Lucene search
+L

9591 matches found

NVD
NVD
added 2025/08/20 8:15 a.m.11 views

CVE-2025-49426

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Dahz Kitring kitring allows PHP Local File Inclusion.This issue affects Kitring: from n/a through = 2.8...

8.1CVSS0.00535EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/20 8:15 a.m.15 views

CVE-2025-49428

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dourou Cookie Warning allows Stored XSS. This issue affects Cookie Warning: from n/a through 1.3...

7.5CVSS0.00352EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/20 8:03 a.m.38 views

CVE-2025-49428

CVE-2025-49428 (Cookie Warning) affects WordPress Cookie Warning plugin

7.5CVSS5.2AI score0.00352EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/20 8:03 a.m.19 views

CVE-2025-49426

CVE-2025-49426 affects the WordPress theme Kitring (

8.1CVSS5.9AI score0.00535EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/20 8:03 a.m.8 views

CVE-2025-49426 WordPress Kitring Theme <= 2.8 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Dahz Kitring kitring allows PHP Local File Inclusion.This issue affects Kitring: from n/a through = 2.8...

8.1CVSS5.3AI score0.00535EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/20 8:03 a.m.5 views

CVE-2025-49428 WordPress Spirit Framework plugin <= 1.2.13 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Dourou Spirit Framework spirit-framework allows PHP Local File Inclusion.This issue affects Spirit Framework: from n/a through = 1.2.13...

7.5CVSS5.3AI score0.00352EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/20 8:03 a.m.36 views

CVE-2025-49426 WordPress Kitring Theme <= 2.8 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Dahz Kitring kitring allows PHP Local File Inclusion.This issue affects Kitring: from n/a through = 2.8...

8.1CVSS0.00535EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/20 8:03 a.m.20 views

CVE-2025-49428 WordPress Cookie Warning plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dourou Cookie Warning allows Stored XSS. This issue affects Cookie Warning: from n/a through 1.3...

7.5CVSS0.00352EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/20 12:00 a.m.11 views

PT-2025-33952 · Unknown · Dourou Cookie Warning

Name of the Vulnerable Software and Affected Versions: Dourou Cookie Warning versions not specified through 1.3 Description: A Cross-Site Request Forgery CSRF issue exists in Dourou Cookie Warning, allowing attackers to perform Cross-Site Request Forgery attacks. Recommendations: At the moment,...

4.3CVSS6.3AI score0.00535EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/08/20 12:00 a.m.20 views

PT-2025-33953 · Unknown · Dourou Cookie Warning

Name of the Vulnerable Software and Affected Versions: Dourou Cookie Warning versions through 1.3 Description: Improper neutralization of input during web page generation allows for stored cross-site scripting XSS. Recommendations: Update Dourou Cookie Warning to a version later than 1.3...

5.9CVSS5.7AI score0.00352EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/08/20 12:00 a.m.5 views

WordPress plugin Cookie Warning 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

8.1CVSS6.3AI score0.00535EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-23143

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: Fix null-ptr-deref by socklockinitclassandname and rmmod. When I ran the repro 0 and waited a few seconds, I observed two LOCKDEP splats: a warning...

5.5CVSS6.2AI score0.00201EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/08/20 12:00 a.m.14 views

WordPress和WordPress plugin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

7.5CVSS5.7AI score0.00352EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2018-17471

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML...

4.3CVSS6.7AI score0.0139EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2025/08/19 11:23 p.m.7 views

SUSE CVE-2025-38591

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject narrower access to pointer ctx fields The following BPF program, simplified from a syzkaller repro, causes a kernel warning: r0 = u8 r1 + 169; exit; With pointer field sk being at offset 168 in skbuff. This access is...

4.4CVSS6.4AI score0.00193EPSS
SaveExploits0References23
Positive Technologies
Positive Technologies
added 2025/08/19 12:00 a.m.8 views

PT-2025-37224

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel's networking scheduler related to the cake queuing discipline. Specifically, cake enqueue does not return NET XMIT CN when packets are dropped due to...

7.8CVSS6.1AI score0.0018EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2017-5093

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in modal dialog handling in Blink in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote...

6.5CVSS7.4AI score0.01433EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2025-38357

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fuse: fix runtime warning on truncatefoliobatchexceptionals The WARNONONCE is introduced on...

7.8CVSS5.6AI score0.00157EPSS
SaveExploits0References2
HackRead
HackRead
added 2025/08/18 6:37 p.m.9 views

Fake ChatGPT Desktop App Delivering PipeMagic Backdoor, Microsoft

Microsoft warns that a fake ChatGPT desktop app was used to deliver PipeMagic malware, linked to ransomware attacks…...

7.2AI score
SaveExploits0
HackRead
HackRead
added 2025/08/18 5:04 p.m.8 views

Fake Copyright Notices Drop New Noodlophile Stealer Variant

Morphisec warns of a new Noodlophile Stealer variant spread via fake copyright phishing emails, using Dropbox links and…...

7.3AI score
SaveExploits0
Rows per page
Query Builder