3119 matches found
CVE-2024-46089
74cms =3.33 is vulnerable to remote code execution RCE in the background interface apiadmin...
CVE-2024-46089
74cms =3.33 is vulnerable to remote code execution RCE in the background interface apiadmin...
CVE-2025-23958
Missing Authorization vulnerability in FADI MED Editor Wysiwyg Background Color editor-wysiwyg-background-color allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Editor Wysiwyg Background Color: from n/a through = 1.0...
CVE-2025-23958 WordPress Editor Wysiwyg Background Color plugin <= 1.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in FADI MED Editor Wysiwyg Background Color editor-wysiwyg-background-color allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Editor Wysiwyg Background Color: from n/a through = 1.0...
CVE-2025-23958
CVE-2025-23958 examines a Missing Authorization vulnerability in the WordPress plugin Editor Wysiwyg Background Color (affected versions up to 1.0). The Red Hat and CVE records share the same description: exploit of incorrectly configured access control security levels. The Wordfence vulnerabilit...
CVE-2025-23958: Missing Authorization
Missing Authorization vulnerability in FADI MED Editor Wysiwyg Background Color editor-wysiwyg-background-color allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Editor Wysiwyg Background Color: from n/a through = 1.0...
From PyPI to the Dark Marketplace: How a Malicious Package Fuels the Sale of Telegram Identities
Introduction In today’s digital era, security breaches can occur in the blink of an eye. Telegram Desktop is renowned for its secure, user-friendly messaging interface, but what if the data used to provide seamless experience could also be your greatest problem? Our investigation into three...
AZL-62693 CVE-2025-22115 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix block group refcount race in btrfscreatependingblockgroups Block group creation is done in two phases, which results in a slightly unintuitive property: a block group can be allocated/deallocated from after...
CVE-2025-22115 btrfs: fix block group refcount race in btrfs_create_pending_block_groups()
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix block group refcount race in btrfscreatependingblockgroups Block group creation is done in two phases, which results in a slightly unintuitive property: a block group can be allocated/deallocated from after...
WordPress Slazzer Background Changer plugin <= 3.14 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Slazzer Background Changer versions = 3.14...
CVE-2025-39531
Missing Authorization vulnerability in slazzercom Slazzer Background Changer slazzer-background-changer allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Slazzer Background Changer: from n/a through = 3.14...
CVE-2025-39531
CVE-2025-39531 concerns a Missing Authorization vulnerability in the WordPress plugin Slazzer Background Changer (versions up to 3.14). Multiple sources confirm a Broken Access Control flaw where functionality is not properly constrained by ACLs, potentially enabling unauthorized access to featur...
CVE-2025-39531 WordPress Slazzer Background Changer plugin <= 3.14 - Broken Access Control Vulnerability
Missing Authorization vulnerability in slazzercom Slazzer Background Changer slazzer-background-changer allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Slazzer Background Changer: from n/a through = 3.14...
CVE-2025-39531 WordPress Slazzer Background Changer plugin <= 3.14 - Broken Access Control Vulnerability
Missing Authorization vulnerability in slazzercom Slazzer Background Changer slazzer-background-changer allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Slazzer Background Changer: from n/a through = 3.14...
CVE-2025-3688
CVE-2025-3688 concerns mirweiye Seven Bears Library CMS (2023) with a cross-site scripting flaw in an unspecified portion of the Background Management Page. The vulnerability enables remote initiation of an attack and has been publicly disclosed. The available documents do not specify affected ve...
CVE-2025-3688 mirweiye Seven Bears Library CMS Background Management Page cross site scripting
A vulnerability, which was classified as problematic, was found in mirweiye Seven Bears Library CMS 2023. This affects an unknown part of the component Background Management Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...
WordPress plugin Slazzer Background Changer has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability exis...
Seven Bears Library CMS Code Injection Vulnerability
Seven Bears Library CMS is a content management system by mirweiye Personal Developer. A code injection vulnerability exists in Seven Bears Library CMS version 2023, which stems from the vulnerability of the Background Management Page component to cross-site scripting attacks...
PT-2025-16640
Name of the Vulnerable Software and Affected Versions Slazzer Background Changer versions n/a through 3.14 Description The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations For versions n/a through 3.1...
CVE-2025-39531: Missing Authorization
Missing Authorization vulnerability in slazzercom Slazzer Background Changer slazzer-background-changer allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Slazzer Background Changer: from n/a through = 3.14...