Lucene search
+L

8181 matches found

Vulnrichment
Vulnrichment
•added 2025/12/24 1:10 p.m.•8 views

CVE-2025-67621 WordPress Eight Day Week Print Workflow plugin <= 1.2.5 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in 10up Eight Day Week Print Workflow eight-day-week-print-workflow allows Retrieve Embedded Sensitive Data.This issue affects Eight Day Week Print Workflow: from n/a through = 1.2.5...

4.3CVSS5.9AI score0.00255EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/24 1:10 p.m.•49 views

CVE-2025-67621 WordPress Eight Day Week Print Workflow plugin <= 1.2.5 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in 10up Eight Day Week Print Workflow eight-day-week-print-workflow allows Retrieve Embedded Sensitive Data.This issue affects Eight Day Week Print Workflow: from n/a through = 1.2.5...

4.3CVSS0.00255EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/24 1:10 p.m.•35 views

CVE-2025-67621

The CVE-2025-67621 entry concerns the WordPress plugin Eight Day Week Print Workflow (versions up to and including 1.2.5). The vulnerability is an information-disclosure flaw that allows an unauthorized control field to retrieve embedded sensitive data, exposing sensitive system information. Affe...

4.3CVSS5.9AI score0.00255EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/12/24 10:04 a.m.•239 views

Exploit for CVE-2025-68613

🚀 n8n Authenticated RCE PoC Pocsuite3 CVE ID: CVE-202...

9.9CVSS9.4AI score0.98994EPSS
SaveExploits35
Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•25 views

PT-2025-53239

Name of the Vulnerable Software and Affected Versions 10up Eight Day Week Print Workflow versions through 1.2.5 Description The Eight Day Week Print Workflow software contains a flaw that allows unauthorized retrieval of embedded sensitive data, leading to exposure of sensitive system information...

7.5CVSS6.5AI score0.00255EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/12/24 12:00 a.m.•16 views

WordPress plugin Eight Day Week Print Workflow 安全漏洞

WordPress Eight Day Week Print Workflow plugin is a tool designed for news organizations or publishing teams. The WordPress Eight Day Week Print Workflow plugin suffers from an information disclosure vulnerability that originates from allowing an unauthorized control field to retrieve embedded...

4.3CVSS5.8AI score0.00255EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•7 views

CVE-2025-67621: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in 10up Eight Day Week Print Workflow eight-day-week-print-workflow allows Retrieve Embedded Sensitive Data.This issue affects Eight Day Week Print Workflow: from n/a through = 1.2.5...

4.3CVSS5.9AI score0.00255EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2025/12/23 7:34 a.m.•24 views

Critical n8n Flaw (CVSS 9.9) Enables Arbitrary Code Execution Across Thousands of Instances

A critical security vulnerability has been disclosed in the n8n workflow automation platform that, if successfully exploited, could result in arbitrary code execution under certain circumstances. The vulnerability, tracked as CVE-2025-68613 , carries a CVSS score of 9.9 out of a maximum of 10.0...

9.9CVSS9AI score0.98994EPSS
SaveExploits35
Tenable Nessus
Tenable Nessus
•added 2025/12/23 12:00 a.m.•11 views

n8n Node.js Package 0.211.0 < 1.120.4 / 1.121.0 Remote Code Execution via Expression Injection (CVE-2025-68613)

The version of the n8n Node.js Package installed on the remote host is 0.211.0 prior to 1.120.4, or 1.121.0. It is, therefore, affected by a remote code execution vis expression injection vulnerability: - n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior...

9.9CVSS9.4AI score0.98994EPSS
SaveExploits35References2
vulnersOsv
vulnersOsv
•added 2025/12/22 8:20 p.m.•3 views

acapy-agent (>=1.1.0rc1, <=1.2.7), acapy-agent-jamie-testing (1.0.1) +580 more potentially affected by CVE-2025-68480 via marshmallow (>=3.0.0rc1, <=3.26.1)

marshmallow PYPI version =3.0.0rc1, =1.1.0rc1, =0.1.0, =0.5.6.dev0, =0.1.0.post1, =0.1.5, =4.8.2, =0.1.3, =0.1.31, =0.0.2, =0.0.7, =0.0.5, =0.0.5, =0.3.0 and more Source cves: CVE-2025-68480 Source advisory: GHSA-428G-F7CQ-PGP5...

