Lucene search
+L

2035 matches found

Positive Technologies
Positive Technologies
•added 2025/10/20 12:00 a.m.•38 views

PT-2025-42828

Name of the Vulnerable Software and Affected Versions Zyxel ATP series versions V4.32 through V5.40 Zyxel USG FLEX series versions V4.50 through V5.40 Zyxel USG FLEX 50W series versions V4.16 through V5.40 Zyxel USG20W-VPN series versions V4.16 through V5.40 Description A missing authorization fl...

8.5CVSS7.8AI score0.0546EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
•added 2025/10/20 12:00 a.m.•4 views

PT-2025-51489

Уязвимость микропрограммного обеспечения сетевых устройств Zyxel ATP, USG FLEX и USG FLEX 50W/USG20W-VPN связана с отсутствием авторизации. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, оказать воздействие на конфиденциальность и целостность защищаемой информации...

8.5CVSS5.8AI score
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
•added 2025/10/17 12:00 a.m.•82 views

VulnCheck KEV: CVE-2022-0342

An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware...

9.8CVSS8.1AI score0.95134EPSS
SaveIn wildExploits0References7
NVD
NVD
•added 2025/10/15 9:15 a.m.•89 views

CVE-2025-10041

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in thesaveqrcodetodb function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected...

9.8CVSS0.0092EPSS
SaveExploits3References4
Cvelist
Cvelist
•added 2025/10/15 8:25 a.m.•64 views

CVE-2025-10041 Flex QR Code Generator <= 1.2.5 - Unauthenticated Arbitrary File Upload

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in thesaveqrcodetodb function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected...

9.8CVSS0.0092EPSS
SaveExploits3References4
EUVD
EUVD
•added 2025/10/15 8:25 a.m.•56 views

EUVD-2025-34561

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in thesaveqrcodetodb function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected...

9.8CVSS6.3AI score0.0092EPSS
SaveExploits3References4
Vulnrichment
Vulnrichment
•added 2025/10/15 8:25 a.m.•9 views

CVE-2025-10041 Flex QR Code Generator <= 1.2.5 - Unauthenticated Arbitrary File Upload

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in thesaveqrcodetodb function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected...

9.8CVSS6.3AI score0.0092EPSS
SaveExploits3References3
CVE
CVE
•added 2025/10/15 8:25 a.m.•63 views

CVE-2025-10041

The CVE-2025-10041 entry concerns the Flex QR Code Generator WordPress plugin. Affected versions include all up to and including 1.2.5, where missing file type validation in the save_qr_code_to_db() function allows unauthenticated arbitrary file uploads, potentially enabling remote code execution...

9.8CVSS6.3AI score0.0092EPSS
SaveExploits3References4
GithubExploit
GithubExploit
•added 2025/10/15 7:51 a.m.•262 views

Exploit for CVE-2025-10041

CVE-2025-10041 Flex QR Code Generator = 1.2.5 - Unauthenti...

6.2AI score0.0092EPSS
SaveExploits3
Patchstack
Patchstack
•added 2025/10/15 12:27 a.m.•20 views

WordPress Flex QR Code Generator plugin <= 1.2.5 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by johska in WordPress Plugin Flex QR Code Generator versions = 1.2.5...

9.8CVSS5.9AI score0.0092EPSS
SaveExploits3References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/10/15 12:00 a.m.•3 views

PT-2025-42278

Name of the Vulnerable Software and Affected Versions Flex QR Code Generator versions through 1.2.5 Description The Flex QR Code Generator plugin for WordPress is susceptible to arbitrary file uploads. This is due to a lack of file type validation within the save qr code to db function. This allo...

9.8CVSS6.1AI score0.0092EPSS
SaveExploits3References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/15 12:00 a.m.•3 views

CVE-2025-10041: Unrestricted Upload of File with Dangerous Type

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in thesaveqrcodetodb function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected...

9.8CVSS6.3AI score0.0092EPSS
SaveExploits3References1
HPE Security Bulletins
HPE Security Bulletins
•added 2025/10/13 12:00 a.m.•25 views

HPESBHF04954 rev.2 - HPE Compute Scale-up Server 3200 Platform, HPE Superdome Flex and HPE Superdome Flex 280 servers, Security Bypass Vulnerability

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Compute Scale-up Server 3200 - Prior to v1.65.60 HPE Superdome Flex 280 Server - Prior to v2.05.12 HPE Superdome Flex Server - Prior to v4.15.08 CVSS Scores: | CVE | CVSS...

8.2CVSS7.5AI score0.00426EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2025/10/10 12:00 a.m.•14 views

The vulnerability of the microprogramming software for ZyXEL USG FLEX H devices arises from the improper assignment of permissions to critical resources, allowing attackers to enhance their privileges.

The vulnerability of the microprogrammed network device ZyXEL USG FLEX H is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS8.1AI score0.00943EPSS
SaveExploits2References3Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2013-2747

Malware in sbrugna...

9.3CVSS6.4AI score0.04345EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2008-2635

Malware in sbrugna...

4.3CVSS6.4AI score0.02774EPSS
SaveExploits3References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2009-1874

Malware in sbrugna...

2.6CVSS6.3AI score0.08253EPSS
SaveExploits3References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2010-4762

Malware in sbrugna...

7.5CVSS6.4AI score0.01151EPSS
SaveExploits2References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2013-5264

Malware in sbrugna...

6.8CVSS6.4AI score0.01306EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2013-3961

Malware in sbrugna...

4.3CVSS6.4AI score0.00947EPSS
SaveExploits0References3
Rows per page
Query Builder