Lucene search
+L

91004 matches found

Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.16 views

PT-2026-43596

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the admin.mbnetj.php files UpdateParam function due to improper neutralization of special elements in a SQL UPDATE command allowing for reading the whole database and changing values in a non critical...

7CVSS6AI score0.00295EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.25 views

PT-2026-43547

The WPBakery Page Builder Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the lvca admin ajax AJAX action in all versions up to, and including, 3.9.4 due to missing authorization checks and insufficient input sanitization. The AJAX handler verifies a nonce...

6.4CVSS5.8AI score0.00223EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.18 views

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel. This vulnerability stems from the vport netlink reply helper function, which allocates skb packets of a fixed size but h...

5.9AI score0.00129EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.20 views

Netis AC1200 安全漏洞

The Netis AC1200 is a series of dual-band wireless broadband routers produced by the Chinese company Netis. The Netis AC1200 V4.0.1.4296 version contains a security vulnerability. This vulnerability stems from the CGI endpoint/cgi-bin/skkget.cgi function, which can return the entire router...

7.3CVSS5.8AI score0.00358EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.18 views

Slican多款产品 安全漏洞

Slican IPL is a product of the Polish company Slican. Slican IPL is an Internet Protocol private branch exchange. Slican IPM is an IP phone exchange server. Slican CCT is a series of enterprise communication and IP phone exchange systems. Several Slican products have security vulnerabilities; the...

9.3CVSS5.8AI score0.00662EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.21 views

PT-2026-43570

The EnvíaloSimple: Email Marketing y Newsletters plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'orderby' parameter in all versions up to, and including, 2.4.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

4.9CVSS5.9AI score0.00294EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2026/05/27 12:00 a.m.12 views

CVE-2026-38931

A stored cross-site scripting XSS vulnerability in the /admin/config-module.php component of creatorsofcode simplephp GitHub commit 5184cff Latest as of 2026-02-27 via injecting a crafted payload...

5.6AI score0.00162EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.27 views

PT-2026-43633

The rexCrawler plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...

4.8CVSS6AI score0.0023EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/05/27 12:00 a.m.10 views

CVE-2026-38931

A stored cross-site scripting XSS vulnerability in the /admin/config-module.php component of creatorsofcode simplephp GitHub commit 5184cff Latest as of 2026-02-27 via injecting a crafted payload...

5.4CVSS5.6AI score0.00162EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/05/27 12:00 a.m.58 views

CVE-2026-38931

A stored cross-site scripting XSS vulnerability in the /admin/config-module.php component of creatorsofcode simplephp GitHub commit 5184cff Latest as of 2026-02-27 via injecting a crafted payload...

0.00162EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.14 views

kvf-admin 安全漏洞

kvf-admin is a set of rapid development frameworks, scaffolding, backend management systems, and permission systems developed by KalvinGit’s individual developers. Version 1.1.0 of kvf-admin contains a security vulnerability. This vulnerability stems from improper permission settings in the...

8.8CVSS5.8AI score0.00341EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/27 12:00 a.m.11 views

CVE-2026-30498

A Cross-Site Request Forgery CSRF vulnerability was discovered in the delete.php endpoint of Jason2605 AdminPanel 4.0...

5.8AI score0.00097EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.26 views

PT-2026-44039

Name of the Vulnerable Software and Affected Versions creatorsofcode simplephp versions prior to GitHub commit 5184cff Description A stored cross-site scripting XSS issue exists in the '/admin/config-module.php' endpoint. This occurs when a crafted payload is injected, allowing the execution of...

5.4CVSS5.9AI score0.00162EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.18 views

WordPress plugin Search Simple Fields 跨站请求伪造漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.3CVSS5.7AI score0.0014EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.20 views

SimplePHP 安全漏洞

SimplePHP is a lightweight CMS tool based on JSON files, developed by Martin personally. SimplePHP has a security vulnerability, which stems from the/admin/config-module.php component having a storage-based cross-site scripting vulnerability. This vulnerability can be exploited by injecting...

5.4CVSS5.6AI score0.00162EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.36 views

PT-2026-44065

Name of the Vulnerable Software and Affected Versions Archer BE450 v1 Archer BE7200 v1 Description An authenticated command injection allows an administrator to execute arbitrary system commands through the web management interface. By using the browser developer console, a crafted input can be...

8.5CVSS6.2AI score0.02458EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.21 views

PT-2026-43572

The HBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'hb country iso', 'hb usa state iso', and 'hb canada province iso' parameters in all versions up to, and including, 2.1.6 due to insufficient input sanitization and output escaping. This makes it possible for...

7.2CVSS6AI score0.0019EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.24 views

PT-2026-43535

The Search Simple Fields plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.2. This is due to missing or incorrect nonce validation on the search simple fields options function in functions admin.php. This makes it possible for unauthenticated...

4.3CVSS5.7AI score0.0014EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.32 views

PT-2026-44152

Name of the Vulnerable Software and Affected Versions Automad versions 2.0.0-alpha.1 through 2.0.0-beta.27 Description A broken access control issue allows an unauthenticated attacker to retrieve the bcrypt password hashes of all administrator accounts via a single POST request. The setup endpoin...

7.5CVSS5.8AI score0.01072EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.19 views

Synology BeeStation OS 安全漏洞

Synology BeeStation OS is a private cloud storage and data management operating system developed by Synology, a Chinese company. Versions of Synology BeeStation OS prior to 1.3.2-65648 contained security vulnerabilities. These vulnerabilities were caused by a classic buffer overflow vulnerability...

9.8CVSS8AI score0.02762EPSS
SaveExploits0References1
Rows per page
Query Builder