5.3CVSS6.3AI score0.00296EPSS
SaveExploits0
osv_ghsa
osv_ghsa
•added 2025/12/22 4:19 p.m.•17 views

GHSA-V98V-FF95-F3CP n8n Vulnerable to Remote Code Execution via Expression Injection

Impact n8n contains a critical Remote Code Execution RCE vulnerability in its workflow expression evaluation system. Under certain conditions, expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from...

9.9CVSS8AI score0.98994EPSS
SaveExploits36References8
RedhatCVE
RedhatCVE
•added 2025/12/22 7:21 a.m.•21 views

CVE-2025-68613

n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution RCE vulnerability in their workflow expression evaluation system. Under certain conditions, expressions supplied by authenticated...

9.9CVSS8.8AI score0.98994EPSS
SaveExploits35References1
GithubExploit
GithubExploit
•added 2025/12/22 6:45 a.m.•233 views

Exploit for CVE-2025-68613

CVE-2025-68613 n8n is an open source workflow automation pla...

9.9CVSS9AI score0.98994EPSS
SaveExploits35
Patchstack
Patchstack
•added 2025/12/21 2:12 p.m.•18 views

WordPress Eight Day Week Print Workflow plugin <= 1.2.5 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by PPzzAArr in WordPress Plugin Eight Day Week Print Workflow versions = 1.2.5...

7.5CVSS7AI score0.00255EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/12/19 11:15 p.m.•22 views

CVE-2025-68613

n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution RCE vulnerability in their workflow expression evaluation system. Under certain conditions, expressions supplied by authenticated...

9.9CVSS0.98994EPSS
SaveExploits35References6
Snyk
Snyk
•added 2025/12/19 10:54 p.m.•43 views

Improper Control of Dynamically-Managed Code Resources

Overview n8n-workflow is a Workflow base code of n8n Affected versions of this package are vulnerable to Improper Control of Dynamically-Managed Code Resources via the workflow expression evaluation system. An authenticated attacker can execute arbitrary code with the privileges of the underlying...

9.9CVSS9AI score0.98994EPSS
SaveExploits35References2
vulnersOsv
vulnersOsv
•added 2025/12/19 10:54 p.m.•8 views

@ai-growth/n8n-nodes-wordpress (>=0.2.0, <=0.6.12), @antonytm/n8n-nodes-test (>=0.1.5, <=0.2.1) +77 more potentially affected by CVE-2025-68613 via n8n-workflow (>=1.0.0, <=1.118.0)

n8n-workflow NPM version =1.0.0, =0.2.0, =0.1.5, =0.0.17, =1.0.2, =1.0.1, =0.2.0, =0.19.0, =0.4.0, =0.11.0, =1.1.0, =1.1.0, =1.1.0, =1.0.1, =1.57.0 and more Source cves: CVE-2025-68613 Source advisory: SNYK:JS-N8NWORKFLOW-14545463...

9.9CVSS8.6AI score0.98994EPSS
SaveExploits35
osv_cve
osv_cve
•added 2025/12/19 10:23 p.m.•15 views

CVE-2025-68613 n8n Vulnerable to Remote Code Execution via Expression Injection

n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution RCE vulnerability in their workflow expression evaluation system. Under certain conditions, expressions supplied by authenticated...

9.9CVSS7.8AI score
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2025/12/19 10:23 p.m.•9 views

CVE-2025-68613 n8n Vulnerable to Remote Code Execution via Expression Injection

n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution RCE vulnerability in their workflow expression evaluation system. Under certain conditions, expressions supplied by authenticated...

9.9CVSS8.8AI score0.98994EPSS
SaveExploits35References4
IBM Security Bulletins
IBM Security Bulletins
•added 2025/12/19 9:06 p.m.•28 views

Security Bulletin: Components with known vulnerabilities in IBM Security QRadar Analyst Workflow for IBM QRadar SIEM

Summary Multiple components with known vulnerabilities were addressed in a IBM Security QRadar Analyst Workflow for IBM QRadar SIEM release Vulnerability Details CVEID:CVE-2025-64756 DESCRIPTION: Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior to versions...

9.4CVSS5.3AI score0.99225EPSS
SaveExploits72Affected Software1
Rows per page
Query Builder