Lucene search
+L

3124 matches found

NVD
NVD
added 2026/03/05 6:16 a.m.15 views

CVE-2026-28105

Deserialization of Untrusted Data vulnerability in ThemeREX Good Energy goodenergy allows Object Injection.This issue affects Good Energy: from n/a through = 1.7.7...

9.8CVSS0.00375EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/05 5:54 a.m.4 views

CVE-2026-28105

Deserialization of Untrusted Data vulnerability in ThemeREX Good Energy goodenergy allows Object Injection.This issue affects Good Energy: from n/a through = 1.7.7...

5.9AI score0.00375EPSS
SaveExploits0References2
CVE
CVE
added 2026/03/05 5:54 a.m.13 views

CVE-2026-28105

CVE-2026-28105 describes a deserialization of untrusted data vulnerability in the WordPress theme Good Energy (ThemeREX Good Energy) affecting version ranges from n/a up to and including 1.7.7. The underlying issue is PHP Object Injection via deserialization, enabling an attacker to inject object...

9.8CVSS5.9AI score0.00375EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/05 5:54 a.m.34 views

CVE-2026-28105 WordPress Good Energy theme <= 1.7.7 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Good Energy goodenergy allows Object Injection.This issue affects Good Energy: from n/a through = 1.7.7...

9.8CVSS0.00375EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/05 5:54 a.m.5 views

CVE-2026-28105 WordPress Good Energy theme <= 1.7.7 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Good Energy goodenergy allows Object Injection.This issue affects Good Energy: from n/a through = 1.7.7...

5.9AI score0.00375EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/05 5:53 a.m.9 views

CVE-2026-27335

CVE-2026-27335 concerns the Ekoterra WordPress theme (AncoraThemes Ekoterra, NonProfit, Green Energy & Ecology Theme) with versions through 1.0.0. Public records describe an improper control of filenames for Include/Require in PHP, effectively a Local File Inclusion (LFI) vulnerability. Reported ...

8.1CVSS5.9AI score0.00403EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/05 1:57 a.m.8 views

CVE-2025-69969

A lack of authentication and authorization mechanisms in the Bluetooth Low Energy BLE communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers to reverse engineer the protocol and execute arbitrary commands on the device without establishing a connection. This is...

9.6CVSS6.2AI score0.00461EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/03/05 12:0 a.m.13 views

WordPress plugin Good Energy 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

9.8CVSS5.8AI score0.00375EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/05 12:0 a.m.12 views

PT-2026-23434

I have been running an ESP32-S3 BLE mesh network at home for about 3 months now. Six nodes tracking temperature, humidity and air quality. Using esp-idf 5.2 with deep sleep at 30 second intervals. Getting around 7.5 months battery life per node which is better than I expected. The key was...

5.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/05 12:0 a.m.7 views

PT-2026-23229

Name of the Vulnerable Software and Affected Versions AncoraThemes Ekoterra - NonProfit, Green Energy & Ecology Theme versions through 1.0.0 Description The software contains a flaw related to improper control of filename handling for include/require statements, specifically a PHP Local File...

5.8AI score0.00403EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/03/05 12:0 a.m.16 views

PT-2026-23380

Deserialization of Untrusted Data vulnerability in ThemeREX Good Energy goodenergy allows Object Injection.This issue affects Good Energy: from n/a through = 1.7.7...

5.9AI score0.00375EPSS
SaveExploits0References2
OSV
OSV
added 2026/03/04 5:16 p.m.4 views

CVE-2025-69969

A lack of authentication and authorization mechanisms in the Bluetooth Low Energy BLE communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers to reverse engineer the protocol and execute arbitrary commands on the device without establishing a connection. This is...

9.6CVSS6.1AI score0.00461EPSS
SaveExploits1References2
NVD
NVD
added 2026/03/04 5:16 p.m.15 views

CVE-2025-69969

A lack of authentication and authorization mechanisms in the Bluetooth Low Energy BLE communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers to reverse engineer the protocol and execute arbitrary commands on the device without establishing a connection. This is...

9.6CVSS0.00461EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/03/04 12:0 a.m.7 views

EUVD-2025-208281

A lack of authentication and authorization mechanisms in the Bluetooth Low Energy BLE communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers to reverse engineer the protocol and execute arbitrary commands on the device without establishing a connection. This is...

9.6CVSS6.2AI score0.00461EPSS
SaveExploits1References2
CVE
CVE
added 2026/03/04 12:0 a.m.22 views

CVE-2025-69969

The CVE concerns SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2, where a lack of authentication and authorization in the BLE protocol enables an attacker within BLE proximity to reverse engineer the protocol and execute arbitrary commands on the device without a connection. The issue also permit...

9.6CVSS6.2AI score0.00461EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/04 12:0 a.m.9 views

PT-2026-22940

A lack of authentication and authorization mechanisms in the Bluetooth Low Energy BLE communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers to reverse engineer the protocol and execute arbitrary commands on the device without establishing a connection. This is...

9.6CVSS6.2AI score0.00461EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/03/04 12:0 a.m.5 views

CVE-2025-69969

A lack of authentication and authorization mechanisms in the Bluetooth Low Energy BLE communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers to reverse engineer the protocol and execute arbitrary commands on the device without establishing a connection. This is...

9.6CVSS6.2AI score0.00461EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2026/03/04 12:0 a.m.7 views

CVE-2025-69969

A lack of authentication and authorization mechanisms in the Bluetooth Low Energy BLE communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers to reverse engineer the protocol and execute arbitrary commands on the device without establishing a connection. This is...

6.2AI score0.00461EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/03/04 12:0 a.m.34 views

CVE-2025-69969

A lack of authentication and authorization mechanisms in the Bluetooth Low Energy BLE communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers to reverse engineer the protocol and execute arbitrary commands on the device without establishing a connection. This is...

0.00461EPSS
SaveExploits1References2
Wired Threat Level
Wired Threat Level
added 2026/03/02 4:3 p.m.6 views

War in Iran Spiked Oil Prices. Trump Will Decide How High They Go

The conflict in the Middle East is driving oil prices up in a midterm year when Americans are already focused on high energy bills...

5.9AI score
SaveExploits0
Rows per page
Query Builder