Lucene search
+L

12261 matches found

Positive Technologies
Positive Technologies
•added 2025/01/22 12:00 a.m.•22 views

PT-2025-5087 · Unknown · Wm Options Import Export

Name of the Vulnerable Software and Affected Versions: WM Options Import Export versions 1.0.1 and earlier Description: The issue allows for the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. This can potentially expose confidential information...

7.5CVSS9.3AI score0.00607EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/01/22 12:00 a.m.•25 views

WordPress Plugin AI Power code issue vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

7.2CVSS8.4AI score0.00653EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/01/22 12:00 a.m.•27 views

PT-2025-3883 · WordPress · Ai Power: Complete Ai Pack

Name of the Vulnerable Software and Affected Versions: AI Power: Complete AI Pack plugin for WordPress versions up to, and including, 1.8.96 Description: The issue allows authenticated attackers with administrative privileges to inject a PHP Object via deserialization of untrusted input from the...

7.2CVSS8.5AI score0.00653EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2025/01/22 12:00 a.m.•25 views

PT-2025-3884 · Unknown · Ai Power: Complete Ai Pack

Name of the Vulnerable Software and Affected Versions: AI Power: Complete AI Pack versions up to, and including, 1.8.96 Description: The issue concerns a PHP Object Injection vulnerability. It arises from the deserialization of untrusted input from the post content variable through the wpaicg...

7.2CVSS8.5AI score0.00653EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/22 12:00 a.m.•9 views

CVE-2025-23781: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in Web Mumbai WM Options Import Export wm-options-import-export allows Retrieve Embedded Sensitive Data.This issue affects WM Options Import Export: from n/a through = 1.0.1...

7.5CVSS8.6AI score0.00607EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/22 12:00 a.m.•14 views

PT-2025-11312 · Git +1 · Assimp

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: The software is susceptible to an unknown read crash during scene copying. The crash occurs within the Assimp::SceneCombiner::CopyScene function, triggered through the Assimp::Exporter::Expo...

6.8AI score
SaveExploits0References2
CNNVD
CNNVD
•added 2025/01/22 12:00 a.m.•20 views

WordPress plugin WM Options Import Export has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exis...

7.5CVSS8.2AI score0.00607EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/01/21 12:00 a.m.•22 views

UserData service Import Export DoS

The vulnerability of the import/export function of the UserData service in the Mercedes-Benz MBUX multimedia system is related to errors in data type mixing. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS7.5AI score0.00333EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/01/20 12:00 a.m.•29 views

PT-2025-1392 · Mercedes Benz · Ntg 6

Name of the Vulnerable Software and Affected Versions: Mercedes Benz NTG 6 affected versions not specified Description: An issue exists in the user data import/export function of NTG 6 head units, where a possible integer overflow can occur. To exploit this, an attacker needs local access to the...

3.3CVSS7.2AI score0.00222EPSS
SaveExploits0References6
osv_ubuntu
osv_ubuntu
•added 2025/01/19 12:15 p.m.•16 views

UBUNTU-CVE-2024-57924

In the Linux kernel, the following vulnerability has been resolved: fs: relax assertions on failure to encode file handles Encoding file handles is usually performed by a filesystem encodefh method that may fail for various reasons. The legacy users of exportfsencodefh, namely, nfsd and...

5.5CVSS6.3AI score0.00276EPSS
SaveExploits0References18
GithubExploit
GithubExploit
•added 2025/01/17 11:13 a.m.•298 views

Exploit for CVE-2024-54262

CVE-2024-54262 Exploit CVE-2024-54262: Arbitrary File Upload i...

9.9CVSS9.8AI score0.01471EPSS
SaveExploits2
NVD
NVD
•added 2025/01/17 7:15 a.m.•27 views

CVE-2024-12637

The Moving Users plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.05 via the export functionality. The JSON files are stored in predictable locations with guessable file names when exporting user data. This could allow unauthenticated...

5.3CVSS0.00538EPSS
SaveExploits0References3
CVE
CVE
•added 2025/01/17 7:01 a.m.•63 views

CVE-2024-12637

Public technical details about CVE-2024-12637 are not provided in the Connected documents. The Initial Description notes Sensitive Information Exposure via export in Moving Users (WordPress) up to v1.05, but no further technical specifics or patches are included here.

5.3CVSS8.2AI score0.00538EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/01/17 7:01 a.m.•37 views

CVE-2024-12637 Moving Users <= 1.05 - Unauthenticated Sensitive Information Exposure

The Moving Users plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.05 via the export functionality. The JSON files are stored in predictable locations with guessable file names when exporting user data. This could allow unauthenticated...

5.3CVSS0.00538EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/01/17 12:00 a.m.•26 views

PT-2025-1199 · Mercedes Benz · Ntg 6

Name of the Vulnerable Software and Affected Versions: Mercedes Benz NTG New Telematics Generation 6 Description: A possible type confusion exists in the user data import/export function of NTG 6 head units. To perform this attack, local access to the USB interface of the car is needed. With...

4.9CVSS6.4AI score0.00333EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/17 12:00 a.m.•8 views

CVE-2024-12637: Exposure of Sensitive Information to an Unauthorized Actor

The Moving Users plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.05 via the export functionality. The JSON files are stored in predictable locations with guessable file names when exporting user data. This could allow unauthenticated...

5.3CVSS8.4AI score0.00538EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/17 12:00 a.m.•23 views

PT-2025-1231 · Mercedes Benz · Mercedes-Benz Head-Unit Ntg6

Name of the Vulnerable Software and Affected Versions: Mercedes-Benz head-unit NTG6 affected versions not specified Description: The issue is related to the import or export of profile settings over USB in the Mercedes-Benz head-unit NTG6. Some values are serialized using the boost library, which...

9.8CVSS6.4AI score0.00834EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2025/01/17 12:00 a.m.•20 views

PT-2025-1922 · WordPress · Moving Users

Name of the Vulnerable Software and Affected Versions: Moving Users plugin for WordPress versions up to and including 1.05 Description: The Moving Users plugin for WordPress is vulnerable to sensitive information exposure in its export functionality. This issue arises because JSON files are store...

5.3CVSS9.2AI score0.00538EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/01/17 12:00 a.m.•20 views

PT-2025-2135 · WordPress · Sandbox

Name of the Vulnerable Software and Affected Versions: The Sandbox plugin for WordPress versions up to, and including, 0.4 Description: The issue arises from a missing capability check on the export download action, allowing authenticated attackers with Subscriber-level access and above to downlo...

6.5CVSS9.2AI score0.00378EPSS
SaveExploits0References6
Patchstack
Patchstack
•added 2025/01/16 6:42 p.m.•22 views

WordPress WM Options Import Export plugin <= 1.0.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Mika in WordPress Plugin WM Options Import Export versions = 1.0.1...

7.5CVSS7AI score0.00607EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder