Lucene search
+L

1446 matches found

Positive Technologies
Positive Technologies
•added 2024/10/18 12:00 a.m.•19 views

PT-2024-33381 · Elementor · Dynamic Elementor Addons

Name of the Vulnerable Software and Affected Versions: Dynamic Elementor Addons versions 1.0.0 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP...

8.8CVSS7AI score0.00505EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/10/08 12:00 a.m.•9 views

PT-2025-2805 · Flxeon · Flxeon

Name of the Vulnerable Software and Affected Versions: FLXEON versions 9.3.4 and older Description: Network access can be used to execute arbitrary code with elevated privileges. This issue is related to incorrect handling of file names for PHP functions include or require, which may allow a remo...

10CVSS8.2AI score0.04402EPSS
SaveExploits18References19
ICS
ICS
•added 2024/10/01 6:00 a.m.•43 views

Optigo Networks ONS-S8 - Spectra Aggregation Switch

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Optigo Networks Equipment: ONS-S8 - Spectra Aggregation Switch Vulnerabilities: Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion', Weak...

9.8CVSS10AI score0.00696EPSS
SaveExploits0References10
NVD
NVD
•added 2024/06/10 4:15 p.m.•42 views

CVE-2024-35650

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Melapress MelaPress Login Security melapress-login-security.This issue affects MelaPress Login Security: from n/a through = 1.3.0...

7.2CVSS0.00558EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/06/10 12:00 a.m.•11 views

WordPress plugin MelaPress Login Security security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

7.2CVSS6.8AI score0.00558EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/05/07 12:00 a.m.•13 views

The vulnerability of the link.php script in the Cacti network monitoring software allows a hacker to execute arbitrary code.

The vulnerability of the link.php script in the Cacti network monitoring software is related to improper handling of file names for PHP functions like include or require. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

9CVSS8AI score0.64448EPSS
SaveExploits4References7Affected Software3
Rows per page
Query Builder