Lucene search
+L

19778 matches found

Positive Technologies
Positive Technologies
•added 2025/03/11 12:00 a.m.•28 views

PT-2025-26894 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...

3.3CVSS3.9AI score0.00244EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/11 12:00 a.m.•5 views

CVE-2025-0900: Out-of-bounds Read

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

3.3CVSS5.6AI score0.00243EPSS
SaveExploits0References1
Fedora
Fedora
•added 2025/03/10 4:14 p.m.•21 views

[SECURITY] Fedora 42 Update: emacs-30.1-5.fc42

GNU Emacs is a powerful, customizable, self-documenting, modeless text editor. It contains special code editing features, a scripting language elisp, and the capability to read mail, news, and more without leaving the editor. This package provides an emacs binary with support for Wayland, using t...

6.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/03/10 2:38 a.m.•20 views

CVE-2024-13890

The Allow PHP Execute plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 1.0. This is due to allowing PHP code to be entered by all users for whom unfiltered HTML is allowed. This makes it possible for authenticated attackers, with Editor-level access a...

7.2CVSS7.3AI score0.00471EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/03/08 3:15 a.m.•20 views

CVE-2024-13890

The Allow PHP Execute plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 1.0. This is due to allowing PHP code to be entered by all users for whom unfiltered HTML is allowed. This makes it possible for authenticated attackers, with Editor-level access a...

7.2CVSS5.8AI score0.00471EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/03/08 2:30 a.m.•18 views

WordPress Allow PHP Execute plugin <= 1.0 - Authenticated (Editor+) PHP Code Injection vulnerability

Authenticated Editor+ PHP Code Injection vulnerability discovered by Francesco Carlucci in WordPress Plugin Allow PHP Execute versions = 1.0...

7.2CVSS7.4AI score0.00471EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/03/08 2:24 a.m.•29 views

CVE-2024-13890 Allow PHP Execute <= 1.0 - Authenticated (Editor+) PHP Code Injection

The Allow PHP Execute plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 1.0. This is due to allowing PHP code to be entered by all users for whom unfiltered HTML is allowed. This makes it possible for authenticated attackers, with Editor-level access a...

7.2CVSS0.00471EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/03/08 2:24 a.m.•10 views

CVE-2024-13890 Allow PHP Execute <= 1.0 - Authenticated (Editor+) PHP Code Injection

The Allow PHP Execute plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 1.0. This is due to allowing PHP code to be entered by all users for whom unfiltered HTML is allowed. This makes it possible for authenticated attackers, with Editor-level access a...

7.2CVSS7.4AI score0.00471EPSS
SaveExploits0References2
CVE
CVE
•added 2025/03/08 2:24 a.m.•69 views

CVE-2024-13890

CVE-2024-13890 affects the WordPress plugin Allow PHP Execute (

7.2CVSS7AI score0.00471EPSS
SaveExploits0References2Affected Software1
Fedora
Fedora
•added 2025/03/08 1:36 a.m.•14 views

[SECURITY] Fedora 40 Update: vim-9.1.1169-1.fc40

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

7.1CVSS7AI score0.22474EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/08 12:00 a.m.•9 views

CVE-2024-13890: Improper Control of Generation of Code

The Allow PHP Execute plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 1.0. This is due to allowing PHP code to be entered by all users for whom unfiltered HTML is allowed. This makes it possible for authenticated attackers, with Editor-level access a...

7.2CVSS5.6AI score0.00471EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/08 12:00 a.m.•7 views

CVE-2024-13882: Unrestricted Upload of File with Dangerous Type

The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aiomaticgeneratefeaturedimage' function in all versions up to, and including, 2.3.8. This makes...

8.8CVSS6.2AI score0.00759EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/08 12:00 a.m.•9 views

CVE-2024-13816: Missing Authorization

The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability checks on multiple functions in all versions up to, and including, 2.3.6. This mak...

5.4CVSS5.7AI score0.00238EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/08 12:00 a.m.•7 views

PT-2025-10422

Name of the Vulnerable Software and Affected Versions Allow PHP Execute plugin for WordPress versions prior to 1.1 Description The issue allows PHP code to be entered by all users for whom unfiltered HTML is allowed, making it possible for authenticated attackers with Editor-level access and abov...

7.2CVSS0.00471EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2025/03/07 12:00 a.m.•16 views

PT-2025-26884 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability, as the...

7.8CVSS7.7AI score0.00286EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/03/07 12:00 a.m.•14 views

PT-2025-26886 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

7.8CVSS7.7AI score0.0027EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/03/07 12:00 a.m.•28 views

PT-2025-26887 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...

3.3CVSS3.8AI score0.00244EPSS
SaveExploits0References7
Redos
Redos
•added 2025/03/07 12:00 a.m.•93 views

ROS-20250307-11

A vulnerability in the src/main.c file of the vim text editor is related to manipulation of the -log argument, resulting in memory corruption. Exploitation of the vulnerability could allow an attacker to cause a denial of denial of service A vulnerability in the strtoreg function of the src/main....

7.8CVSS7.2AI score0.00541EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2025/03/07 12:00 a.m.•22 views

PT-2025-26888 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

7.8CVSS7.8AI score0.00286EPSS
SaveExploits0References7
Fedora
Fedora
•added 2025/03/06 2:20 a.m.•16 views

[SECURITY] Fedora 41 Update: vim-9.1.1169-1.fc41

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

7.1CVSS7.3AI score0.22474EPSS
SaveExploits0
Rows per page
Query Builder