Lucene search
+L

10629 matches found

Positive Technologies
Positive Technologies
added 2025/10/31 12:00 a.m.9 views

PT-2025-44583

Name of the Vulnerable Software and Affected Versions WordPress User Extra Fields versions up to and including 16.7 Description The WordPress User Extra Fields plugin is susceptible to arbitrary file deletion. This is due to inadequate file path validation within the save fields function...

8.8CVSS7.6AI score0.00655EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2025/10/31 12:00 a.m.11 views

WordPress plugin User Extra Fields 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS7.6AI score0.00655EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/30 9:30 p.m.8 views

EUVD-2025-37192

A path traversal vulnerability was identified in SourceCodester Pet Grooming Management System 1.0, affecting the admin/managewebsite.php component. An authenticated user with administrative privileges can leverage this flaw by submitting a specially crafted POST request, enabling the deletion of...

8.2CVSS6.4AI score0.00484EPSS
SaveExploits1References3
NVD
NVD
added 2025/10/30 7:16 p.m.8 views

CVE-2025-63298

A path traversal vulnerability was identified in SourceCodester Pet Grooming Management System 1.0, affecting the admin/managewebsite.php component. An authenticated user with administrative privileges can leverage this flaw by submitting a specially crafted POST request, enabling the deletion of...

8.2CVSS0.00484EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/10/30 12:00 a.m.8 views

SourceCodester Pet Grooming Management System 安全漏洞

SourceCodester Pet Grooming Management System is a SourceCodester open source pet grooming management system. A security vulnerability exists in SourceCodester Pet Grooming Management System version 1.0, which stems from a path traversal in the admin/managewebsite.php component that could lead to...

8.2CVSS6.8AI score0.00484EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/10/30 12:00 a.m.11 views

PT-2025-44449

Name of the Vulnerable Software and Affected Versions SourceCodester Pet Grooming Management System version 1.0 Description A path traversal flaw exists in the admin/manage website.php component of the software. An authenticated user possessing administrative privileges can exploit this issue by...

8.2CVSS6.7AI score0.00484EPSS
SaveExploits1References6
NVD
NVD
added 2025/10/29 8:15 p.m.20 views

CVE-2025-9871

Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in...

7.8CVSS0.0018EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/29 8:15 p.m.12 views

CVE-2025-9870

Razer Synapse 3 RazerPhilipsHueUninstall Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target...

7.8CVSS6.2AI score0.0018EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/29 8:15 p.m.14 views

CVE-2025-9870

Razer Synapse 3 RazerPhilipsHueUninstall Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target...

7.8CVSS0.0018EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/29 8:15 p.m.14 views

CVE-2025-9869

Razer Synapse 3 Macro Module Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in ord...

7.8CVSS6.2AI score0.0018EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/29 8:15 p.m.18 views

CVE-2025-9869

Razer Synapse 3 Macro Module Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in ord...

7.8CVSS0.0018EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/29 7:34 p.m.19 views

CVE-2025-9870 Razer Synapse 3 RazerPhilipsHueUninstall Link Following Local Privilege Escalation Vulnerability

Razer Synapse 3 RazerPhilipsHueUninstall Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target...

7.8CVSS0.0018EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/29 7:34 p.m.23 views

CVE-2025-9870

CVE-2025-9870 : Local privilege escalation in Razer Synapse 3 via the Philips Hue module installer. The flaw arises from a symbolic link in the Philips Hue installer that allows an attacker with low-privilege code execution to abuse the installer and delete arbitrary files, enabling code executio...

7.8CVSS7.7AI score0.0018EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/29 7:34 p.m.7 views

CVE-2025-9870 Razer Synapse 3 RazerPhilipsHueUninstall Link Following Local Privilege Escalation Vulnerability

Razer Synapse 3 RazerPhilipsHueUninstall Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target...

7.8CVSS7.1AI score0.0018EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2025/10/29 7:34 p.m.23 views

CVE-2025-9870

Razer Synapse 3 RazerPhilipsHueUninstall Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target...

7.8CVSS7.5AI score0.0018EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/29 7:33 p.m.35 views

CVE-2025-9871

CVE-2025-9871 describes a local privilege escalation in Razer Synapse 3 via the Razer Chroma SDK installer. The root cause is a symbolic link abuse in the installer that can be leveraged to delete arbitrary files, enabling an attacker who already has low-privilege code execution to escalate to SY...

7.8CVSS7.7AI score0.0018EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/29 7:33 p.m.8 views

CVE-2025-9871 Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability

Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in...

7.8CVSS7.1AI score0.0018EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/29 7:33 p.m.22 views

CVE-2025-9869 Razer Synapse 3 Macro Module Link Following Local Privilege Escalation Vulnerability

Razer Synapse 3 Macro Module Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in ord...

7.8CVSS0.0018EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/29 7:33 p.m.41 views

CVE-2025-9869

CVE-2025-9869 concerns a local privilege escalation in Razer Synapse 3 Macro Module . The flaw exists in the Razer Synapse Service where an attacker can abuse a created symbolic link to delete arbitrary files. This may allow an attacker to escalate privileges and execute arbitrary code in the con...

7.8CVSS7.7AI score0.0018EPSS
SaveExploits0References1Affected Software1
AlpineLinux
AlpineLinux
added 2025/10/29 7:33 p.m.18 views

CVE-2025-9869

Razer Synapse 3 Macro Module Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in ord...

7.8CVSS7.5AI score0.0018EPSS
SaveExploits0References1
Rows per page
Query Builder