Lucene search
+L

19344 matches found

Packet Storm News
Packet Storm News
•added 2025/05/08 12:00 a.m.•13 views

Large Language Model-Driven Security Assistant for Internet of Things Via Chain-Of-Thought

The rapid development of Internet of Things IoT technology has transformed people's way of life and has a profound impact on both production and daily activities. However, with the rapid advancement of IoT technology, the security of IoT devices has become an unavoidable issue in both research an...

7.2AI score
SaveExploits0
Rockylinux
Rockylinux
•added 2025/05/07 7:11 p.m.•16 views

glibc bug fix update

An update is available for glibc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The glibc packages provide the standard C libraries libc, POSIX thread librarie...

7.3AI score
SaveExploits0
osv_cve
osv_cve
•added 2025/05/07 6:15 p.m.•28 views

CVE-2025-20162

A vulnerability in the DHCP snooping security feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a full interface queue wedge, which could result in a denial of service DoS condition. This vulnerability is due to improper handling of DHCP request packets. An...

8.6CVSS6.7AI score0.00541EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/05/07 6:15 p.m.•20 views

CVE-2025-20137

A vulnerability in the access control list ACL programming of Cisco IOS Software that is running on Cisco Catalyst 1000 Switches and Cisco Catalyst 2960L Switches could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to the use of both an IPv4 ACL a...

4.7CVSS6.6AI score0.00285EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/07 3:16 p.m.•23 views

CVE-2025-47544

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce aco-woo-dynamic-pricing allows Blind SQL Injection.This issue affects Dynamic Pricing With Discount Rules for WooCommerce: from n/a throu...

7.6CVSS0.00479EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/05/07 3:16 p.m.•22 views

CVE-2025-47544

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce allows Blind SQL Injection. This issue affects Dynamic Pricing With Discount Rules for WooCommerce: from n/a through 4.5.8...

7.2CVSS5.8AI score0.00479EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/07 2:20 p.m.•81 views

CVE-2025-47544

CVE-2025-47544 refers to the WordPress plugin Dynamic Pricing With Discount Rules for WooCommerce (aco-woo-dynamic-pricing) with versions up to 4.5.8 affected by an SQL Injection due to improper neutralization of input. The vulnerability enables blind SQL injection. Remediation per PT security gu...

7.6CVSS7.3AI score0.00479EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/05/07 2:20 p.m.•14 views

CVE-2025-47544 WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.8 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce aco-woo-dynamic-pricing allows Blind SQL Injection.This issue affects Dynamic Pricing With Discount Rules for WooCommerce: from n/a throu...

7.6CVSS8.9AI score0.00479EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/07 2:20 p.m.•44 views

CVE-2025-47544 WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.8 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce aco-woo-dynamic-pricing allows Blind SQL Injection.This issue affects Dynamic Pricing With Discount Rules for WooCommerce: from n/a throu...

7.6CVSS0.00479EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/05/07 12:40 p.m.•20 views

WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.8 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by tratt in WordPress Plugin Dynamic Pricing With Discount Rules for WooCommerce versions = 4.5.8...

7.6CVSS8.8AI score0.00479EPSS
SaveExploits0Affected Software1
SUSE CVE
SUSE CVE
•added 2025/05/07 2:19 a.m.•9 views

SUSE CVE-2022-49892

In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix use-after-free for dynamic ftraceops KASAN reported a use-after-free with ftrace ops 1. It was found from vmcore that perf had registered two ops with the same content successively, both dynamic. After unregistering t...

5.5CVSS6.5AI score0.0022EPSS
SaveExploits0References12
CNNVD
CNNVD
•added 2025/05/07 12:00 a.m.•18 views

WordPress plugin for dynamic pricing with discount rules for WooCommerce – SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A SQL injection vulnerability exists in the WordPress...

7.6CVSS8.2AI score0.00479EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/07 12:00 a.m.•17 views

Cisco IOS XE Resource Management Vulnerability

Cisco IOS XE is an operating system from Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A resource management error vulnerability exists in Cisco IOS XE that stems from...

8.6CVSS6.3AI score0.00541EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/07 12:00 a.m.•20 views

PT-2025-20157 · Woocommerce · Acowebs Dynamic Pricing With Discount Rules For Woocommerce

Name of the Vulnerable Software and Affected Versions: acowebs Dynamic Pricing With Discount Rules for WooCommerce versions prior to 4.5.9 Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This...

7.6CVSS8.4AI score0.00479EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•9 views

Ensure That the LD_LIBRARY_PATH Environment Variable Is Correctly Defined

LDLIBRARYPATH is an environmental variable in Linux. When loading a dynamic link library, the program preferentially obtains the library from the path specified by LDLIBRARYPATH. Generally, LDLIBRARYPATH should not be set, because a maliciously set value will make the program link to an incorrect...

6.9AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/05/07 12:00 a.m.•15 views

PT-2025-22226

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug in the Linux kernel has been resolved, which was causing a "BUG: sleeping function called from invalid context" error. The issue was related to the populate dml plane cfg from plan...

6.2CVSS7.8AI score0.00187EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/07 12:00 a.m.•6 views

CVE-2025-47544: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce aco-woo-dynamic-pricing allows Blind SQL Injection.This issue affects Dynamic Pricing With Discount Rules for WooCommerce: from n/a throu...

7.6CVSS5.8AI score0.00479EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/05/06 4:15 p.m.•20 views

CVE-2025-45490

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the password parameter...

9.8CVSS5.8AI score0.01751EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2025/05/06 4:15 p.m.•15 views

CVE-2025-45488

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the mailex parameter...

9.8CVSS5.8AI score0.11671EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2025/05/06 4:15 p.m.•18 views

CVE-2025-45489

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the hostname parameter...

9.8CVSS5.8AI score0.01751EPSS
SaveExploits1References2
Rows per page
Query Builder