Lucene search
+L

13992 matches found

Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•20 views

PT-2025-53085

Name of the Vulnerable Software and Affected Versions Essekia Tablesome versions through 1.1.35.1 Description An issue exists in Essekia Tablesome that allows the retrieval of embedded sensitive data due to insertion of sensitive information into sent data. Recommendations Update Essekia Tablesom...

7.5CVSS6.4AI score0.00212EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•23 views

PT-2025-53293

Name of the Vulnerable Software and Affected Versions PostX versions through 5.0.3 Description A flaw exists in WPXPO PostX ultimate-post that allows the retrieval of embedded sensitive data, leading to exposure of sensitive system information to an unauthorized control sphere. Recommendations...

7.5CVSS6.3AI score0.00234EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•7 views

CVE-2025-67621: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in 10up Eight Day Week Print Workflow eight-day-week-print-workflow allows Retrieve Embedded Sensitive Data.This issue affects Eight Day Week Print Workflow: from n/a through = 1.2.5...

4.3CVSS5.9AI score0.00255EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/24 12:00 a.m.•17 views

WordPress plugin PostX 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS6.3AI score0.00234EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•10 views

CVE-2025-68576: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Virusdie Virusdie virusdie allows Retrieve Embedded Sensitive Data.This issue affects Virusdie: from n/a through = 1.1.6...

4.3CVSS5.8AI score0.00255EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•24 views

PT-2025-53239

Name of the Vulnerable Software and Affected Versions 10up Eight Day Week Print Workflow versions through 1.2.5 Description The Eight Day Week Print Workflow software contains a flaw that allows unauthorized retrieval of embedded sensitive data, leading to exposure of sensitive system information...

7.5CVSS6.5AI score0.00255EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•14 views

CVE-2025-68606: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPXPO PostX ultimate-post allows Retrieve Embedded Sensitive Data.This issue affects PostX: from n/a through = 5.0.3...

5.3CVSS5.8AI score0.00234EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•11 views

CVE-2025-68494: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Retrieve Embedded Sensitive Data.This issue affects Premium Addons for Elementor: from n/a through = 4.11.53...

5.3CVSS5.9AI score0.00338EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•9 views

CVE-2025-68516: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in Essekia Tablesome tablesome allows Retrieve Embedded Sensitive Data.This issue affects Tablesome: from n/a through = 1.1.35.1...

5CVSS5.8AI score0.00212EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/12/23 12:30 a.m.•20 views

EUVD-2023-60241

MyBB 1.8.32 contains a chained vulnerability that allows authenticated administrators to bypass avatar upload restrictions and execute arbitrary code. Attackers can modify upload path settings, upload a malicious PHP-embedded image file, and execute commands through the language configuration...

8.8CVSS6.5AI score0.00818EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/23 12:00 a.m.•5 views

CVE-2025-68551: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vikas Ratudi VPSUForm v-form allows Retrieve Embedded Sensitive Data.This issue affects VPSUForm: from n/a through = 3.2.24...

6.5CVSS5.8AI score0.0026EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/23 12:00 a.m.•15 views

FreyrSCADA Embedded Solution IEC 60870-5-104 Protocol 缓冲区错误漏洞

FreyrSCADA Embedded Solution IEC 60870-5-104 Protocol is a server emulator from FreyrSCADA Embedded Solution, Inc. A buffer error vulnerability exists in FreyrSCADA Embedded Solution IEC 60870-5-104 Protocol version v21.06.008, which stems from improper handling of a specific message sequence and...

7.5CVSS6.9AI score0.00395EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/12/22 10:16 p.m.•20 views

CVE-2023-53979

MyBB 1.8.32 contains a chained vulnerability that allows authenticated administrators to bypass avatar upload restrictions and execute arbitrary code. Attackers can modify upload path settings, upload a malicious PHP-embedded image file, and execute commands through the language configuration...

8.6CVSS7.6AI score0.01558EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/22 10:16 p.m.•16 views

CVE-2023-53979

MyBB 1.8.32 contains a chained vulnerability that allows authenticated administrators to bypass avatar upload restrictions and execute arbitrary code. Attackers can modify upload path settings, upload a malicious PHP-embedded image file, and execute commands through the language configuration...

8.8CVSS0.00818EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/12/22 9:35 p.m.•60 views

CVE-2023-53979 MyBB 1.8.32 Authenticated Remote Code Execution via Chained Vulnerabilities

MyBB 1.8.32 contains a chained vulnerability that allows authenticated administrators to bypass avatar upload restrictions and execute arbitrary code. Attackers can modify upload path settings, upload a malicious PHP-embedded image file, and execute commands through the language configuration...

8.8CVSS0.00818EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/12/22 9:35 p.m.•13 views

CVE-2023-53979 MyBB 1.8.32 Authenticated Remote Code Execution via Chained Vulnerabilities

MyBB 1.8.32 contains a chained vulnerability that allows authenticated administrators to bypass avatar upload restrictions and execute arbitrary code. Attackers can modify upload path settings, upload a malicious PHP-embedded image file, and execute commands through the language configuration...

8.8CVSS6.5AI score0.00818EPSS
SaveExploits1References4
CVE
CVE
•added 2025/12/22 9:35 p.m.•35 views

CVE-2023-53979

Summary of the vulnerability (CVE-2023-53979) : MyBB 1.8.32 contains a chained vulnerability that authenticated administrators can exploit to bypass avatar upload restrictions and achieve remote code execution. The attack leverages the ability to modify upload path settings, upload a PHP-embedded...

8.8CVSS6.5AI score0.00818EPSS
SaveExploits1References5Affected Software1
RedhatCVE
RedhatCVE
•added 2025/12/22 9:31 p.m.•25 views

CVE-2025-62955

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HappyDevs TempTool Show Current Template Info current-template-name allows Retrieve Embedded Sensitive Data.This issue affects TempTool Show Current Template Info: from n/a through = 1.3.1...

4.3CVSS5.9AI score0.0021EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/22 12:00 a.m.•8 views

CVE-2023-53979: Improper Limitation of a Pathname to a Restricted Directory

MyBB 1.8.32 contains a chained vulnerability that allows authenticated administrators to bypass avatar upload restrictions and execute arbitrary code. Attackers can modify upload path settings, upload a malicious PHP-embedded image file, and execute commands through the language configuration...

8.8CVSS6.5AI score0.00818EPSS
SaveExploits1References1
Fedora
Fedora
•added 2025/12/21 3:53 a.m.•12 views

[SECURITY] Fedora 43 Update: cef-143.0.10^chromium143.0.7499.146-1.fc43

CEF is an embeddable build of Chromium, powered by WebKit Blink...

8.8CVSS6.8AI score0.03245EPSS
SaveExploits0
Rows per page
Query Builder