Lucene search
+L

38 matches found

Vulnrichment
Vulnrichment
•added 2025/10/30 5:28 a.m.•6 views

CVE-2025-11627 Site Checkup AI Troubleshooting with Wizard and Tips for Each Issue <= 1.47 - Unauthenticated Log File Poisoning

The Site Checkup Debug AI Troubleshooting with Wizard and Tips for Each Issue plugin for WordPress is vulnerable to log file poisoning in all versions up to, and including, 1.47. This makes it possible for unauthenticated attackers to insert arbitrary content into log files, and potentially cause...

6.5CVSS5.7AI score0.00322EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/10/30 5:28 a.m.•21 views

CVE-2025-11627 Site Checkup AI Troubleshooting with Wizard and Tips for Each Issue <= 1.47 - Unauthenticated Log File Poisoning

The Site Checkup Debug AI Troubleshooting with Wizard and Tips for Each Issue plugin for WordPress is vulnerable to log file poisoning in all versions up to, and including, 1.47. This makes it possible for unauthenticated attackers to insert arbitrary content into log files, and potentially cause...

6.5CVSS0.00322EPSS
SaveExploits0References3
CVE
CVE
•added 2025/10/30 5:28 a.m.•31 views

CVE-2025-11627

CVE-2025-11627 affects WordPress plugin “Site Checkup Debug AI Troubleshooting with Wizard and Tips for Each Issue” (versions up to and including 1.47). Unauthenticated attackers can perform log file poisoning by inserting arbitrary content into logs, potentially causing denial of service via dis...

6.5CVSS5.7AI score0.00322EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/10/30 1:04 a.m.•15 views

WordPress Site Checkup AI Troubleshooting with Wizard and Tips for Each Issue plugin <= 1.47 - Unauthenticated Log File Poisoning vulnerability

Unauthenticated Log File Poisoning vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Site Checkup versions = 1.47...

6.5CVSS6.7AI score0.00322EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/10/30 12:00 a.m.•20 views

WordPress plugin Site Checkup Debug AI Troubleshooting with Wizard and Tips for Each Issue Security Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

6.5CVSS5.8AI score0.00322EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/30 12:00 a.m.•3 views

CVE-2025-11627: Improper Output Neutralization for Logs

The Site Checkup Debug AI Troubleshooting with Wizard and Tips for Each Issue plugin for WordPress is vulnerable to log file poisoning in all versions up to, and including, 1.47. This makes it possible for unauthenticated attackers to insert arbitrary content into log files, and potentially cause...

6.5CVSS5.8AI score0.00322EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2021-30882

Malicious code in bioql PyPI...

7.1CVSS7AI score0.00408EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/21 12:00 a.m.•0 views

CVE-2023-7021: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been classified as critical. Affected is an unknown function of the file general/vehicle/checkup/deletesearch.php. The manipulation of the argument VUID leads to sql injection. It is possible to launch the attack remotely. The exploit...

9.8CVSS6.4AI score0.00695EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/11/12 12:00 a.m.•16 views

PT-2023-6916 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA versions up to 11.9 Description: A critical issue was found in Tongda OA, affecting some unknown functionality of the file general/vehicle/checkup/delete.php. The manipulation of the VU ID argument leads to SQL injection...

9.8CVSS7.2AI score0.00873EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/12 12:00 a.m.•1 views

CVE-2023-6084: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file general/vehicle/checkup/delete.php. The manipulation of the argument VUID leads to sql injection. The exploit has been disclosed to the public and ma...

9.8CVSS6.3AI score0.00873EPSS
SaveExploits1References2
The Hacker News
The Hacker News
•added 2022/07/01 4:03 p.m.•35 views

Google Improves Its Password Manager to Boost Security Across All Platforms

Google on Thursday announced a slew of improvements to its password manager service aimed at creating a more consistent look and feel across different platforms. Central to the changes is a "simplified and unified management experience that's the same in Chrome and Android settings," Ali Sarraf,...

6.7AI score
SaveExploits0
attackerkb
attackerkb
•added 2021/12/16 3:15 a.m.•8 views

CVE-2021-44023

A link following denial-of-service DoS vulnerability in the Trend Micro Security Consumer 2021 familiy of products could allow an attacker to abuse the PC Health Checkup feature of the product to create symlinks that would allow modification of files which could lead to a denial-of-service...

7.1CVSS6.6AI score0.00408EPSS
SaveExploits0References3
OSV
OSV
•added 2021/12/16 3:15 a.m.•15 views

CVE-2021-44023

A link following denial-of-service DoS vulnerability in the Trend Micro Security Consumer 2021 familiy of products could allow an attacker to abuse the PC Health Checkup feature of the product to create symlinks that would allow modification of files which could lead to a denial-of-service...

7.1CVSS7.1AI score0.00408EPSS
SaveExploits0References2
NVD
NVD
•added 2021/12/16 3:15 a.m.•27 views

CVE-2021-44023

A link following denial-of-service DoS vulnerability in the Trend Micro Security Consumer 2021 familiy of products could allow an attacker to abuse the PC Health Checkup feature of the product to create symlinks that would allow modification of files which could lead to a denial-of-service...

7.1CVSS0.00408EPSS
SaveExploits0References2
Prion
Prion
•added 2021/12/16 3:15 a.m.•29 views

Design/Logic Flaw

A link following denial-of-service DoS vulnerability in the Trend Micro Security Consumer 2021 familiy of products could allow an attacker to abuse the PC Health Checkup feature of the product to create symlinks that would allow modification of files which could lead to a denial-of-service...

3.6CVSS6.7AI score0.00408EPSS
SaveExploits0References2Affected Software4
Malwarebytes
Malwarebytes
•added 2021/10/11 11:53 a.m.•39 views

Google warns some users that FancyBear’s been prowling around

APT28, also known as FancyBear, is at the heart of another targeted campaign. This time, it’s sniffing around users of Google services. Some 14,000 people have been notified about a spear phish attempt looking to compromise accounts and access their files. When did this happen? Sometime late...

6.9AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2021/07/17 12:33 p.m.•93 views

Instagram Launches 'Security Checkup' to Help Users Recover Hacked Accounts

Instagram earlier this week introduced a new "Security Checkup" feature that aims to keep accounts safe and help users—whose accounts may have been compromised—to recover them. In order to gain access to accounts, users will be prompted to perform a series of steps, which include checking recent...

1.9AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/09/04 3:09 p.m.•5 views

@alinex/checkup (>=0.7.0, <=1.2.2), @alinex/server (>=0.8.8, <=1.0.0) +52 more potentially affected by unknown CVE via unflatten (1.0.4)

unflatten NPM version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on unflatten and may be impacted: - @alinex/checkup =0.7.0, =0.8.8, =1.2.0-alpha1, =0.1.0, =0.1.0, =0.0.1, =0.0.8, =1.0.13, =0.0.2, =0.0.3, =1.0.0, =1.0.1, =1.1.0, =1.1.0, =1.3.7...

5.4AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
•added 2020/01/19 12:00 p.m.•59 views

Don't Ignore Chrome's New Password Checkup Feature

It could help save you when the next big breach hits...

0.7AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
•added 2020/01/06 5:00 p.m.•30 views

Facebook Revamps Its Privacy Checkup Feature in Time for CES

Forget Portal. This year, Facebook is marketing itself as a privacy crusader...

1.8AI score
SaveExploits0
Rows per page
Query Builder