Lucene search
K

975 matches found

NVD
NVD
added 2026/01/14 9:16 a.m.6 views

CVE-2026-23550

Incorrect Privilege Assignment vulnerability in Modular DS Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from n/a through = 2.5.1...

9.8CVSS0.04525EPSS
Exploits6References1
Cvelist
Cvelist
added 2026/01/14 8:44 a.m.29 views

CVE-2026-23550 WordPress Modular DS plugin <= 2.5.1 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Modular DS Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from n/a through = 2.5.1...

9.8CVSS0.04525EPSS
Exploits6References1
Vulnrichment
Vulnrichment
added 2026/01/14 8:44 a.m.5 views

CVE-2026-23550 WordPress Modular DS plugin <= 2.5.1 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Modular DS Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from n/a through = 2.5.1...

9.8CVSS6AI score0.04525EPSS
Exploits6References1
EUVD
EUVD
added 2026/01/14 8:44 a.m.6 views

EUVD-2026-2436

Incorrect Privilege Assignment vulnerability in Modular DS allows Privilege Escalation.This issue affects Modular DS: from n/a through 2.5.1...

10CVSS6.5AI score0.04525EPSS
Exploits6References6
CVE
CVE
added 2026/01/14 8:44 a.m.202 views

CVE-2026-23550

CVE-2026-23550 pertains to the Modular DS WordPress plugin (modular-connector) with versions up to and including 2.5.1, where an incorrect privilege assignment creates a broken access control that can lead to privilege escalation. Public documents confirm unauthenticated admin takeover is possibl...

9.8CVSS6AI score0.04525EPSS
In wildExploits6References1
Patchstack
Patchstack
added 2026/01/14 8:22 a.m.9 views

WordPress Modular DS plugin <= 2.5.1 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Teemu Saarentaus in WordPress Plugin Modular DS versions = 2.5.1...

10CVSS7AI score0.04525EPSS
Exploits6References1Affected Software1
CNNVD
CNNVD
added 2026/01/14 12:0 a.m.6 views

WordPress plugin Modular DS 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

9.8CVSS6.5AI score0.04525EPSS
Exploits6References3
VulnCheck KEV
VulnCheck KEV
added 2026/01/14 12:0 a.m.8 views

VulnCheck KEV: CVE-2026-23550

Incorrect Privilege Assignment vulnerability in Modular DS Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from n/a through = 2.5.1...

10CVSS5.8AI score0.04525EPSS
In wildExploits6References6
Positive Technologies
Positive Technologies
added 2026/01/14 12:0 a.m.6 views

PT-2026-2847

Name of the Vulnerable Software and Affected Versions Modular DS versions through 2.5.1 Description A critical vulnerability exists in the Modular DS WordPress plugin that allows unauthenticated attackers to gain administrative access to affected websites. This flaw, tracked as CVE-2026-23550, is...

9.8CVSS5.9AI score0.04525EPSS
Exploits6References52
GithubExploit
GithubExploit
added 2026/01/13 12:40 a.m.151 views

HikariSystem-Tsurugi

⚔️ TSURUGI v3.0 Offensive Web Security Framework...

7.3AI score
Exploits0
GithubExploit
GithubExploit
added 2026/01/05 8:25 a.m.113 views

vpn_exploitation_tool

AD + Citrix VPN Data Harvester Modular Java tool for testing...

7.2AI score
Exploits0
The Hacker News
The Hacker News
added 2025/12/30 10:46 a.m.5 views

Silver Fox Targets Indian Users With Tax-Themed Emails Delivering ValleyRAT Malware

The threat actor known as Silver Fox has turned its focus to India, using income tax-themed lures in phishing campaigns to distribute a modular remote access trojan called ValleyRAT aka Winos 4.0. "This sophisticated attack leverages a complex kill chain involving DLL hijacking and the modular...

6.5AI score
Exploits0
GithubExploit
GithubExploit
added 2025/12/24 4:40 p.m.143 views

VScanX

VScanX - Ethical Vulnerability Scanner !Versionhttps://img...

7AI score
Exploits0
GithubExploit
GithubExploit
added 2025/12/17 11:18 a.m.119 views

ProbeSuite

text...

6.8AI score
Exploits0
GithubExploit
GithubExploit
added 2025/12/17 10:7 a.m.173 views

Exploit for CVE-2015-1427

Penetration Testing Framework !License: MIThttps://img.sh...

10CVSS8.4AI score0.94469EPSS
Exploits116
Packet Storm News
Packet Storm News
added 2025/12/16 12:0 a.m.9 views

PentestEval: Benchmarking LLM-Based Penetration Testing with Modular and Stage-Level Design

Penetration testing is essential for assessing and strengthening system security against real-world threats, yet traditional workflows remain highly manual, expertise-intensive, and difficult to scale. Although recent advances in Large Language Models LLMs offer promising opportunities for...

6.6AI score
Exploits0
Veracode
Veracode
added 2025/12/13 7:30 a.m.3 views

Insecure Deserialization

Modular is vulnerable to Insecure Deserialization. The vulnerability is due to insecure deserialization when the --experimental-enable-kvcache-agent feature is enabled, allowing attackers to supply crafted serialized data that can be processed by the server and lead to arbitrary code execution...

8.4CVSS6AI score0.00076EPSS
Exploits1References5Affected Software1
Snyk
Snyk
added 2025/12/10 3:13 a.m.1 views

Malicious Package

Overview non-modular-buildable is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
Exploits0References2
Packet Storm News
Packet Storm News
added 2025/12/06 12:0 a.m.4 views

AgenticCyber: A GenAI-Powered Multi-Agent System for Multimodal Threat Detection and Adaptive Response in Cybersecurity

The increasing complexity of cyber threats in distributed environments demands advanced frameworks for real-time detection and response across multimodal data streams. This paper introduces AgenticCyber, a generative AI powered multi-agent system that orchestrates specialized agents to monitor...

6.7AI score
Exploits0
OSV
OSV
added 2025/12/05 9:10 p.m.2 views

MAL-2025-192346 Malicious code in non-modular-buildable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c55595895f1b12b30a16c099606601b1bb2a29cd30ac341a2095d224b33963 The package non-modular-buildable was found to contain malicious code. Source: ghsa-malware...

6.8AI score
Exploits0References1
Rows per page
Query Builder