Lucene search
+L

1985 matches found

Information Security Automation
Information Security Automation
•added 2026/01/24 10:32 a.m.•17 views

Our PR team awarded me the “The Best Positive Speaker 2025” metal pin for public speaking, articles, and media commentary

Our PR team awarded me the “The Best Positive Speaker 2025” metal pin for public speaking, articles, and media commentary. Huge thanks to my colleagues for this! I’m very pleased. 😇 The collection is growing. 😉 This time, the pin is styled like the Friends sitcom logo. It’s made of metal, coated...

5.5AI score
SaveExploits0
NVD
NVD
•added 2026/01/23 3:16 p.m.•21 views

CVE-2026-24626

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LogicHunt Logo Slider logo-slider-wp allows Stored XSS.This issue affects Logo Slider: from n/a through = 5.1.1...

5.9CVSS0.00169EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/23 2:29 p.m.•6 views

CVE-2026-24626

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LogicHunt Logo Slider logo-slider-wp allows Stored XSS.This issue affects Logo Slider: from n/a through = 4.9.0...

5.9CVSS5.9AI score0.00169EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/23 2:29 p.m.•37 views

CVE-2026-24626

CVE-2026-24626 is a Stored XSS vulnerability in the WordPress plugin Logo Slider (logo-slider-wp) , affecting versions up to and including 4.9.0. The issue is caused by improper neutralization of user-supplied input during web page generation, enabling stored cross-site scripting via the logo-sli...

5.9CVSS5.8AI score0.00169EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/23 2:29 p.m.•7 views

CVE-2026-24626 WordPress Logo Slider plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LogicHunt Logo Slider logo-slider-wp allows Stored XSS.This issue affects Logo Slider: from n/a through = 5.1.1...

5.9CVSS5.8AI score0.00169EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/23 2:29 p.m.•37 views

CVE-2026-24626 WordPress Logo Slider plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LogicHunt Logo Slider logo-slider-wp allows Stored XSS.This issue affects Logo Slider: from n/a through = 5.1.1...

5.9CVSS0.00169EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/23 12:26 a.m.•14 views

CVE-2025-69828

File Upload vulnerability in TMS Global Software TMS Management Console v.6.3.7.27386.20250818 allows a remote attacker to execute arbitrary code via the Logo upload in /Customer/AddEdit...

10CVSS6.1AI score0.00553EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/23 12:00 a.m.•17 views

WordPress plugin Logo Slider has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. There is a...

5.9CVSS5.7AI score0.00169EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/23 12:00 a.m.•0 views

CVE-2026-24626: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LogicHunt Logo Slider logo-slider-wp allows Stored XSS.This issue affects Logo Slider: from n/a through = 5.1.1...

5.9CVSS5.8AI score0.00169EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/23 12:00 a.m.•26 views

PT-2026-4457

Name of the Vulnerable Software and Affected Versions LogicHunt Logo Slider versions through 4.9.0 Description The software contains a flaw related to improper input handling during web page creation, specifically a Stored Cross-site Scripting issue. This allows for the injection of malicious...

5.9CVSS5.3AI score0.00169EPSS
SaveExploits0References4
NVD
NVD
•added 2026/01/22 5:16 p.m.•20 views

CVE-2025-69828

File Upload vulnerability in TMS Global Software TMS Management Console v.6.3.7.27386.20250818 allows a remote attacker to execute arbitrary code via the Logo upload in /Customer/AddEdit...

10CVSS0.00553EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/22 12:00 a.m.•36 views

CVE-2025-69828

TMS Global Software TMS Management Console version 6.3.7.27386.20250818 is vulnerable to a File Upload vulnerability. A remote attacker can execute arbitrary code by uploading a malicious file through the Logo upload functionality located at the /Customer/AddEdit API endpoint. This is caused by t...

10CVSS6.6AI score0.00553EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/22 12:00 a.m.•24 views

PT-2026-4142

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in highwarden Super Logos Showcase superlogoshowcase-wp allows Reflected XSS.This issue affects Super Logos Showcase: from n/a through = 2.8...

5.4AI score0.00214EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/22 12:00 a.m.•35 views

PT-2026-3956

Name of the Vulnerable Software and Affected Versions TMS Global Software TMS Management Console version 6.3.7.27386.20250818 Description A file upload issue exists in TMS Global Software TMS Management Console version 6.3.7.27386.20250818. A remote attacker can potentially execute arbitrary code...

10CVSS5.9AI score0.00553EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/01/22 12:00 a.m.•6 views

CVE-2025-69828

File Upload vulnerability in TMS Global Software TMS Management Console v.6.3.7.27386.20250818 allows a remote attacker to execute arbitrary code via the Logo upload in /Customer/AddEdit...

6.1AI score0.00553EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/22 12:00 a.m.•1 views

CVE-2025-69828: Unrestricted Upload of File with Dangerous Type

File Upload vulnerability in TMS Global Software TMS Management Console v.6.3.7.27386.20250818 allows a remote attacker to execute arbitrary code via the Logo upload in /Customer/AddEdit...

10CVSS6.6AI score0.00553EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/22 12:00 a.m.•4 views

CVE-2025-69828

File Upload vulnerability in TMS Global Software TMS Management Console v.6.3.7.27386.20250818 allows a remote attacker to execute arbitrary code via the Logo upload in /Customer/AddEdit...

10CVSS6AI score0.00553EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/01/22 12:00 a.m.•20 views

TMS Management Console security vulnerabilities

TMS Management Console is a management console software developed by the American company TMS. Version 6.3.7.27386.20250818 of TMS Management Console contains a security vulnerability. This vulnerability stems from the Logo upload function in the /Customer/AddEdit section, which has a file upload...

10CVSS6.1AI score0.00553EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/01/22 12:00 a.m.•29 views

CVE-2025-69828

File Upload vulnerability in TMS Global Software TMS Management Console v.6.3.7.27386.20250818 allows a remote attacker to execute arbitrary code via the Logo upload in /Customer/AddEdit...

0.00553EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/21 9:25 a.m.•16 views

CVE-2025-41084

Stored Cross-Site Scripting XSS vulnerability in Sesame web application, due to the fact that uploaded SVG images are not properly sanitized. This allows attackers to embed malicious scripts in SVG files by sending a POST request using the 'logo' parameter in '/api/v3/companies//logo', which are...

5.1CVSS5.5AI score0.00352EPSS
SaveExploits0References1
Rows per page
Query Builder