Lucene search
+L

123 matches found

NVD
NVD
•added 2026/10/10 8:17 a.m.•6 views

CVE-2026-93932

Deserialization of Untrusted Data vulnerability in ThemeREX Group Smart Casa smart-casa allows Object Injection.This issue affects Smart Casa: from n/a through 1.0.12...

9.8CVSS0.00313EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/10 7:00 a.m.•11 views

CVE-2026-93932

The Smart Casa WordPress theme, developed by ThemeREX Group , is vulnerable to a PHP Object Injection flaw in versions 1.0.12 and below. This vulnerability stems from the deserialization of untrusted data , which could allow an attacker to execute arbitrary code or manipulate application logic. T...

9.8CVSS5.8AI score0.00313EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/10 7:00 a.m.•5 views

EUVD-2026-96197

Deserialization of Untrusted Data vulnerability in ThemeREX Group Smart Casa smart-casa allows Object Injection.This issue affects Smart Casa: from n/a through 1.0.12...

9.8CVSS5.8AI score0.00313EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/10 7:00 a.m.•34 views

CVE-2026-93932 WordPress Smart Casa theme <= 1.0.12 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group Smart Casa smart-casa allows Object Injection.This issue affects Smart Casa: from n/a through 1.0.12...

9.8CVSS0.00313EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/08 6:46 a.m.•5 views

WordPress Smart Casa theme <= 1.0.12 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Smart Casa versions = 1.0.12...

9.8CVSS5.8AI score0.00313EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2026/03/06 7:55 a.m.•22 views

CVE-2026-27097

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes CasaMia | Property Rental Real Estate WordPress Theme casamia allows PHP Local File Inclusion.This issue affects CasaMia | Property Rental Real Estate WordPress Them...

8.1CVSS5.8AI score0.00578EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/03/05 6:30 a.m.•19 views

EUVD-2026-9603

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes CasaMia | Property Rental Real Estate WordPress Theme casamia allows PHP Local File Inclusion.This issue affects CasaMia | Property Rental Real Estate WordPress Them...

5.9AI score0.00578EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2026/01/09 10:43 a.m.•22 views

CVE-2022-26834

Improper access control vulnerability in Rakuten Casa version APFV141 or APFV200 allows a remote attacker to obtain the information stored in the product because the product is set to accept HTTP connections from the WAN side by default...

7.5CVSS7.3AI score0.01571EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2020-23995

Malware in sbrugna...

7.5CVSS7.3AI score0.02897EPSS
SaveExploits1References16
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2022-33146

Malicious code in bioql PyPI...

9CVSS7.1AI score0.02712EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•30 views

EUVD-2022-31384

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.01571EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/09/08 9:02 a.m.•9 views

WordPress Smart Casa Theme <= 1.0.11 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Smart Casa versions = 1.0.11...

8.1CVSS7AI score0.00762EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/09/08 12:00 a.m.•11 views

WordPress Smart Casa Theme <= 1.0.11 is vulnerable to Local File Inclusion

Software Smart Casa Type Theme Vulnerable versions = 1.0.11 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID fbd7731da0a1 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

8.1CVSS7.7AI score0.00762EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:41 a.m.•14 views

CVE-2024-26519

An issue in Casa Systems NTC-221 version 2.0.99.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the /www/cgi-bin/nas.cgi component...

9CVSS7.9AI score0.00295EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 8:08 a.m.•10 views

CVE-2024-25290

An issue in Casa Systems NL1901ACV R6B032 allows a remote attacker to execute arbitrary code via the userName parameter of the add function...

8CVSS8AI score0.00717EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:46 p.m.•11 views

CVE-2022-29525

Rakuten Casa version APFV141 or APFV200 uses a hard-coded credential which may allow a remote unauthenticated attacker to log in with the root privilege and perform an arbitrary operation...

9.8CVSS7.3AI score0.01536EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 5:37 p.m.•19 views

CVE-2020-36517

An information leak in Nabu Casa Home Assistant Operating System and Home Assistant Supervised 2022.03 allows a DNS operator to gain knowledge about internal network resources via the hardcoded DNS resolver configuration...

7.5CVSS6.7AI score0.02897EPSS
SaveExploits1
NVD
NVD
•added 2024/10/22 10:15 p.m.•23 views

CVE-2024-26519

An issue in Casa Systems NTC-221 version 2.0.99.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the /www/cgi-bin/nas.cgi component...

9CVSS0.00295EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/22 12:00 a.m.•34 views

CVE-2024-26519

An issue in Casa Systems NTC-221 version 2.0.99.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the /www/cgi-bin/nas.cgi component...

0.00295EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/22 12:00 a.m.•14 views

CVE-2024-26519

An issue in Casa Systems NTC-221 version 2.0.99.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the /www/cgi-bin/nas.cgi component...

7.8AI score0.00295EPSS
SaveExploits0References1
Rows per page
Query Builder