Lucene search
+L

4901 matches found

Packet Storm News
Packet Storm News
added 2026/01/26 12:0 a.m.22 views

Explainability Methods for Hardware Trojan Detection: A Systematic Comparison

Hardware trojan detection requires accurate identification and interpretable explanations for security engineers to validate and act on results. This work compares three explainability categories for gate-level trojan detection on the Trust-Hub benchmark: 1 domain-aware property-based analysis of...

5.9AI score
SaveExploits0
Circl
Circl
added 2026/01/24 10:31 a.m.19 views

CVE-2026-1302

creationtimestamp| type| source ---|---|--- 2026-01-24 10:31:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md5z4lvsye2r...

4.4CVSS5AI score0.00207EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/01/24 8:26 a.m.9 views

EUVD-2026-4548

The Meta-box GalleryMeta plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'mbgallery' custom post type in all versions up to, and including, 3.0.1. This makes it possible for authenticated attackers, with Author-level access and abov...

4.3CVSS5.5AI score0.00193EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/01/24 8:26 a.m.9 views

EUVD-2026-4549

The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom fields in all versions up to, and including, 20251210 due to insufficient input sanitization and output escaping. This makes it possible for...

7.2CVSS5.8AI score0.00213EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/01/24 7:26 a.m.7 views

EUVD-2026-4564

The ThemeRuby Multi Authors – Assign Multiple Writers to Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before' and 'after' shortcode attributes in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS5.7AI score0.0024EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/01/24 6:30 a.m.6 views

EUVD-2026-4592

Not used...

5.3AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/23 6:32 p.m.5 views

CVE-2025-71152

Reference counting bugs were found in the Linux kernel's DSA Distributed Switch Architecture network driver. The OF Open Firmware device tree path never releases the elevated refcount on the conduit's kobject, causing a leak. Additionally, the conduit net device can be unregistered while DSA stil...

7.8CVSS5.3AI score0.0012EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/01/23 4:47 p.m.9 views

EUVD-2026-4283

Textpattern versions prior to 4.8.3 contain an authenticated remote code execution vulnerability that allows logged-in users to upload malicious PHP files. Attackers can upload a PHP file with a shell command execution payload and execute arbitrary commands by accessing the uploaded file through ...

8.8CVSS6.8AI score0.00602EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/01/23 3:23 p.m.7 views

EUVD-2026-4318

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: avoid chain re-validation if possible Hamza Mahfooz reports cpu soft lock-ups in nftchainvalidate: watchdog: BUG: soft lockup - CPU1 stuck for 27s! iptables-nft-re:37547 .. RIP: 0010:nftchainvalidate+0xcb/0x1...

5.2AI score0.00164EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/01/23 2:29 p.m.15 views

EUVD-2026-4331

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in DevsBlink EduBlink Core edublink-core allows PHP Local File Inclusion.This issue affects EduBlink Core: from n/a through = 2.0.7...

7.5CVSS5.5AI score0.00306EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/01/23 2:29 p.m.7 views

EUVD-2026-4343

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ability, Inc Web Accessibility with Max Access accessibility-toolbar allows Stored XSS.This issue affects Web Accessibility with Max Access: from n/a through = 2.1.0...

5.9CVSS5.4AI score0.0014EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/01/23 2:29 p.m.10 views

EUVD-2026-4345

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LogicHunt Logo Slider logo-slider-wp allows Stored XSS.This issue affects Logo Slider: from n/a through = 4.9.0...

5.9CVSS5.4AI score0.00142EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/01/23 2:29 p.m.9 views

EUVD-2026-4250

Cross-Site Request Forgery CSRF vulnerability in marynixie Related Posts Thumbnails Plugin for WordPress related-posts-thumbnails allows Cross Site Request Forgery.This issue affects Related Posts Thumbnails Plugin for WordPress: from n/a through = 4.3.1...

4.7CVSS5.4AI score0.00133EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/01/23 2:28 p.m.11 views

EUVD-2026-4406

Missing Authorization vulnerability in SiteLock SiteLock Security sitelock allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteLock Security: from n/a through = 5.0.2...

5.4AI score0.00235EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/01/23 2:28 p.m.13 views

EUVD-2026-4392

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Marcus aka @msykes WP FullCalendar wp-fullcalendar allows Retrieve Embedded Sensitive Data.This issue affects WP FullCalendar: from n/a through = 1.6...

5.4AI score0.00296EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/01/23 2:15 p.m.6 views

EUVD-2026-4412

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconncount: fix leaked ct in error paths There are some situations where ct might be leaked as error paths are skipping the refcounted check and return immediately. In order to solve it make sure that the check is...

5.2AI score0.00239EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/01/23 6:31 a.m.8 views

EUVD-2026-4431

Not used...

5.3AI score
SaveExploits0References1
EUVD
EUVD
added 2026/01/23 3:31 a.m.5 views

EUVD-2026-4482

Anritsu ShockLine SCPI Race Condition Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Anritsu ShockLine. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

7.5CVSS6.4AI score0.00414EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/01/23 3:27 a.m.18 views

EUVD-2026-4468

MCP Manager for Claude Desktop execute-command Command Injection Sandbox Escape Vulnerability. This vulnerability allows remote attackers to bypass the sandbox on affected installations of MCP Manager for Claude Desktop. User interaction is required to exploit this vulnerability in that the targe...

8.8CVSS6AI score0.01253EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/01/23 2:49 a.m.5 views

EUVD-2026-4485

GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

7.8CVSS6.3AI score0.00744EPSS
SaveExploits0References4
Rows per page
Query Builder