Lucene search
+L

13401 matches found

Patchstack
Patchstack
added 2025/12/20 8:08 p.m.11 views

WordPress Cinerama theme <= 2.9 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Cinerama versions = 2.9...

9.8CVSS5.4AI score0.00451EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/12/20 3:13 p.m.11 views

WordPress Aora theme <= 1.3.15 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Aora versions = 1.3.15...

9.8CVSS7AI score0.00451EPSS
SaveExploits0Affected Software1
Circl
Circl
added 2025/12/19 11:50 p.m.9 views

CVE-2023-53945

creationtimestamp| type| source ---|---|--- 2025-12-19 23:50:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maeuz6ecfk2c 2025-12-22 00:08:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3majwwslswq2u...

8.8CVSS5.8AI score0.01085EPSS
SaveExploits1References2
OSV
OSV
added 2025/12/18 9:15 p.m.6 views

DEBIAN-CVE-2025-59529

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions up to and including 0.9-rc2, the simple protocol server ignores the documented client limit and accepts unlimited connections, allowing for easy local DoS. Although CLIENTSMAX ...

5.5CVSS5.2AI score0.00175EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2025/12/18 12:00 a.m.5 views

Mozilla Firefox < 3.6.9

The version of Firefox installed on the remote Windows host is prior to 3.6.9. It is, therefore, affected by a vulnerability as referenced in the mfsa2010-63 advisory. - Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0...

4.3CVSS8.3AI score0.02001EPSS
SaveExploits0References3
Oracle linux
Oracle linux
added 2025/12/18 12:00 a.m.10 views

python-kdcproxy security update

0.3.2-3.0.1 - Use DNS discovery for declared realms only CVE-2025-59088 Orabug: 38745300 - Fix DoS vulnerability based on unbounded TCP buffering CVE-2025-59089...

8.6CVSS7AI score0.00522EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2025/12/17 6:29 p.m.208 views

DEM-Bravo

DEM — Docker Exploit Mapper Welcome to DEM, a fully cont...

8.1AI score
SaveExploits0
Cvelist
Cvelist
added 2025/12/16 6:07 p.m.39 views

CVE-2025-46294

To enhance security, the FileMaker Server 22.0.4 installer now includes an option to disable IIS short filename enumeration by setting NtfsDisable8dot3NameCreation in the Windows registry. This prevents attackers from using the tilde character to discover hidden files and directories. This...

0.00229EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/12/16 5:54 p.m.171 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Scan !Pythonhttps://img.shields.io/badge/python-3.1...

10CVSS7.5AI score0.99802EPSS
SaveExploits386
Circl
Circl
added 2025/12/16 5:45 p.m.6 views

CVE-2025-68284

creationtimestamp| type| source ---|---|--- 2025-12-16 17:45:01+00:00| seen| https://gist.github.com/Darkcrai86/348699d63f3e3b924f0b688c282a67dc 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...

9.8CVSS6AI score0.00575EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/12/16 3:30 p.m.6 views

EUVD-2025-203629

A flaw was found in ose-openshift-apiserver. This vulnerability allows internal network enumeration, service discovery, limited information disclosure, and potential denial-of-service DoS through Server-Side Request Forgery SSRF due to missing IP address and network-range validation when processi...

8.5CVSS5.8AI score0.00337EPSS
SaveExploits0References4
NVD
NVD
added 2025/12/16 1:15 p.m.14 views

CVE-2025-14443

A flaw was found in ose-openshift-apiserver. This vulnerability allows internal network enumeration, service discovery, limited information disclosure, and potential denial-of-service DoS through Server-Side Request Forgery SSRF due to missing IP address and network-range validation when processi...

6.4CVSS0.00337EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/16 12:14 p.m.50 views

CVE-2025-14443 Ose-openshift-apiserver: openshift api server: server-side request forgery (ssrf) vulnerability in imagestreamimport mechanism

A flaw was found in ose-openshift-apiserver. This vulnerability allows internal network enumeration, service discovery, limited information disclosure, and potential denial-of-service DoS through Server-Side Request Forgery SSRF due to missing IP address and network-range validation when processi...

6.4CVSS0.00337EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/12/16 12:14 p.m.10 views

CVE-2025-14443

A flaw was found in ose-openshift-apiserver. This vulnerability allows internal network enumeration, service discovery, limited information disclosure, and potential denial-of-service DoS through Server-Side Request Forgery SSRF due to missing IP address and network-range validation when processi...

8.5CVSS5.8AI score0.00337EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/16 12:00 a.m.20 views

PT-2025-51557

Name of the Vulnerable Software and Affected Versions ose-openshift-apiserver affected versions not specified Description A flaw exists in ose-openshift-apiserver that permits internal network enumeration, service discovery, limited information disclosure, and potential denial-of-service DoS. Thi...

8.5CVSS6.9AI score0.00337EPSS
SaveExploits0
Patchstack
Patchstack
added 2025/12/15 1:30 p.m.13 views

WordPress WP-ShowHide plugin <= 1.05 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin WP-ShowHide versions = 1.05...

7.1CVSS6.1AI score0.00193EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/12/15 1:30 p.m.11 views

WordPress Hara theme <= 1.2.17 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Hara versions = 1.2.17...

9.8CVSS7AI score0.00435EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/12/15 1:30 p.m.16 views

WordPress Easy Invoice plugin <= 2.1.4 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tarcísio LuchesiPoystick in WordPress Plugin Easy Invoice versions = 2.1.4...

6.6CVSS7AI score0.00406EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/12/15 1:30 p.m.10 views

WordPress Listdom plugin <= 5.0.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by daroo in WordPress Plugin Listdom versions = 5.0.1...

6.5CVSS7AI score0.00264EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/12/15 1:30 p.m.9 views

WordPress TrueBooker plugin <= 1.1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by daroo in WordPress Plugin TrueBooker versions = 1.1.0...

5.3CVSS7AI score0.00204EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder