Lucene search
+L

12 matches found

Cvelist
Cvelist
•added 2026/06/09 8:29 a.m.•62 views

CVE-2026-8365 Blocksy <= 2.1.41 - Authenticated (Contributor+) PHP Object Injection via Deserialization of Untrusted Data via 'blocksy_meta' REST API Field

The Blocksy theme for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution via the 'blocksymeta' REST API field and the V200 database migration in versions up to and including 2.1.35. This is due to insufficient input sanitization in the blocksysanitizepostmetaoptions...

8.8CVSS0.01599EPSS
SaveExploits0References13
EUVD
EUVD
•added 2026/06/09 8:29 a.m.•28 views

EUVD-2026-35379

The Blocksy theme for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution via the 'blocksymeta' REST API field and the V200 database migration in versions up to and including 2.1.35. This is due to insufficient input sanitization in the blocksysanitizepostmetaoptions...

8.8CVSS5.8AI score0.01599EPSS
SaveExploits0References13
Vulnrichment
Vulnrichment
•added 2026/06/09 8:29 a.m.•23 views

CVE-2026-8365 Blocksy <= 2.1.41 - Authenticated (Contributor+) PHP Object Injection via Deserialization of Untrusted Data via 'blocksy_meta' REST API Field

The Blocksy theme for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution via the 'blocksymeta' REST API field and the V200 database migration in versions up to and including 2.1.35. This is due to insufficient input sanitization in the blocksysanitizepostmetaoptions...

8.8CVSS5.9AI score0.01599EPSS
SaveExploits0References13
CVE
CVE
•added 2026/06/09 8:29 a.m.•92 views

CVE-2026-8365

The Blocksy WordPress theme (up to at least 2.1.41) is vulnerable to PHP Object Injection via the blocksy_meta REST API field and the V200 migration. Root cause: blocksy_sanitize_post_meta_options() only blocks '' and does not prevent serialized PHP objects, combined with SearchReplacer::run_recu...

8.8CVSS5.9AI score0.01599EPSS
SaveExploits0References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•5 views

CVE-2026-8365: Deserialization of Untrusted Data

The Blocksy theme for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution via the 'blocksymeta' REST API field and the V200 database migration in versions up to and including 2.1.35. This is due to insufficient input sanitization in the blocksysanitizepostmetaoptions...

8.8CVSS5.8AI score0.01599EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2017-2530

Malware in sbrugna...

4.6CVSS5.7AI score0.00421EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2019/05/08 12:00 a.m.•15 views

Toshiba GPU288*3S V200 CPU Detection

Binary data 757863.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2019/05/08 12:00 a.m.•11 views

Toshiba GPU230*3S V200 CPU Detection

Binary data 757864.prm...

7.3AI score
SaveExploits0
OSV
OSV
•added 2017/11/17 2:29 p.m.•14 views

CVE-2017-10890

Session management issue in RX-V200 firmware versions prior to 09.87.17.09, RX-V100 firmware versions prior to 03.29.17.09, RX-CLV1-P firmware versions prior to 79.17.17.09, RX-CLV2-B firmware versions prior to 89.07.17.09, RX-CLV3-N firmware versions prior to 91.09.17.10 allows an attacker on th...

4.6CVSS5.9AI score0.00421EPSS
SaveExploits0References1
CVE
CVE
•added 2017/11/17 2:00 p.m.•64 views

CVE-2017-10890

CVE-2017-10890 affects Sharp/Robotic appliance family (RX-V200, RX-V100, RX-CLV1-P, RX-CLV2-B, RX-CLV3-N). A session management vulnerability (CWE-639) allows an attacker on the same LAN to impersonate a user and perform arbitrary operations or access information via unspecified vectors. Impact i...

4.6CVSS4.6AI score0.00421EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/17 12:00 a.m.•5 views

CVE-2017-10890: Session Fixation

Session management issue in RX-V200 firmware versions prior to 09.87.17.09, RX-V100 firmware versions prior to 03.29.17.09, RX-CLV1-P firmware versions prior to 79.17.17.09, RX-CLV2-B firmware versions prior to 89.07.17.09, RX-CLV3-N firmware versions prior to 91.09.17.10 allows an attacker on th...

4.6CVSS5.6AI score0.00421EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/11/17 12:00 a.m.•6 views

PT-2017-11584

Name of the Vulnerable Software and Affected Versions RX-V200 versions prior to 09.87.17.09 RX-V100 versions prior to 03.29.17.09 RX-CLV1-P versions prior to 79.17.17.09 RX-CLV2-B versions prior to 89.07.17.09 RX-CLV3-N versions prior to 91.09.17.10 Description A session management issue allows a...

4.6CVSS0.00421EPSS
SaveExploits0References3
Rows per page
Query Builder