Lucene search
+L

23999 matches found

Github Security Blog
Github Security Blog
•added 2025/05/15 1:01 p.m.•3 views

Malware in helvetia-base-patterns

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2025/05/15 1:01 p.m.•12 views

MAL-2025-3831 Malicious code in helvetia-base-patterns (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3682a1cff47d9425b9d7c8d820704387f078a2f5ee4dadc955da09c859c23579 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2025/05/15 12:00 a.m.•14 views

WordPress plugin Custom Author Base 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

4.3CVSS4.8AI score0.00179EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/05/15 12:00 a.m.•13 views

PT-2025-21509 · WordPress · The Custom Author Base Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: The Custom Author Base WordPress plugin versions 1.1.1 and earlier Description: The issue is related to the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack...

4.3CVSS4.4AI score0.00179EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/15 12:00 a.m.•4 views

CVE-2024-8050: Cross-Site Request Forgery (CSRF)

The Custom Author Base WordPress plugin through 1.1.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

4.3CVSS5.8AI score0.00179EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
•added 2025/05/14 2:53 p.m.•10 views

Important: Red Hat Security Advisory: .NET 9.0 security update

An update for .NET 9.0 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

8CVSS7.3AI score0.01266EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/14 11:09 a.m.•31 views

CVE-2025-32390

EspoCRM is a free, open-source customer relationship management platform. Prior to version 9.0.8, HTML Injection in Knowledge Base KB articles leads to complete page defacement imitating the login page. Authenticated users with the read knowledge article privilege can browse to the KB article and...

8.5CVSS6.8AI score0.00382EPSS
SaveExploits1References1
osv_rhsa
osv_rhsa
•added 2025/05/14 10:06 a.m.•8 views

RHSA-2025:7395 Red Hat Security Advisory: 389-ds-base security update

Bulletin has no description...

4.9CVSS5.5AI score0.00598EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2025/05/14 12:00 a.m.•20 views

Alibaba Cloud Linux 3 : 0125: 389-ds:1.4 (ALINUX3-SA-2024:0125)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0125 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-1062: A heap overflow flaw was found in...

5.5CVSS5.5AI score0.00307EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/05/14 12:00 a.m.•23 views

Alibaba Cloud Linux 3 : 0020: 389-ds:1.4 (ALINUX3-SA-2022:0020)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2022:0020 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-4091: A double-free was found in the way...

7.5CVSS6.8AI score0.02014EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/05/14 12:00 a.m.•20 views

Alibaba Cloud Linux 3 : 0180: 389-ds:1.4 (ALINUX3-SA-2024:0180)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0180 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-5953: A denial of service vulnerability wa...

5.7CVSS6.4AI score0.00578EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/05/14 12:00 a.m.•27 views

Mageia: Security Advisory (MGASA-2025-0156)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4CVSS7.5AI score0.00833EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
•added 2025/05/13 10:11 p.m.•29 views

CVE-2025-4546

A vulnerability was found in 1Panel-dev MaxKB up to 1.10.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Knowledge Base Module. The manipulation leads to csv injection. The attack can be launched remotely. The exploit has been...

8.8CVSS7.7AI score0.00711EPSS
SaveExploits1References1
Microsoft Security Update
Microsoft Security Update
•added 2025/05/13 5:00 p.m.•23 views

2025-05 Dynamic Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems (KB5058379)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

7.2AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2025/05/13 5:00 p.m.•47 views

2025-05 Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5058379)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

7.1AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2025/05/13 5:00 p.m.•123 views

2025-05 Dynamic Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5058379)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

7.2AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2025/05/13 5:00 p.m.•196 views

2025-05 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5058379)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

7.1AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2025/05/13 5:00 p.m.•118 views

2025-05 Cumulative Update for Windows 10 Version 22H2 for ARM64-based Systems (KB5058379)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

7.1AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2025/05/13 5:00 p.m.•33 views

2025-05 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5058379)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

7.1AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2025/05/13 5:00 p.m.•34 views

2025-05 Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems (KB5058379)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

7.1AI score
SaveExploits0
Rows per page
Query Builder