Lucene search
+L

26484 matches found

CNNVD
CNNVD
•added 2025/10/25 12:00 a.m.•22 views

WordPress plugin Edge CPT 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

8.1CVSS6.5AI score0.00469EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/24 8:15 a.m.•19 views

CVE-2025-62868

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Edge-Themes Edge CPT allows PHP Local File Inclusion.This issue affects Edge CPT: from n/a through 1.4...

8.1CVSS0.00469EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/24 7:52 a.m.•10 views

CVE-2025-62868 WordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Edge-Themes Edge CPT allows PHP Local File Inclusion.This issue affects Edge CPT: from n/a through 1.4...

8.1CVSS5.8AI score0.00469EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/24 7:52 a.m.•36 views

CVE-2025-62868 WordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Edge-Themes Edge CPT allows PHP Local File Inclusion.This issue affects Edge CPT: from n/a through 1.4...

8.1CVSS0.00469EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/24 7:52 a.m.•65 views

CVE-2025-62868

Summary: CVE-2025-62868 corresponds to a Local File Inclusion (LFI) vulnerability in the WordPress Edge CPT plugin (versions through 1.4). The issue stems from improper control of filenames used in include/require, enabling inclusion of local files via PHP. Affected product: Edge CPT for WordPres...

8.1CVSS5.8AI score0.00469EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/24 7:52 a.m.•19 views

EUVD-2025-35824

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Edge-Themes Edge CPT allows PHP Local File Inclusion.This issue affects Edge CPT: from n/a through 1.4...

8.1CVSS6.5AI score0.00469EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/24 12:00 a.m.•7 views

CVE-2025-62868: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Edge-Themes Edge CPT allows PHP Local File Inclusion.This issue affects Edge CPT: from n/a through 1.4...

8.1CVSS5.8AI score0.00469EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/24 12:00 a.m.•17 views

PT-2025-43603

Name of the Vulnerable Software and Affected Versions Edge CPT versions through 1.4 Description An improper control of filename for include/require statement exists in Edge CPT, leading to a PHP Local File Inclusion issue. This allows for the inclusion of local files within the application...

8.1CVSS5.7AI score0.00469EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/10/23 12:00 a.m.•20 views

Arista Edge Threat Management - Arista Next Generation Firewall Versions 安全漏洞

Arista Edge Threat Management - Arista Next Generation Firewall Versions is a next-generation firewall from Arista USA. A security vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall Versions, which stems from improper authentication, where Captive Portal may...

8.8CVSS6.7AI score0.0053EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/23 12:00 a.m.•30 views

Arista Edge Threat Management - Arista Next Generation Firewall Versions 安全漏洞

Arista Edge Threat Management - Arista Next Generation Firewall Versions is a next-generation firewall from Arista USA. A security vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall Versions, which stems from a Captive Portal that could expose sensitive...

7.5CVSS6.6AI score0.00483EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2025/10/23 12:00 a.m.•25 views

Arista Edge Threat Management - Arista Next Generation Firewall Versions 安全漏洞

Arista Edge Threat Management - Arista Next Generation Firewall Versions is a next-generation firewall from Arista USA. A security vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall Versions that stems from a diagnostic command injection flaw...

7.2CVSS7.3AI score0.13434EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/10/23 12:00 a.m.•15 views

The vulnerability of the Microsoft Edge browser’s Media component, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft Edge browser’s Media component is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

7.6CVSS8.5AI score0.00376EPSS
SaveExploits0References8Affected Software3
Positive Technologies
Positive Technologies
•added 2025/10/23 12:00 a.m.•12 views

PT-2025-45396

Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified Description A flaw exists in Google Chrome that could allow attackers to impact the system. The issue is related to an inappropriate implementation in V8. Microsoft Edge, being Chromium-based, is...

8.8CVSS6.9AI score0.0027EPSS
SaveExploits0References64
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/10/21 6:16 a.m.•14 views

Malicious code in bcrypt-js-edge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bca5605febed4ebf8f03746e572ca1fb05186ff2714f0f1c34842fc4858f9fa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Snyk
Snyk
•added 2025/10/21 6:16 a.m.•9 views

Malicious Package

Overview bcrypt-js-edge is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
EUVD
EUVD
•added 2025/10/21 6:16 a.m.•5 views

EUVD-2025-35142

Malicious code in bcrypt-js-edge npm...

6.6AI score
SaveExploits0References1
OSV
OSV
•added 2025/10/21 6:16 a.m.•8 views

MAL-2025-48530 Malicious code in bcrypt-js-edge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bca5605febed4ebf8f03746e572ca1fb05186ff2714f0f1c34842fc4858f9fa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2025/10/21 12:00 a.m.•11 views

Microsoft Edge (Chromium-Based) Use after free Vulnerability (Oct 2025)

Microsoft Edge Chromium-Based is prone to an use after free vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.8CVSS7.4AI score0.00414EPSS
SaveExploits0References1
Arista
Arista
•added 2025/10/21 12:00 a.m.•75 views

Security Advisory 0123

Security Advisory 0123 PDF Date: October 21, 2025 Revision | Date | Changes ---|---|--- 1.0 | October 21, 2025 | Initial release Description Several vulnerabilities exist for the Arista Edge Threat Management - Arista NG Firewall NGFW: 1 Description : Captive Portal can expose sensitive informati...

8.8CVSS7.4AI score0.13434EPSS
SaveExploits2
BDU FSTEC
BDU FSTEC
•added 2025/10/21 12:00 a.m.•23 views

The vulnerability of the Tab component in Microsoft Edge and Google Chrome browsers allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Tab component in Microsoft Edge and Google Chrome relates to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

3.1CVSS7AI score0.00233EPSS
SaveExploits0References10Affected Software5
Rows per page
Query Builder