Lucene search
+L

17422 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/05 12:00 a.m.•0 views

CVE-2025-69619: Improper Limitation of a Pathname to a Restricted Directory

A path traversal in My Text Editor v1.6.2 allows attackers to cause a Denial of Service DoS via writing files to the internal storage...

5.5CVSS5.8AI score0.00242EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/02/05 12:00 a.m.•16 views

zipperapp My Text Editor 安全漏洞

Zipperapp My Text Editor is an Android text editor developed by the South Korean company zipperapp. Version 1.6.2 of Zipperapp My Text Editor contains a security vulnerability caused by path traversal attacks. Attackers can exploit this vulnerability by writing files to internal storage, leading ...

5.5CVSS5.8AI score0.00242EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/02/05 12:00 a.m.•25 views

PT-2026-6032

Name of the Vulnerable Software and Affected Versions ShortPixel Image Optimizer plugin for WordPress versions prior to 6.4.3 Description The ShortPixel Image Optimizer plugin for WordPress is susceptible to unauthorized file access through a path traversal flaw. This issue stems from inadequate...

4.9CVSS5.7AI score0.00551EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/05 12:00 a.m.•1 views

CVE-2026-1246: Improper Limitation of a Pathname to a Restricted Directory

The ShortPixel Image Optimizer plugin for WordPress is vulnerable to Arbitrary File Read via path traversal in the 'loadFile' parameter in all versions up to, and including, 6.4.2 due to insufficient path validation and sanitization in the 'loadLogFile' AJAX action. This makes it possible for...

4.9CVSS5.8AI score0.00551EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/05 12:00 a.m.•43 views

CVE-2025-69619

A path traversal in My Text Editor v1.6.2 allows attackers to cause a Denial of Service DoS via writing files to the internal storage...

0.00242EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/05 12:00 a.m.•1 views

CVE-2026-1268: Improper Neutralization of Input During Web Page Generation

The Dynamic Widget Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the widget content field in the Gutenberg editor sidebar in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping on user-supplied attributes. This makes ...

6.4CVSS6AI score0.00306EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/05 12:00 a.m.•29 views

CVE-2025-69619

A path traversal in My Text Editor v1.6.2 allows attackers to cause a Denial of Service DoS via writing files to the internal storage...

5.5CVSS5.4AI score0.00242EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/05 12:00 a.m.•4 views

CVE-2025-69619

A path traversal in My Text Editor v1.6.2 allows attackers to cause a Denial of Service DoS via writing files to the internal storage...

5.4AI score0.00242EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/02/05 12:00 a.m.•14 views

PT-2026-6594

Name of the Vulnerable Software and Affected Versions My Text Editor version 1.6.2 Description A path traversal issue exists in My Text Editor version 1.6.2. This can allow attackers to cause a Denial of Service DoS by writing files to the internal storage. The issue involves manipulating file...

7.5CVSS5.5AI score0.00242EPSS
SaveExploits1References7
EUVD
EUVD
•added 2026/02/05 12:00 a.m.•12 views

EUVD-2025-206859

A path traversal in My Text Editor v1.6.2 allows attackers to cause a Denial of Service DoS via writing files to the internal storage...

7.5CVSS5.4AI score0.00242EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/02/05 12:00 a.m.•4 views

CVE-2025-69619

A path traversal in My Text Editor v1.6.2 allows attackers to cause a Denial of Service DoS via writing files to the internal storage...

5.4AI score0.00242EPSS
SaveExploits1References5
Wired Threat Level
Wired Threat Level
•added 2026/02/04 7:52 p.m.•19 views

Notepad++ Users, You May Have Been Hacked by China

Suspected Chinese state-backed hackers hijacked the Notepad++ update infrastructure to deliver a backdoored version of the popular free source code editor and note-taking app for Windows...

5.5AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/02/04 1:20 p.m.•14 views

CVE-2026-1592

Foxit PDF Editor Cloud pdfonline contains a stored cross-site scripting vulnerability in the Create New Layer feature. Unsanitized user input is embedded into the HTML output, allowing arbitrary JavaScript execution when the layer is referenced. This issue affects pdfonline.foxit.com: before...

6.3CVSS5.4AI score0.00203EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/04 1:20 p.m.•12 views

CVE-2026-1591

Foxit PDF Editor Cloud pdfonline contains a stored cross-site scripting vulnerability in the file upload feature. A malicious username is embedded into the upload file list without proper escaping, allowing arbitrary JavaScript execution when the list is displayed. This issue affects...

6.3CVSS5.3AI score0.00203EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/04 3:15 a.m.•23 views

CVE-2025-61656

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation VisualEditor. This vulnerability is associated with program files src/ce/ve.Ce.ClipboardHandler.Js. This issue affects VisualEditor: from before 1.39.14, 1.43.4, 1.44.1...

5.2AI score0.00158EPSS
SaveExploits0References1
Fedora
Fedora
•added 2026/02/04 2:11 a.m.•15 views

[SECURITY] Fedora 43 Update: python-jupytext-1.19.1-1.fc43

Have you always wished Jupyter notebooks were plain text documents? Wished you could edit them in your favorite IDE? And get clear and meaningful diffs when doing version control? Then... Jupytext may well be the tool you're looking for! Jupytext is a plugin for Jupyter that can save Jupyter...

8.2CVSS5.9AI score0.0185EPSS
SaveExploits0
Fedora
Fedora
•added 2026/02/04 2:05 a.m.•15 views

[SECURITY] Fedora 42 Update: python-jupytext-1.19.1-1.fc42

Have you always wished Jupyter notebooks were plain text documents? Wished you could edit them in your favorite IDE? And get clear and meaningful diffs when doing version control? Then... Jupytext may well be the tool you're looking for! Jupytext is a plugin for Jupyter that can save Jupyter...

8.2CVSS5.9AI score0.0185EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/02/04 12:00 a.m.•8 views

Microhard IPn4G Cellular Gateways Path Traversal (CVE-2018-25144)

Microhard Systems IPn4G 1.1.0 contains an authentication bypass vulnerability in the hidden system-editor.sh script that allows authenticated attackers to read, modify, or delete arbitrary files. Attackers can exploit unsanitized 'path', 'savefile', 'edit', and 'delfile' parameters to perform...

9.8CVSS5.5AI score0.00482EPSS
SaveExploits2References5
Tenable Nessus
Tenable Nessus
•added 2026/02/04 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2025-67850

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in moodle. This vulnerability, known as Cross-Site Scripting XSS, occurs due to insufficient checks on user-provided data in the formula editor...

7.3CVSS6.1AI score0.00282EPSS
SaveExploits0References2
NVD
NVD
•added 2026/02/03 10:16 p.m.•16 views

CVE-2026-25510

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.28.5.0, an authenticated user with file editor permissions can achieve Remote Code Execution RCE by leveraging the file creation and sav...

9.9CVSS0.00961EPSS
SaveExploits1References2
Rows per page
Query Builder