WordPress StageShow plugin <= 9.8.6 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin StageShow versions = 9.8.6...

AutomationDirect C-More EA9 Programming Software 缓冲区错误漏洞

AutomationDirect C-More EA9 Programming Software is a programming software from AutomationDirect, Inc. AutomationDirect C-More EA9 Programming Software suffers from a buffer error vulnerability that stems from a lack of proper validation of user-supplied data when parsing an EAP9 file, resulting ...

DEBIAN-CVE-2024-12705

Clients using DNS-over-HTTPS DoH can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1...

CERTFR-2022-ALE-007

creationtimestamp| type| source ---|---|--- 2025-01-29 16:45:13+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvg6ct6qk2k...

CERTFR-2022-ALE-004

creationtimestamp| type| source ---|---|--- 2025-01-29 16:42:35+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvfzm5n3c27...

CERTFR-2020-ALE-002

creationtimestamp| type| source ---|---|--- 2025-01-29 16:32:11+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvfgz33rl2a...

GHSA-3XG3-CGVQ-2XWR

creationtimestamp| type| source ---|---|--- 2025-01-29 15:30:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113912358145636993 2025-01-29 19:11:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3382...

GHSA-3PQH-P72C-FJ85

creationtimestamp| type| source ---|---|--- 2025-01-29 10:07:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113911088253196556 2025-01-29 11:18:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3372 2025-01-29 17:11:10+00:00| published-proof-of-concept|...

CVE-2024-57052

An issue in youdiancms v.9.5.20 and before allows a remote attacker to escalate privileges via the sessionID parameter in the index.php file...

Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059153 fixes several issues. The following security issues were fixed: CVE-2024-36971: Fixed dstnegativeadvice race bsc1226324. CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans bsc1233712. CVE-2022-48956: ipv6...

UBUNTU-CVE-2025-24814

Core creation allows users to replace "trusted" configset files with arbitrary configuration Solr instances that 1 use the "FileSystemConfigSetService" component the default in "standalone" or "user-managed" mode, and 2 are running without authentication and authorization are vulnerable to a sort...

WordPress plugin Coming Soon Page, Under Construction & Maintenance Mode by SeedProd 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin Coming Soon Page, Under...

IBM Common Licensing 安全漏洞

IBM Common Licensing is a license management solution from International Business Machines IBM. A security vulnerability exists in IBM Common Licensing version 9.0 that originates from allowing an authenticated user to modify a configuration file that is inaccessible due to a broken authorization...

PT-2025-1553 · Ibm · Ibm Common Licensing

Name of the Vulnerable Software and Affected Versions: IBM Common Licensing version 9.0 Description: The issue is related to the storage of user credentials in plain clear text, which can be read by a local user. This allows an attacker to gain unauthorized access to protected information. The...

CVE-2025-24696 WordPress Gutenberg Blocks and Page Layouts Plugin <= 1.9.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WP Attire Attire Blocks allows Cross Site Request Forgery. This issue affects Attire Blocks: from n/a through 1.9.6...

WordPress Export All Posts, Products, Orders, Refunds & Users Plugin <= 2.9 - Arbitrary File Read vulnerability

Arbitrary File Read vulnerability discovered by l8BL in WordPress Plugin WP Ultimate Exporter versions = 2.9...

WordPress plugin WP Ultimate Exporter 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

CVE-2024-12118

The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Event Calendar Link Widget through the htmltag attribute in all versions up to, and including, 6.9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

PT-2025-3428 · Hortusfox · Hortusfox

Name of the Vulnerable Software and Affected Versions: HortusFox version 3.9 Description: The issue is related to a stored XSS vulnerability in the "Add Plant" function. The name input field does not sanitize or escape user inputs, allowing attackers to inject and execute arbitrary JavaScript...

PT-2025-1271 · Fastify · Fastify-Multipart

Name of the Vulnerable Software and Affected Versions: @fastify/multipart versions prior to 8.3.1 and 9.0.3 Description: The issue is related to the saveRequestFiles function in the @fastify/multipart plugin for Fastify, which fails to delete uploaded temporary files when a user cancels a request...