Lucene search
+L

231 matches found

Patchstack
Patchstack
added 2025/12/05 7:16 a.m.11 views

WordPress My auctions allegro plugin <= 3.6.32 - Unauthenticated Local File Inclusion via controller vulnerability

Unauthenticated Local File Inclusion via controller vulnerability discovered by type5afe in WordPress Plugin My auctions allegro versions = 3.6.32...

8.1CVSS6.8AI score0.00678EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/12/05 7:11 a.m.5 views

WordPress My auctions allegro plugin <= 3.6.32 - Unauthenticated SQL Injection via auction_id vulnerability

Unauthenticated SQL Injection via auctionid vulnerability discovered by type5afe in WordPress Plugin My auctions allegro versions = 3.6.32...

7.5CVSS7.8AI score0.00283EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2025/12/05 6:43 a.m.7 views

EUVD-2025-201391

The My auctions allegro plugin for WordPress is vulnerable to SQL Injection via the ‘auctionid’ parameter in all versions up to, and including, 3.6.32 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

7.5CVSS6.3AI score0.00283EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/05 12:0 a.m.5 views

WordPress plugin My auctions allegro SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL...

7.5CVSS7.6AI score0.00283EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/05 12:0 a.m.11 views

PT-2025-49233

Name of the Vulnerable Software and Affected Versions My auctions allegro plugin for WordPress versions through 3.6.32 Description The My auctions allegro plugin for WordPress is susceptible to a Local File Inclusion issue via the controller parameter. This allows unauthenticated attackers to...

8.1CVSS7.4AI score0.00678EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/12/05 12:0 a.m.8 views

WordPress plugin My auctions allegro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

8.1CVSS6AI score0.00678EPSS
SaveExploits0References3
Rapid7 Blog
Rapid7 Blog
added 2025/11/24 2:21 p.m.8 views

From Extortion to E-commerce: How Ransomware Groups Turn Breaches into Bidding Wars

Ransomware has evolved from simple digital extortion into a structured, profit-driven criminal enterprise. Over time, it has led to the development of a complex ecosystem where stolen data is not only leveraged for ransom, but also sold to the highest bidder. This trend first gained traction in...

6.7AI score
SaveExploits0
EUVD
EUVD
added 2025/10/11 9:30 a.m.5 views

EUVD-2025-33816

The My auctions allegro plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter in all versions up to, and including, 3.6.31 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

4.9CVSS6.1AI score0.00276EPSS
SaveExploits0References3
CVE
CVE
added 2025/10/11 7:25 a.m.31 views

CVE-2025-10048

The CVE-2025-10048 entry concerns the WordPress plugin My auctions allegro (versions up to and including 3.6.31). It is vulnerable to SQL Injection via the order parameter due to insufficient escaping and inadequate query preparation, enabling an authenticated attacker with Administrator+ privile...

4.9CVSS6.2AI score0.00276EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/11 12:0 a.m.5 views

WordPress plugin My auctions allegro SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL...

4.9CVSS7.6AI score0.00276EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/11 12:0 a.m.14 views

PT-2025-41641

Name of the Vulnerable Software and Affected Versions My auctions allegro plugin for WordPress versions through 3.6.31 Description The software contains a SQL Injection issue due to insufficient escaping of the order parameter and inadequate preparation of the SQL query. This allows authenticated...

4.9CVSS7.1AI score0.00276EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2025/10/10 11:18 p.m.8 views

WordPress My Auctions Allegro plugin <= 3.6.31 - Authenticated (Admin+) SQL Injection vulnerability

Authenticated Admin+ SQL Injection vulnerability discovered by tmrswrr in WordPress Plugin My auctions allegro versions = 3.6.31...

4.9CVSS7.8AI score0.00276EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2005-1367

Malware in sbrugna...

7.5CVSS6.4AI score0.01514EPSS
SaveExploits1References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2008-4735

Malware in sbrugna...

7.5CVSS6.4AI score0.01196EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2007-5969

Malware in sbrugna...

7.5CVSS6.4AI score0.01006EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2025-7375

Malicious code in bioql PyPI...

6.3CVSS9.2AI score0.00337EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-8810

Malicious code in bioql PyPI...

8.5CVSS8.7AI score0.00304EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-10878

Malicious code in bioql PyPI...

7.1CVSS7.6AI score0.00131EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-2951

Malicious code in bioql PyPI...

7.1CVSS8.7AI score0.00246EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
added 2025/07/03 12:0 a.m.6 views

Novel Blockchain-Based Protocols for Electronic Voting and Auctions

Programmable blockchains have long been a hot research topic given their tremendous use in decentralized applications. Smart contracts, using blockchains as their underlying technology, inherit the desired properties such as verifiability, immutability, and transparency, which make it a great sui...

7.1AI score
SaveExploits0
Rows per page
Query Builder