Lucene search
+L

11265 matches found

Packet Storm News
Packet Storm News
•added 2025/12/20 12:00 a.m.•13 views

Cyber Threat Detection Enabled by Quantum Computing

Threat detection models in cybersecurity must keep up with shifting traffic, strict feature budgets, and noisy hardware, yet even strong classical systems still miss rare or borderline attacks when the data distribution drifts. Small, near-term quantum processors are now available, but existing...

6.8AI score
SaveExploits0
EUVD
EUVD
•added 2025/12/19 4:20 p.m.•13 views

EUVD-2025-204552

Malicious code in spamsms npm...

6.6AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/12/19 12:00 a.m.•12 views

The vulnerability of the Spam Quarantine function in the Cisco AsyncOS operating system, within the tools of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, allows a malicious user to execute arbitrary code with root privileges.

The vulnerability of the Spam Quarantine function in the Cisco AsyncOS operating system, as well as in products like Cisco Secure Email and Web Manager, and Cisco Secure Email Gateway, is related to deficiencies in the mechanism for verifying input data. Exploiting this vulnerability could allow ...

10CVSS6.5AI score0.32392EPSS
SaveExploits2References2Affected Software1
The Hacker News
The Hacker News
•added 2025/12/18 4:10 a.m.•16 views

Cisco Warns of Active Attacks Exploiting Unpatched 0-Day in AsyncOS Email Security Appliances

Cisco has alerted users to a maximum-severity zero-day flaw in Cisco AsyncOS software that has been actively exploited by a China-nexus advanced persistent threat APT actor codenamed UAT-9686 in attacks targeting Cisco Secure Email Gateway and Cisco Secure Email and Web Manager. The networking...

10CVSS7.1AI score0.32392EPSS
SaveExploits2
NCSC
NCSC
•added 2025/12/17 7:47 p.m.•23 views

Vulnerability in Cisco AsyncOS

Cisco has a vulnerability in Cisco AsyncOS. The vulnerability is in devices using Cisco AsyncOS software in conjunction with Cisco Secure Email Gateway and Cisco Secure Email and Web Manager. Exploitation requires the service to be accessible from the Internet and the Spam Quarantine feature to b...

10CVSS6.6AI score0.32392EPSS
SaveExploits2References1
OSV
OSV
•added 2025/12/17 5:15 p.m.•14 views

CVE-2025-20393

A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execute arbitrary system commands on an affected device with root privileges. This vulnerability is due...

10CVSS6.1AI score0.32392EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2025/12/17 4:47 p.m.•10 views

CVE-2025-20393

A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execute arbitrary system commands on an affected device with root privileges. This vulnerability is due...

10CVSS6.2AI score0.32392EPSS
SaveIn wildExploits2References2Affected Software2
VulnCheck KEV
VulnCheck KEV
•added 2025/12/17 12:00 a.m.•10 views

VulnCheck KEV: CVE-2025-20393

Cisco Secure Email Gateway, Secure Email, AsyncOS Software, and Web Manager appliances contains an improper input validation vulnerability that allows threat actors to execute arbitrary commands with root privileges on the underlying operating system of an affected appliance...

10CVSS8.7AI score0.32392EPSS
SaveIn wildExploits2References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/17 12:00 a.m.•2 views

CVE-2025-20393: Improper Input Validation

A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execute arbitrary system commands on an affected device with root privileges. This vulnerability is due...

10CVSS6.4AI score0.32392EPSS
SaveExploits2References2
Veracode
Veracode
•added 2025/12/13 6:38 a.m.•24 views

SQL Injection

WordPress Zero Spam plugin is vulnerable to SQL Injection. The vulnerability is due to insufficient sanitization and escaping of the order and orderby parameters before they are used in SQL queries in the admin dashboard, allowing attackers to inject malicious SQL statements and manipulate databa...

9.8CVSS8.1AI score0.02028EPSS
SaveExploits2References5Affected Software1
RedhatCVE
RedhatCVE
•added 2025/12/10 3:13 p.m.•11 views

CVE-2025-62735

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Joel User Spam Remover user-spam-remover allows Retrieve Embedded Sensitive Data.This issue affects User Spam Remover: from n/a through = 1.1...

5.3CVSS6.9AI score0.00285EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/09 6:30 p.m.•11 views

EUVD-2025-202025

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Joel User Spam Remover user-spam-remover allows Retrieve Embedded Sensitive Data.This issue affects User Spam Remover: from n/a through = 1.1...

6.4AI score0.00285EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/09 4:18 p.m.•11 views

CVE-2025-62735

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Joel User Spam Remover user-spam-remover allows Retrieve Embedded Sensitive Data.This issue affects User Spam Remover: from n/a through = 1.1...

5.3CVSS0.00285EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/09 2:52 p.m.•7 views

CVE-2025-62735 WordPress User Spam Remover plugin <= 1.1 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Joel User Spam Remover user-spam-remover allows Retrieve Embedded Sensitive Data.This issue affects User Spam Remover: from n/a through = 1.1...

5.3CVSS5.8AI score0.00285EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/09 2:52 p.m.•34 views

CVE-2025-62735 WordPress User Spam Remover plugin <= 1.1 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Joel User Spam Remover user-spam-remover allows Retrieve Embedded Sensitive Data.This issue affects User Spam Remover: from n/a through = 1.1...

5.3CVSS0.00285EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/09 2:52 p.m.•22 views

CVE-2025-62735

CVE-2025-62735 describes an exposure of embedded sensitive data in the WordPress plugin User Spam Remover (versions up to and including 1.1). The initial description notes an unauthenticated disclosure of embedded sensitive information; Wordfence’s vulnerability details tag it as Unauthenticated ...

5.3CVSS5.8AI score0.00285EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/09 12:00 a.m.•11 views

PT-2025-50004

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Joel User Spam Remover user-spam-remover allows Retrieve Embedded Sensitive Data.This issue affects User Spam Remover: from n/a through = 1.1...

6.9AI score0.00285EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/09 12:00 a.m.•10 views

WordPress plugin User Spam Remover 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.3AI score0.00285EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•0 views

CVE-2025-62735: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Joel User Spam Remover user-spam-remover allows Retrieve Embedded Sensitive Data.This issue affects User Spam Remover: from n/a through = 1.1...

5.3CVSS5.8AI score0.00285EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/05 6:07 a.m.•53 views

CVE-2025-12374

CVE-2025-12374 (User Verification by PickPlugins) affects WordPress plugin User Verification (versions ≤ 2.0.39). Root cause: authentication bypass due to improper validation of OTP generation in user_verification_form_wrap_process_otpLogin, allowing unauthenticated logins with a verified email (...

9.8CVSS5.7AI score0.00497EPSS
SaveExploits0References3
Rows per page
Query Builder