Lucene search
+L

3338 matches found

Positive Technologies
Positive Technologies
•added 2026/01/28 12:00 a.m.•36 views

PT-2026-5229

Name of the Vulnerable Software and Affected Versions bulk extractor versions 1.4 and later Description bulk extractor is a digital forensics exploitation tool. The embedded unrar code within bulk extractor, starting with version 1.4, contains a heap-buffer-overflow in the RAR PPM LZ decoding pat...

9.8CVSS5.9AI score0.00428EPSS
SaveExploits1References8
Packet Storm
Packet Storm
•added 2026/01/27 12:00 a.m.•227 views

📄 Ivanti Connect Secure 9.x / 22.x Command Injection

The provided PHP script targets CVE‑2024‑21887, a command injection vulnerability in Ivanti Connect Secure versions 9.x and 22.x It is designed to identify and exploit vulnerable systems through a crafted API request. It initializes a reusable cURL session to send malicious JSON payloads to a...

9.1CVSS8.1AI score0.99999EPSS
SaveExploits18
RedhatCVE
RedhatCVE
•added 2026/01/25 9:16 a.m.•33 views

CVE-2026-1081

The Set Bulk Post Categories plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing nonce validation on the bulk category update functionality. This makes it possible for unauthenticated attackers to modify post categorie...

4.3CVSS5.5AI score0.00179EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/24 8:16 a.m.•23 views

CVE-2026-1081

The Set Bulk Post Categories plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing nonce validation on the bulk category update functionality. This makes it possible for unauthenticated attackers to modify post categorie...

4.3CVSS0.00179EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/01/24 7:26 a.m.•11 views

CVE-2026-1081 Set Bulk Post Categories <= 1.1 - Cross-Site Request Forgery to Bulk Post Category Update

The Set Bulk Post Categories plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing nonce validation on the bulk category update functionality. This makes it possible for unauthenticated attackers to modify post categorie...

4.3CVSS5.6AI score0.00179EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/01/24 7:26 a.m.•11 views

CVE-2026-1081

The Set Bulk Post Categories plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing nonce validation on the bulk category update functionality. This makes it possible for unauthenticated attackers to modify post categorie...

4.3CVSS5.8AI score0.00179EPSS
SaveExploits0References4
CVE
CVE
•added 2026/01/24 7:26 a.m.•35 views

CVE-2026-1081

CVE-2026-1081 concerns the WordPress plugin Set Bulk Post Categories, affected

4.3CVSS5.6AI score0.00179EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/01/24 7:26 a.m.•57 views

CVE-2026-1081 Set Bulk Post Categories <= 1.1 - Cross-Site Request Forgery to Bulk Post Category Update

The Set Bulk Post Categories plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing nonce validation on the bulk category update functionality. This makes it possible for unauthenticated attackers to modify post categorie...

4.3CVSS0.00179EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2026/01/24 4:32 a.m.•24 views

WordPress Set Bulk Post Categories plugin <= 1.1 - Cross-Site Request Forgery to Bulk Post Category Update vulnerability

Cross-Site Request Forgery to Bulk Post Category Update vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin Set Bulk Post Categories versions = 1.1...

4.3CVSS5.5AI score0.00179EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2026/01/24 12:00 a.m.•49 views

PT-2026-4581

The Set Bulk Post Categories plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing nonce validation on the bulk category update functionality. This makes it possible for unauthenticated attackers to modify post categorie...

4.3CVSS5.5AI score0.00179EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/24 12:00 a.m.•6 views

CVE-2026-1081: Cross-Site Request Forgery (CSRF)

The Set Bulk Post Categories plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing nonce validation on the bulk category update functionality. This makes it possible for unauthenticated attackers to modify post categorie...

4.3CVSS5.6AI score0.00179EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/23 9:15 p.m.•14 views

CVE-2026-22359

Cross-Site Request Forgery CSRF vulnerability in AA-Team Wordpress Movies Bulk Importer movies importer allows Cross Site Request Forgery.This issue affects Wordpress Movies Bulk Importer: from n/a through = 1.0...

4.3CVSS5.8AI score0.00153EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/22 5:16 p.m.•13 views

CVE-2026-22359

Cross-Site Request Forgery CSRF vulnerability in AA-Team Wordpress Movies Bulk Importer movies importer allows Cross Site Request Forgery.This issue affects Wordpress Movies Bulk Importer: from n/a through = 1.0...

4.3CVSS0.00153EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/22 4:56 p.m.•27 views

CVE-2026-22359

CVE-2026-22359 is a CSRF vulnerability affecting the WordPress plugin WordPress Movies Bulk Importer (plugin slug: movies-importer) with vulnerable range from n/a through version

4.3CVSS5.8AI score0.00153EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/22 4:56 p.m.•8 views

CVE-2026-22359 WordPress Wordpress Movies Bulk Importer plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in AA-Team Wordpress Movies Bulk Importer movies importer allows Cross Site Request Forgery.This issue affects Wordpress Movies Bulk Importer: from n/a through = 1.0...

5.8AI score0.00153EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/22 4:56 p.m.•8 views

CVE-2026-22359

Cross-Site Request Forgery CSRF vulnerability in AA-Team Wordpress Movies Bulk Importer movies importer allows Cross Site Request Forgery.This issue affects Wordpress Movies Bulk Importer: from n/a through = 1.0...

4.3CVSS5.8AI score0.00153EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/22 4:56 p.m.•32 views

CVE-2026-22359 WordPress Wordpress Movies Bulk Importer plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in AA-Team Wordpress Movies Bulk Importer movies importer allows Cross Site Request Forgery.This issue affects Wordpress Movies Bulk Importer: from n/a through = 1.0...

4.3CVSS0.00153EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/22 12:00 a.m.•28 views

PT-2026-4211

Cross-Site Request Forgery CSRF vulnerability in AA-Team Wordpress Movies Bulk Importer movies importer allows Cross Site Request Forgery.This issue affects Wordpress Movies Bulk Importer: from n/a through = 1.0...

5.4AI score0.00153EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/22 12:00 a.m.•3 views

CVE-2026-22359: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in AA-Team Wordpress Movies Bulk Importer movies importer allows Cross Site Request Forgery.This issue affects Wordpress Movies Bulk Importer: from n/a through = 1.0...

4.3CVSS5.8AI score0.00153EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/20 4:30 p.m.•18 views

EUVD-2025-206300

Pterodactyl improperly locks resources allowing raced queries to create more resources than alloted...

6CVSS5.8AI score0.00242EPSS
SaveExploits0References3
Rows per page
Query Builder