19.1-3.AXS4, nss-util-3.19.1-1.AXS4 (AXSA:2015-196:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2015-196:01 advisory. Description: nss Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server...

4.3CVSS7.3AI score0.92346EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.2 views

MiracleLinux 4 : openssl-1.0.1e-30.AXS4.9 (AXSA:2015-149:04)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2015-149:04 advisory. The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which...

4.3CVSS7.3AI score0.92346EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 9:26 a.m.4 views

CVE-2023-4000

The Waiting: One-click countdowns plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.6.2. This is due to missing or incorrect nonce validation on its AJAX actions. This makes it possible for unauthenticated attackers to create and delete countdown...

6.3CVSS6.6AI score0.00079EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-4265

Malware in sbrugna...

7.5CVSS7.6AI score0.00222EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-4263

Malware in sbrugna...

8.1CVSS8.3AI score0.00459EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2017-4261

Malware in sbrugna...

5.3CVSS6.7AI score0.00849EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2019-18883

Malware in sbrugna...

6.3CVSS5.6AI score0.0035EPSS
Exploits0References3
Rows per page
Query Builder