Lucene search
+L

383865 matches found

EUVD
EUVD
•added 2026/10/10 2:00 p.m.•14 views

EUVD-2026-96326

Insertion of Sensitive Information Into Sent Data vulnerability in Devin Walker WP Rollback wp-rollback allows Retrieve Embedded Sensitive Data.This issue affects WP Rollback: from n/a through 3.1.2...

5.9CVSS5.7AI score0.00208EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/10 2:00 p.m.•47 views

CVE-2026-66435 WordPress WP Rollback plugin <= 3.1.2 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Devin Walker WP Rollback wp-rollback allows Retrieve Embedded Sensitive Data.This issue affects WP Rollback: from n/a through 3.1.2...

5.9CVSS0.00208EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/10 2:00 p.m.•18 views

CVE-2026-66435

The WP Rollback WordPress plugin (versions 3.1.2 and below ) is vulnerable to an Insertion of Sensitive Information Into Sent Data (CWE-201) vulnerability. This flaw allows an attacker to Retrieve Embedded Sensitive Data . Specific technical details regarding the root cause or affected functions ...

5.9CVSS5.7AI score0.00208EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/10 2:00 p.m.•13 views

EUVD-2026-96323

Deserialization of Untrusted Data vulnerability in Tainacan Community Tainacan tainacan allows Object Injection.This issue affects Tainacan: from n/a through 1.3.0...

7.2CVSS5.7AI score0.003EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/10 2:00 p.m.•48 views

CVE-2026-94676 WordPress Tainacan plugin <= 1.3.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Tainacan Community Tainacan tainacan allows Object Injection.This issue affects Tainacan: from n/a through 1.3.0...

7.2CVSS0.003EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/10 2:00 p.m.•15 views

CVE-2026-94676

The Tainacan Community Tainacan WordPress plugin is vulnerable to PHP Object Injection due to the deserialization of untrusted data . This vulnerability affects versions from n/a through 1.3.0 . An attacker could potentially exploit this to perform unauthorized actions. No specific exploit links ...

7.2CVSS5.7AI score0.003EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/10 2:00 p.m.•50 views

CVE-2026-105885 WordPress Slider by 10Web plugin <= 1.2.62 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in 10Web Slider by 10Web slider-wd allows Object Injection.This issue affects Slider by 10Web: from n/a through 1.2.62...

8.8CVSS0.00288EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/10 2:00 p.m.•9 views

EUVD-2026-96322

Deserialization of Untrusted Data vulnerability in 10Web Slider by 10Web slider-wd allows Object Injection.This issue affects Slider by 10Web: from n/a through 1.2.62...

8.8CVSS5.7AI score0.00288EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/10 2:00 p.m.•16 views

CVE-2026-105885

The Slider by 10Web WordPress plugin (versions

8.8CVSS5.7AI score0.00288EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/10 1:59 p.m.•23 views

BLE-TPMS

CVE-2024-39081 Link: https://vulners.com/cve/CVE-2024-39081 BLE BASED TREEL TPMS for bikes Here, we performed and explained TPMS data manipulation over bluetooth. we can send false alarm to App user over bluetooth. Detailed vulnerability findings and analysis are stored in the repository. File Na...

4.2CVSS5.8AI score0.00467EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/10/10 1:44 p.m.•18 views

CVE-2025-2812

CVE-2025-2812 — SQL Injection Vulnerability in "Bilet Satış Otomasyonu" by Mydata Bilişim Ltd. Şti 📌 CVE-ID: CVE-2025-2812 📢 USOM Announcement: tr-25-0099 🛡️ Vulnerability Type: CWE-89 - SQL Injection Boolean-based Blind 🏢 Affected Product: Bilet Satış Otomasyonu – Mydata Bilişim Ltd. Şti 🌐 Exampl...

9.8CVSS5.9AI score0.00488EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/10/10 1:19 p.m.•22 views

CVE-2023-45657

CVE-2023-45657 Nexter = 2.0.3 - Authenticated Subscriber+ SQL Injection via 'to' and 'from' Description: The Nexter theme for WordPress is vulnerable to SQL Injection via the 'to' and 'from' parameters in versions up to, and including, 2.0.3 due to insufficient escaping on the user supplied...

9.8CVSS8.6AI score0.01284EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/10/10 11:37 a.m.•8 views

CVE-2026-98339

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. This flaw allows a nearby attacker operating a rogue wireless access point to cause a Denial of Service DoS. When an access point changes channels, stale Basic Service Set BSS network entries may fail to be removed if unexpected...

8.8CVSS5.7AI score0.00285EPSS
SaveExploits0References4
osv_mal
osv_mal
•added 2026/10/10 11:11 a.m.•9 views

MAL-2026-17756 Malicious code in pafer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a74b7c5b356a87fe0262954cbedbcc432497ab25edaccbade0ce9ce04b16a8c9 In this campaign, the main package webreader has an embeded pickle disguised as a config. A related dependency pafer contains code to load the pickle. During...

6.2AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/10/10 11:07 a.m.•9 views

MAL-2026-17757 Malicious code in webreader (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 165632b7385ab993b6a8aa74c76ff55cc1ef55748c67b5dfabca284bc8ced087 In this campaign, the main package webreader has an embeded pickle disguised as a config. A related dependency pafer contains code to load the pickle. During...

6.2AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/10 8:25 a.m.•23 views

nowafpls

nowafpls Indice nowafpls Limitazioni documentate dei WAF Installazione di nowafpls Uso di nowafpls Autori Licenza nowafpls La maggior parte dei firewall per applicazioni web WAF ha limitazioni sulla quantità di dati che può elaborare quando viene inviato un corpo della richiesta. Ciò significa ch...

6.2AI score
SaveExploits0References3
NVD
NVD
•added 2026/10/10 8:17 a.m.•14 views

CVE-2026-97396

The Email Marketing for WordPress and WooCommerce – Retainful plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 1.0.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticate...

6.4CVSS0.00201EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/10 8:17 a.m.•14 views

CVE-2026-93945

Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injection.This issue affects Balance: from n/a through 1.12.0...

9.8CVSS0.00331EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/10 8:17 a.m.•12 views

CVE-2026-93941

Deserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injection.This issue affects Edema: from n/a through 1.2.2.2...

9.8CVSS0.00331EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/10 8:17 a.m.•8 views

CVE-2026-93937

Deserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This issue affects Hygia: from n/a through 1.21.0...

9.8CVSS0.00331EPSS
SaveExploits0References1
Rows per page
Query Builder