Lucene search
+L

2696 matches found

Patchstack
Patchstack
added 2025/09/03 3:18 p.m.9 views

WordPress Exit Intent Popup Plugin <= 1.0.1 - Server Side Request Forgery (SSRF) Vulnerability

Server Side Request Forgery SSRF Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Exit Intent Popup versions = 1.0.1...

5.4CVSS6.8AI score0.00171EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/09/03 3:15 p.m.10 views

CVE-2025-58641

Server-Side Request Forgery SSRF vulnerability in kamleshyadav Exit Intent Popup exitintentpopup allows Server Side Request Forgery.This issue affects Exit Intent Popup: from n/a through = 1.0.1...

5.4CVSS0.00171EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/03 2:36 p.m.5 views

CVE-2025-58641 WordPress Exit Intent Popup Plugin <= 1.0.1 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in kamleshyadav Exit Intent Popup exitintentpopup allows Server Side Request Forgery.This issue affects Exit Intent Popup: from n/a through = 1.0.1...

5.4CVSS5.9AI score0.00171EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/03 2:36 p.m.14 views

CVE-2025-58641

CVE-2025-58641 – WordPress Exit Intent Popup SSRF A SSRF vulnerability exists in the kamleshyadav Exit Intent Popup WordPress plugin for versions

5.4CVSS5.9AI score0.00171EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/03 2:36 p.m.16 views

CVE-2025-58641 WordPress Exit Intent Popup Plugin <= 1.0.1 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in kamleshyadav Exit Intent Popup exitintentpopup allows Server Side Request Forgery.This issue affects Exit Intent Popup: from n/a through = 1.0.1...

5.4CVSS0.00171EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/03 12:0 a.m.13 views

PT-2025-35769

Name of the Vulnerable Software and Affected Versions: kamleshyadav Exit Intent Popup versions n/a through 1.0.1 Description: A Server-Side Request Forgery SSRF vulnerability exists in kamleshyadav Exit Intent Popup. This issue allows attackers to perform Server Side Request Forgery...

5.4CVSS6.4AI score0.00171EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/09/03 12:0 a.m.5 views

WordPress plugin Exit Intent Popup 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

5.4CVSS6.8AI score0.00171EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/01 12:0 a.m.6 views

PT-2025-51590

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the cpufreq/longhaul component. Specifically, the longhaul exit function calls cpufreq cpu get0 without verifying if the policy pointer is NULL...

5.5CVSS5.3AI score0.00188EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/09/01 12:0 a.m.7 views

Vulnerability of the cc_cipher_exit() function in the drivers/crypto/ccree/cc_cipher.c module – The driver for the Linux kernel’s cryptographic accelerator, which allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the cccipherexit function in the drivers/crypto/ccree/cccipher.c module – Linux’s cryptographic acceleration driver is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

7.8CVSS6.7AI score0.00262EPSS
SaveExploits0References12Affected Software1
Packet Storm
Packet Storm
added 2025/08/26 12:0 a.m.202 views

📄 Ilevia EVE X1/X5 Server 4.7.18.0.eden Authentication Bypass

Ilevia EVE X1/X5 Server versions 4.7.18.0.eden and below construct a shell command using unsanitized user input passed to the system function, calling an external binary for authentication. Due to improper input handling and reliance on the binary's return value for access control, an attacker ca...

8AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
added 2025/08/26 12:0 a.m.232 views

Ilevia EVE X1/X5 Server 4.7.18.0.eden Authentication Bypass Exploit

Summary EVE is a smart home and building automation solution designed for both residential and commercial environments, including malls, hotels, restaurants, bars, gyms, spas, boardrooms, and offices. It enables comprehensive control and monitoring of electrical installations through a highly...

9.8CVSS6AI score0.00822EPSS
SaveExploits2
OSV
OSV
added 2025/08/22 4:15 p.m.14 views

UBUNTU-CVE-2025-38671

In the Linux kernel, the following vulnerability has been resolved: i2c: qup: jump out of the loop in case of timeout Original logic only sets the return value but doesn't jump out of the loop if the bus is kept active by a client. This is not expected. A malicious or buggy i2c client can hang th...

5.5CVSS5.9AI score0.00159EPSS
SaveExploits0References39
CVE
CVE
added 2025/08/22 4:3 p.m.68 views

CVE-2025-38671

CVE-2025-38671 affects the Linux kernel i2c: qup driver. Root cause: timeout handling only set a return value and did not exit the loop when a client keeps the bus active, enabling kernel hang (observed with PCA953x GPIO extender). Fix: change the logic to return via -ETIMEDOUT, jumping out of th...

5.5CVSS6.4AI score0.00159EPSS
SaveExploits0References10Affected Software1
OSV
OSV
added 2025/08/22 4:3 p.m.16 views

CVE-2025-38671 i2c: qup: jump out of the loop in case of timeout

In the Linux kernel, the following vulnerability has been resolved: i2c: qup: jump out of the loop in case of timeout Original logic only sets the return value but doesn't jump out of the loop if the bus is kept active by a client. This is not expected. A malicious or buggy i2c client can hang th...

7.2AI score
SaveExploits0References13
NVD
NVD
added 2025/08/22 2:15 p.m.9 views

CVE-2024-58239

In the Linux kernel, the following vulnerability has been resolved: tls: stop recv if initial processrxlist gave us non-DATA If we have a non-DATA record on the rxlist and another record of the same type still on the queue, we will end up merging them: - processrxlist copies the non-DATA record -...

8.2CVSS0.00339EPSS
SaveExploits2References7
AstraLinux
AstraLinux
added 2025/08/22 11:49 a.m.6 views

Astra Linux – Vulnerability in OpenVPN

In OpenVPN versions 2.6.0 through 2.6.10, when the server role is used, it accepts multiple exit notifications from authenticated clients, which extends the validity of a closing session...

4.3CVSS6.5AI score0.00665EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-38404

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: usb: typec: displayport: Fix potential deadlock The deadlock can occur due to a recursive lo...

5.5CVSS5.4AI score0.00129EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/16 1:22 p.m.36 views

CVE-2023-32246 ksmbd: call rcu_barrier() in ksmbd_server_exit()

In the Linux kernel, the following vulnerability has been resolved: ksmbd: call rcubarrier in ksmbdserverexit racy issue is triggered the bug by racing between closing a connection and rmmod. In ksmbd, rcubarrier is not called at module unload time, so nothing prevents ksmbd from getting unloaded...

0.00168EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2025-38424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf: Fix sample vs doexit Baisheng Gao reported an ARM64 crash, which Mark decoded as being a synchronous external abort -- most likely due to trying to access...

7.8CVSS6.5AI score0.00179EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/08/13 12:0 a.m.7 views

The vulnerability of the do_exit() function in the Linux operating system’s kernel component allows a hacker to cause a service failure.

The vulnerability of the doexit function in the Linux operating system’s kernel component is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

7CVSS6.9AI score0.00179EPSS
SaveExploits0References20Affected Software8
Rows per page
Query Builder