2122 matches found
PT-2025-44944
The Simple User Capabilities plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wp ajax nopriv reset capability' AJAX endpoint in all versions up to, and including, 1.0. This makes it possible for unauthenticated attackers to reset an...
CVE-2025-12158: Missing Authorization
The Simple User Capabilities plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the sucsubmitcapabilities function in all versions up to, and including, 1.0. This makes it possible for unauthenticated attackers to elevate the role of any user account t...
WordPress plugin Simple User Capabilities 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
CVE-2025-9544
The Doppler Forms WordPress plugin (versions through 2.5.1 ) is vulnerable to unauthorized plugin installation due to an insecure AJAX action named install_extension. The root cause is a failure to verify user capabilities or utilize a nonce , allowing any authenticated user—including those with ...
WordPress plugin Doppler Forms 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
SUSE-SU-2025:20888-1 Security update for kernel-livepatch-MICRO-6-0_Update_9
This update for kernel-livepatch-MICRO-6-0Update9 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayedfree bsc1246075 - CVE-2025-38396: fs: export anoninodemakesecureinode and fix secretmem LSM bypass bsc1247158 - CVE-2025-38471: kernel: tls: always refresh the queue wh...
Security update for kernel-livepatch-MICRO-6-0-RT_Update_6
This update for kernel-livepatch-MICRO-6-0-RTUpdate6 fixes the following issues: CVE-2025-38206: exfat: fix double free in delayedfree bsc1246075 CVE-2025-38396: fs: export anoninodemakesecureinode and fix secretmem LSM bypass bsc1247158 CVE-2025-38471: kernel: tls: always refresh the queue when...
Fast, Broad, and Elusive: How Vidar Stealer 2.0 Upgrades Infostealer Capabilities
Trend Research examines the latest version of the Vidar stealer, which features a full rewrite in C, a multithreaded architecture, and several enhancements that warrant attention. Its timely evolution suggests that Vidar is positioning itself to occupy the space left after Lumma Stealer’s decline...
The vulnerability of the tf.keras.layers.Embedding interface in the TensorFlow machine learning system allows attackers to compromise the integrity and accessibility of the protected information.
The vulnerability of the tf.keras.layers.Embedding layer in the TensorFlow machine learning system is related to the presence of undeclared capabilities during the processing of the inputdim argument. Exploiting this vulnerability could allow attackers to compromise the integrity and accessibilit...
The vulnerabilities of the node-api, node-bindings, and duckdb-wasm packages of the DuckDB relational database management system allow attackers to gain unauthorized access to protected information.
The vulnerability of the node-api, node-bindings, and duckdb-wasm packages in the DuckDB database management system is related to the presence of undeclared capabilities. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...
EUVD-2020-24896
Malware in sbrugna...
EUVD-2019-6203
Malware in sbrugna...
EUVD-2021-19578
Malware in sbrugna...
EUVD-2000-0503
Malware in sbrugna...
EUVD-2019-5608
Malware in sbrugna...
EUVD-2019-2201
Malware in sbrugna...
EUVD-2016-7661
Malware in sbrugna...
EUVD-2018-1897
Malware in sbrugna...