59261 matches found
WordPress Payment Button for PayPal plugin <= 1.2.3.41 - Missing Authorization to Unauthenticated Arbitrary Order Creation vulnerability
Missing Authorization to Unauthenticated Arbitrary Order Creation vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan - Knight Squad in WordPress Plugin Payment Button for PayPal versions = 1.2.3.41...
CVE-2026-24933
creationtimestamp| type| source ---|---|--- 2026-02-03 05:15:48+00:00| seen| Telegram/6dqf89PpLpfc9u5war90qHxaQJlIkUtwZabucX5NXjJD9U...
CVE-2026-24932
creationtimestamp| type| source ---|---|--- 2026-02-03 05:15:48+00:00| seen| Telegram/6dqf89PpLpfc9u5war90qHxaQJlIkUtwZabucX5NXjJD9U...
CVE-2025-58383
creationtimestamp| type| source ---|---|--- 2026-02-03 03:17:21+00:00| seen| Telegram/CgBosmGjiUsFubMTPyQoIc-fq6HoQhesjtq1xv5gYNaUJw...
CVE-2025-13348
An improper access control vulnerability exists in ASUS Secure Delete Driver of ASUS Business Manager. This vulnerability can be triggered by a local user sending a specially crafted request, potentially leading to the creation of arbitrary files in a specified path. Refer to the "Security Update...
CVE-2025-12679
creationtimestamp| type| source ---|---|--- 2026-02-03 01:23:55+00:00| seen| Telegram/CC0vp45DpVXzV4kdhDycbYX-JO5KYltVBxFm485PHzExUY...
Maian Media Maian Support 跨站请求伪造漏洞
Maian Media Maian Support is a ticket support system provided by Maian Media Limited in the UK. Version 4.3 of Maian Media Maian Support contains a cross-site request forgeing vulnerability. This vulnerability stems from cross-site request forgeing techniques, allowing attackers to create malicio...
PT-2026-5841
Name of the Vulnerable Software and Affected Versions Maian Support Helpdesk version 4.3 Description The software contains a cross-site request forgery condition that permits attackers to create administrative accounts without needing to authenticate. Attackers can construct malicious HTML forms ...
Foxit PDF Editor Cloud 安全漏洞
Foxit PDF Editor Cloud is a browser-based online PDF editing platform provided by the American company Foxit. Versions of Foxit PDF Editor Cloud prior to February 3, 2026, contained security vulnerabilities. These vulnerabilities stemmed from the inability to clean user input that was embedded in...
Rubikon Easy Transfer 跨站脚本漏洞
Rubikon Easy Transfer is a file transfer application developed by Rubikon Corporation. Version 1.7 of Rubikon Easy Transfer contains a cross-site scripting vulnerability. This vulnerability stems from improper input validation of the oldPath, newPath, and path parameters during the creation of...
PT-2026-6202
Name of the Vulnerable Software and Affected Versions Open eClass versions prior to 4.2 Description The Open eClass platform, previously known as GUnet eClass, is a course management system. A broken access control issue permits authenticated students to create new course units, a function...
CVE-2026-24737
creationtimestamp| type| source ---|---|--- 2026-02-02 23:19:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvybqmke62g 2026-02-09 01:02:45+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mefat4pq3c2m 2026-06-09 09:46:01+00:00| seen|...
CVE-2025-6592 Creating a permanent account from a temporary account associates temp username and IP address with real username in AbuseLog
Vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/auth/AuthManager.Php. This issue affects AbuseFilter: from fe0b1cb9e9691faf4d8d9bd80646589f6ec37615 before 1.43.2, 1.44.0...
CVE-2025-6592
CVE-2025-6592 affects Wikimedia Foundation AbuseFilter, specifically the AuthManager.php component. The issue impacts AbuseFilter versions prior to 1.43.2 and 1.44.0. Red Hat, Debian, and OSV records corroborate the vulnerability in AbuseFilter/AuthManager.php and reference affected versions. Sny...
CI4MS Vulnerable to Remote Code Execution (RCE) via Arbitrary File Creation and Save in File Editor
Summary A critical vulnerability has been identified in CI4MS that allows an authenticated user with file editor permissions to achieve Remote Code Execution RCE. By leveraging the file creation and save endpoints, an attacker can upload and execute arbitrary PHP code on the server. Vulnerability...
GHSA-GP56-F67F-M4PX CI4MS Vulnerable to Remote Code Execution (RCE) via Arbitrary File Creation and Save in File Editor
Summary A critical vulnerability has been identified in CI4MS that allows an authenticated user with file editor permissions to achieve Remote Code Execution RCE. By leveraging the file creation and save endpoints, an attacker can upload and execute arbitrary PHP code on the server. Vulnerability...
GHSA-M7J5-R2P5-C39R picklescan vulnerable to arbitrary file create using logging.FileHandler
Summary Unsafe pickle deserialization allows unauthenticated attackers to perform Arbitrary File Creation. By chaining the logging.FileHandler class, an attacker can bypass RCE-focused blocklists to create empty files on the server. The vulnerability allows creating zero-byte files in arbitrary...
picklescan vulnerable to arbitrary file create using logging.FileHandler
Summary Unsafe pickle deserialization allows unauthenticated attackers to perform Arbitrary File Creation. By chaining the logging.FileHandler class, an attacker can bypass RCE-focused blocklists to create empty files on the server. The vulnerability allows creating zero-byte files in arbitrary...