WordPress Revo theme <= 4.0.26 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Bonds in WordPress Theme Revo versions = 4.0.26...

CVE-2022-38092

creationtimestamp| type| source ---|---|--- 2025-05-28 19:59:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqayjdmied2o...

The Windows Registry Adventure #7: Attack surface analysis

Posted by Mateusz Jurczyk, Google Project Zero In the first three blog posts of this series, I sought to outline what the Windows Registry actually is, its role, history, and where to find further information about it. In the subsequent three posts, my goal was to describe in detail how this...

CVE-2021-29937

An issue was discovered in the telemetry crate through 2021-02-17 for Rust. There is a drop of uninitialized memory if a value.clone call panics within misc::vecwithsize...

CVE-2020-13813

An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted DLL in the current working directory when FoxitStudioPhoto3663.6.6.916.exe is used...

WordPress Entrada Theme <= 5.7.7 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Bonds in WordPress Theme Entrada versions = 5.7.7...

WordPress TableOn plugin <= 1.0.4.4 - Content Injection vulnerability

Content Injection vulnerability discovered by ch4r0n in WordPress Plugin TableOn versions = 1.0.4.4...

WordPress Winnex theme <= 1.3.2 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Tran Nguyen Bao KhanhVCI - VNPT in WordPress Theme Winnex versions = 1.3.2...

WordPress Butcher theme <= 2.40 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh in WordPress Theme Butcher versions = 2.40...

WordPress Avantage Theme <= 2.4.9 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Avantage versions = 2.4.9...

WordPress CouponXL theme <= 4.5.0 - Privilege Escalation Vulnerability

Privilege Escalation Vulnerability discovered by Bonds in WordPress Theme CouponXL versions = 4.5.0...

Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2025-1213)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Plant - Gardening & Houseplants WordPress Theme <= 1.0.0 - Sensitive Data Exposure Vulnerability

WordPress Plant - Gardening & Houseplants WordPress Theme = 1.0.0 - Sensitive Data Exposure Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Plant - Gardening & Houseplants WordPress Theme versions = 1.0.0...

Ubuntu: Security Advisory (USN-7500-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Drupal IFrame Remove Filter module < 2.0.5 - Unauthenticated Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS vulnerability discovered by Pierre Rudloff prudloff in WordPress Module IFrame Remove Filter versions 2.0.5...

CVE-2025-32980

creationtimestamp| type| source ---|---|--- 2025-04-25 21:08:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13539 2025-04-25 23:20:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnoedftiox2s 2025-04-26 01:52:36+00:00| seen| https://t.me/cvedetector/23790...

WordPress Vikinger theme <= 1.9.30 - Authenticated (Subscriber+) Privilege Escalation via 'vikinger_user_meta_update_ajax' vulnerability

Authenticated Subscriber+ Privilege Escalation via 'vikingerusermetaupdateajax' vulnerability discovered by Tonn in WordPress Theme Vikinger versions = 1.9.30...

WordPress Majestic Support plugin <= 1.1.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Majestic Support versions = 1.1.2...

WordPress Betheme plugin <= 28.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Theme Betheme versions = 28.0.3...

ABB Cylon Aspect 3.08.02 (uploadDb.php) - Remote Code Execution

ABB Cylon Aspect 3.08.02 uploadDb.php - Remote Code Execution Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.08.02 Summary: ASPECT is an award-winning scalable building energy management and...