Lucene search
+L

36484 matches found

Cvelist
Cvelist
added 2025/08/14 10:34 a.m.20 views

CVE-2025-49264 WordPress Cloud SAML SSO - Single Sign On Login <= 1.0.18 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Cloud Infrastructure Services Cloud SAML SSO - Single Sign On Login cloud-sso-single-sign-on allows PHP Local File Inclusion.This issue affects Cloud SAML SSO - Single Sign On...

7.5CVSS0.00488EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/14 10:34 a.m.31 views

CVE-2025-49264

CVE-2025-49264 is a Local File Inclusion in the WordPress plugin Cloud SAML SSO – Single Sign On Login (versions up to 1.0.18). The flaw stems from improper control of the filename used by Include/Require, enabling potential PHP local file inclusion. Affected product version range is from n/a thr...

7.5CVSS5.9AI score0.00488EPSS
SaveExploits0References1
Akamai Blog
Akamai Blog
added 2025/08/14 10:20 a.m.10 views

Generative Personalization at the Edge: The Future of E‑Commerce Isn’t (Just) in the Cloud

...

7AI score
SaveExploits0
Cvelist
Cvelist
added 2025/08/14 9:53 a.m.23 views

CVE-2025-8047 Multiple Plugins from itayamar - Supply Chain Compromise

The disable-right-click-powered-by-pixterme through v1.2 and pixter-image-digital-license thtough v1.0 WordPress plugins load a JavaScript file which has been compromised from an apparent abandoned S3 bucket. It can be used as a backdoor by those who control it, but it currently displays an alert...

0.00442EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/14 2:24 a.m.32 views

CVE-2025-42955

Due to a missing authorization check in SAP Cloud Connector, an attacker on an adjacent network with low privileges could send a crafted request to the endpoint responsible for testing LDAP connections. A successful exploit could lead to reduced performance, hence a low-impact on availability of...

3.5CVSS7.1AI score0.00462EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
added 2025/08/14 12:00 a.m.11 views

A Hierarchical IDS for Zero-Day Attack Detection in Internet of Medical Things Networks

The Internet of Medical Things IoMT is driving a healthcare revolution but remains vulnerable to cyberattacks such as denial of service, ransomware, data hijacking, and spoofing. These networks comprise resource constrained, heterogeneous devices e.g., wearable sensors, smart pills, implantables,...

7.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/08/14 12:00 a.m.9 views

PT-2025-33195 · Unknown · Cloud Saml Sso - Single Sign On Login

Name of the Vulnerable Software and Affected Versions: Cloud SAML SSO - Single Sign On Login versions through 1.0.18 Description: The software contains an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion issue. This allows for PHP Local File...

7.5CVSS6.5AI score0.00488EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/08/14 12:00 a.m.18 views

PT-2025-33146

Name of the Vulnerable Software and Affected Versions: Disable-right-click-powered-by-pixterme versions through 1.2 pixter-image-digital-license versions through 1.0 Description: The Disable-Right-Click and Pixter Image Digital License WordPress plugins load a compromised JavaScript file from an...

9.8CVSS5.4AI score0.00442EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/08/14 12:00 a.m.16 views

Dell CloudLink 代码问题漏洞

DELL CloudLink is a data encryption and key management solution from Dell that is targeted at enterprise-level users and supports public, private and hybrid cloud environments. DELL CloudLink suffers from an improperly restricted XML external entity reference vulnerability that can be exploited b...

5.5CVSS6.6AI score0.00295EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/14 12:00 a.m.16 views

WordPress plugin Cloud SAML SSO - Single Sign On Login Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/13 5:15 p.m.24 views

CVE-2025-2181

A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output...

5.9CVSS0.00161EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/13 5:15 p.m.20 views

CVE-2025-2180

An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier th...

4.8CVSS0.00182EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/13 5:03 p.m.35 views

CVE-2025-2181

CVE-2025-2181 affects Palo Alto Networks Checkov by Prisma Cloud. The vulnerability is a sensitive information disclosure that can cause Prisma Cloud access keys to be exposed in Checkov’s output (cleartext). Multiple sources corroborate exposure of credentials via Checkov output during operation...

5.9CVSS6.6AI score0.00161EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/13 5:03 p.m.19 views

CVE-2025-2181 Checkov by Prisma Cloud: Cleartext Exposure of Credentials

A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output...

5.9CVSS0.00161EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/13 5:03 p.m.8 views

CVE-2025-2181 Checkov by Prisma Cloud: Cleartext Exposure of Credentials

A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output...

5.9CVSS6.6AI score0.00161EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/13 5:02 p.m.7 views

CVE-2025-2180 Checkov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code Execution

An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier th...

4.8CVSS7.9AI score0.00182EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/13 5:02 p.m.27 views

CVE-2025-2180 Checkov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code Execution

An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier th...

4.8CVSS0.00182EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/13 5:02 p.m.44 views

CVE-2025-2180

The CVE-2025-2180 entry describes an unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma Cloud. Affected product: Checkov (in Prisma Cloud) versions prior to 3.2.415. Vulnerable component: the deserialization process when scanning Terraform files. Root cause: unsafe deser...

4.8CVSS7.9AI score0.00182EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/13 8:32 a.m.10 views

MAL-2025-6941 Malicious code in microsoft-cloud-integrations (npm)

The package communicates with a domain associated with malicious activity...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/13 8:32 a.m.10 views

Malicious code in microsoft-cloud-integrations (npm)

The package communicates with a domain associated with malicious activity...

7AI score
SaveExploits0
Rows per page
Query Builder