Lucene search
+L

32 matches found

RedhatCVE
RedhatCVE
•added 2026/02/21 7:30 p.m.•16 views

CVE-2025-67995

Deserialization of Untrusted Data vulnerability in LoftOcean PatioTime patiotime allows Object Injection.This issue affects PatioTime: from n/a through 2.1...

9.8CVSS5.5AI score0.00529EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/21 7:30 p.m.•13 views

CVE-2025-67992

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in LoftOcean PatioTime patiotime allows PHP Local File Inclusion.This issue affects PatioTime: from n/a through 2.1...

8.1CVSS5.5AI score0.00532EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/20 4:22 p.m.•11 views

CVE-2025-67995

Deserialization of Untrusted Data vulnerability in LoftOcean PatioTime patiotime allows Object Injection.This issue affects PatioTime: from n/a through 2.1...

9.8CVSS0.00529EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/20 12:00 a.m.•1 views

CVE-2025-67992: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in LoftOcean PatioTime patiotime allows PHP Local File Inclusion.This issue affects PatioTime: from n/a through 2.1...

8.1CVSS5.8AI score0.00532EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/20 12:00 a.m.•12 views

PT-2026-21060

Name of the Vulnerable Software and Affected Versions LoftOcean PatioTime versions prior to 2.1 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion of local...

5.4AI score0.00532EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/20 12:00 a.m.•2 views

CVE-2025-67995: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in LoftOcean PatioTime patiotime allows Object Injection.This issue affects PatioTime: from n/a through 2.1...

9.8CVSS5.8AI score0.00529EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/20 12:00 a.m.•0 views

CVE-2025-67988: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in LoftOcean CozyStay cozystay allows PHP Local File Inclusion.This issue affects CozyStay: from n/a through 1.9.1...

8.1CVSS5.8AI score0.0057EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2025-17672

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.00597EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2025-17673

Malicious code in bioql PyPI...

9.8CVSS9AI score0.00425EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2025-18523

Malicious code in bioql PyPI...

8.1CVSS8AI score0.00582EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-17665

Malicious code in bioql PyPI...

8.1CVSS7.9AI score0.00787EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/06/19 3:20 p.m.•15 views

CVE-2025-49508

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in LoftOcean CozyStay cozystay allows PHP Local File Inclusion.This issue affects CozyStay: from n/a through 1.7.1...

8.1CVSS7.2AI score0.00582EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/17 3:15 p.m.•14 views

CVE-2025-49508

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in LoftOcean CozyStay cozystay allows PHP Local File Inclusion.This issue affects CozyStay: from n/a through 1.7.1...

8.1CVSS0.00582EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/17 3:01 p.m.•26 views

CVE-2025-49508

CVE-2025-49508 is an Unauthenticated Local File Inclusion in CozyStay WordPress Theme prior to version 1.7.1 due to improper control of filenames in Include/Require statements (PHP Remote File Inclusion). Affected: CozyStay

8.1CVSS7.2AI score0.00582EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/17 12:00 a.m.•12 views

PT-2025-25714 · Unknown · Loftocean Cozystay

Name of the Vulnerable Software and Affected Versions: LoftOcean CozyStay affected versions not specified Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File...

8.1CVSS7.9AI score0.00582EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/17 12:00 a.m.•0 views

CVE-2025-49508: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in LoftOcean CozyStay cozystay allows PHP Local File Inclusion.This issue affects CozyStay: from n/a through 1.7.1...

8.1CVSS5.8AI score0.00582EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/12 1:19 p.m.•14 views

CVE-2025-49454

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in LoftOcean TinySalt tinysalt allows PHP Local File Inclusion.This issue affects TinySalt: from n/a through 3.10.0...

8.1CVSS7.2AI score0.00787EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/12 1:19 p.m.•11 views

CVE-2025-49507

Deserialization of Untrusted Data vulnerability in LoftOcean CozyStay cozystay allows Object Injection.This issue affects CozyStay: from n/a through 1.7.1...

9.8CVSS7.2AI score0.00597EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/12 1:19 p.m.•13 views

CVE-2025-49455

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ClickandPledge WordPress-WPJobBoard click-pledge-wpjobboard allows Blind SQL Injection.This issue affects WordPress-WPJobBoard: from n/a through = 25.07010000-WP6.8.1-JB5.11.5...

9.8CVSS7.3AI score0.00425EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/10 1:15 p.m.•22 views

CVE-2025-49507

Deserialization of Untrusted Data vulnerability in LoftOcean CozyStay cozystay allows Object Injection.This issue affects CozyStay: from n/a through 1.7.1...

9.8CVSS0.00597EPSS
SaveExploits0References1
Rows per page
Query Builder