Lucene search
+L

150 matches found

Positive Technologies
Positive Technologies
added 2026/04/13 12:0 a.m.12 views

PT-2026-32385

Missing Authorization vulnerability allows Exposure of Sensitive Information via configuration endpoint. This issue affects Pandora FMS: from 777 through 800...

8.4CVSS5.8AI score0.00269EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/13 12:0 a.m.7 views

PT-2026-32388

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via custom fields. This issue affects Pandora FMS: from 777 through 800...

8.7CVSS5.9AI score0.00249EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/04/13 12:0 a.m.8 views

Pandora FMS 安全漏洞

Pandora FMS is a monitoring system developed by the American company Pandora FMS. This system provides visual monitoring of networks, servers, virtual infrastructure, and applications. Versions 777 to 800 of Pandora FMS have security vulnerabilities, which stem from improper handling of special...

8.8CVSS5.8AI score0.00938EPSS
SaveExploits0References1
OSV
OSV
added 2026/03/20 9:5 a.m.18 views

BIT-CEPH-2025-52555 CephFS Permission Escalation Vulnerability in Ceph Fuse mounted FS

Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 through 19.2.2, an unprivileged user can escalate to root privileges in a ceph-fuse mounted CephFS by chmod 777 a directory owned by root to gain access. The result of this is tha...

6.5CVSS5.9AI score0.0017EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/03/18 6:31 p.m.11 views

EUVD-2026-12831

When a plugin is installed using the Arturia Software Center MacOS, it also installs an uninstall.sh bash script in a root owned path. This script is written to disk with the file permissions 777, meaning it is writable by any user. When uninstalling a plugin via the Arturia Software Center the...

8.2CVSS5.9AI score0.00127EPSS
SaveExploits1References2
NVD
NVD
added 2026/03/18 4:16 p.m.9 views

CVE-2026-24063

When a plugin is installed using the Arturia Software Center MacOS, it also installs an uninstall.sh bash script in a root owned path. This script is written to disk with the file permissions 777, meaning it is writable by any user. When uninstalling a plugin via the Arturia Software Center the...

8.2CVSS0.00127EPSS
SaveExploits1References1
CVE
CVE
added 2026/03/18 3:33 p.m.11 views

CVE-2026-24063

The CVE concerns Arturia Software Center on macOS. A plugin install creates an uninstall.sh script in a root-owned path with 777 permissions, writable by any user. During plugin uninstall, the Privileged Helper is instructed to execute this script. If an attacker manipulates the script, this can ...

8.2CVSS5.9AI score0.00127EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2026/02/17 12:55 a.m.23 views

ceph: privilege escalation by unprivileged users in a ceph-fuse mounted CephFS

A vulnerability in Ceph was discovered whereby an unprivileged user could change the permissions of a directory owned by the root user, gaining access to the targeted directory. The non-privileged user can escalate privileges to root in a CephFS mounted with ceph-fuse by applying chmod 777 read,...

6.5CVSS5.9AI score0.0017EPSS
SaveExploits0References6
OSV
OSV
added 2025/12/18 8:15 a.m.6 views

CVE-2025-58708

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes 777 triple-seven allows PHP Local File Inclusion.This issue affects 777: from n/a through = 1.3...

8.1CVSS5.8AI score0.00431EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/18 7:21 a.m.14 views

CVE-2025-58708

The CVE-2025-58708 entry concerns a Local File Inclusion flaw in the WordPress theme axiomthemes 777 triple-seven (versions up to and including 1.3). The underlying issue is improper control of filenames used in PHP include/require statements, enabling LFI. Impact is documented as PHP Local File ...

8.1CVSS6.7AI score0.00431EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.6 views

WordPress plugin 777 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

8.1CVSS6.6AI score0.00431EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/03 3:59 p.m.6 views

Malicious code in elf-stats-magical-sleigh-777 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f73e5e3034697e77965b67b4588a8e173d9c37347df921cf4e0c4085a993249a The package elf-stats-magical-sleigh-777 was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/12/03 3:59 p.m.2 views

MAL-2025-192079 Malicious code in elf-stats-magical-sleigh-777 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f73e5e3034697e77965b67b4588a8e173d9c37347df921cf4e0c4085a993249a The package elf-stats-magical-sleigh-777 was found to contain malicious code...

6.8AI score
SaveExploits0
Mageia
Mageia
added 2025/09/01 6:20 p.m.7 views

Updated ceph packages fix vulnerability

Security regression CVE-2025-52555 that would have allowed an user to read, write and execute to any directory owned by root as long as they chmod 777 it...

6.5CVSS7.3AI score0.0017EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/08/30 10:56 p.m.7 views

WordPress 777 theme <= 1.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme 777 versions = 1.3...

8.1CVSS7AI score0.00431EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2025/07/18 2:48 p.m.4 views

OESA-2025-1838 ceph security update

Ceph is a massively scalable, open-source, distributed storage system that runs on commodity hardware and delivers object, block and file system storage. Security Fixes: Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 through...

6.5CVSS7.5AI score0.0017EPSS
SaveExploits0References2
NVD
NVD
added 2025/06/26 9:15 p.m.7 views

CVE-2025-52555

Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 through 19.2.2, an unprivileged user can escalate to root privileges in a ceph-fuse mounted CephFS by chmod 777 a directory owned by root to gain access. The result of this is tha...

6.5CVSS0.0017EPSS
SaveExploits0References3
OSV
OSV
added 2025/06/26 9:15 p.m.2 views

DEBIAN-CVE-2025-52555

Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 through 19.2.2, an unprivileged user can escalate to root privileges in a ceph-fuse mounted CephFS by chmod 777 a directory owned by root to gain access. The result of this is tha...

6.5CVSS5.4AI score0.0017EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/26 9:15 p.m.7 views

AZL-64386 CVE-2025-52555 affecting package ceph for versions less than 18.2.2-9

Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 through 19.2.2, an unprivileged user can escalate to root privileges in a ceph-fuse mounted CephFS by chmod 777 a directory owned by root to gain access. The result of this is tha...

6.5CVSS5.8AI score0.0017EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/26 9:15 p.m.8 views

UBUNTU-CVE-2025-52555

Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 through 19.2.2, an unprivileged user can escalate to root privileges in a ceph-fuse mounted CephFS by chmod 777 a directory owned by root to gain access. The result of this is tha...

6.5CVSS5.8AI score0.0017EPSS
SaveExploits0References4
Rows per page
Query Builder