Lucene search
K

3780 matches found

Packet Storm News
Packet Storm News
added 2025/11/11 12:0 a.m.5 views

Binary and Multiclass Cyberattack Classification on GeNIS Dataset

The integration of Artificial Intelligence AI in Network Intrusion Detection Systems NIDS is a promising approach to tackle the increasing sophistication of cyberattacks. However, since Machine Learning ML and Deep Learning DL models rely heavily on the quality of their training data, the lack of...

6.7AI score
Exploits0
OSV
OSV
added 2025/11/10 3:52 p.m.4 views

OPENSUSE-SU-2025:20035-1 Security update for micropython

This update for micropython fixes the following issues: Changes in micropython: - Build with mbedtls-3.6.5 instead of bundled 3.6.2 to fix CVE-2025-59438 Version 1.26.0: Added machine.I2CTarget for creating I2C target devices on multiple ports. New MCU support: STM32N6xx 800 MHz, ML accel &...

5.3CVSS5.8AI score0.00218EPSS
Exploits0References1
Oracle linux
Oracle linux
added 2025/11/10 12:0 a.m.27 views

Unbreakable Enterprise kernel security update

5.15.0-314.193.5.3 - Revert 'cpufreq: Introduce an optional cpuinfoavgfreq sysfs entry' Samasth Norway Ananda Orabug: 38633525 5.15.0-314.193.5.2 - i40e: add validation for ringlen param Lukasz Czapnik Orabug: 38607608 CVE-2025-39973 - i40e: increase max descriptors for XL710 Justin Bronder Orabu...

7.8CVSS8.2AI score0.0037EPSS
Exploits2
Packet Storm News
Packet Storm News
added 2025/11/07 12:0 a.m.3 views

A Secured Intent-Based Networking (SIBN) with Data-Driven Time-Aware Intrusion Detection

While Intent-Based Networking IBN promises operational efficiency through autonomous and abstraction-driven network management, a critical unaddressed issue lies in IBN's implicit trust in the integrity of intent ingested by the network. This inherent assumption of data reliability creates a blin...

6.8AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/11/06 3:11 a.m.9 views

CVE-2025-12582

The Features plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'featuresrevertoption AJAX endpoint in all versions up to, and including, 0.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above...

4.3CVSS5.1AI score0.00159EPSS
Exploits0References1
Fedora
Fedora
added 2025/11/06 2:24 a.m.5 views

[SECURITY] Fedora 42 Update: kddockwidgets-1.7.0-29.fc42

Qt dock widget library written by KDAB, suitable for replacing QDockWidget and implementing advanced functionalities missing in Qt...

7AI score
Exploits0
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.4 views

PT-2025-45287

Missing Authorization vulnerability in Bux Bux Woocommerce bux-woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bux Woocommerce: from n/a through = 1.2.3...

6.5CVSS7AI score0.00251EPSS
Exploits0References2
Packet Storm News
Packet Storm News
added 2025/11/06 12:0 a.m.2 views

Automated and Explainable Denial of Service Analysis for AI-Driven Intrusion Detection Systems

With the increasing frequency and sophistication of Distributed Denial of Service DDoS attacks, it has become critical to develop more efficient and interpretable detection methods. Traditional detection systems often struggle with scalability and transparency, hindering real-time response and...

6.9AI score
Exploits0
Cvelist
Cvelist
added 2025/11/05 11:24 a.m.7 views

CVE-2025-12497 Premium Portfolio Features for Phlox theme <= 2.3.10 - Unauthenticated Local File Inclusion via args[extra_template_path]

The Premium Portfolio Features for Phlox theme plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.3.10 via the 'argsextratemplatepath' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the...

8.1CVSS0.00536EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/11/05 11:24 a.m.1 views

CVE-2025-12497 Premium Portfolio Features for Phlox theme <= 2.3.10 - Unauthenticated Local File Inclusion via args[extra_template_path]

The Premium Portfolio Features for Phlox theme plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.3.10 via the 'argsextratemplatepath' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the...

8.1CVSS7AI score0.00536EPSS
Exploits0References2
NVD
NVD
added 2025/11/05 3:15 a.m.5 views

CVE-2025-12582

The Features plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'featuresrevertoption AJAX endpoint in all versions up to, and including, 0.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above...

4.3CVSS0.00159EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/11/05 2:25 a.m.5 views

CVE-2025-12582 Features <= 0.0.2 - Missing Authorization to Authenticated (Subscriber+) Option Reset

The Features plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'featuresrevertoption AJAX endpoint in all versions up to, and including, 0.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above...

4.3CVSS0.00159EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/11/05 2:25 a.m.2 views

CVE-2025-12582 Features <= 0.0.2 - Missing Authorization to Authenticated (Subscriber+) Option Reset

The Features plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'featuresrevertoption AJAX endpoint in all versions up to, and including, 0.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above...

4.3CVSS4.7AI score0.00159EPSS
Exploits0References2
CVE
CVE
added 2025/11/05 2:25 a.m.9 views

CVE-2025-12582

The CVE-2025-12582 vulnerability affects the WordPress Features plugin up to version 0.0.2, caused by a missing capability check on the features_revert_option AJAX endpoint. This allows authenticated users with Subscriber-level access (and above) to modify data by reverting options, exposing unau...

4.3CVSS4.7AI score0.00159EPSS
Exploits0References2
Fedora
Fedora
added 2025/11/05 2:13 a.m.5 views

[SECURITY] Fedora 43 Update: uv-0.9.5-1.fc43

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

8.1CVSS6.6AI score0.00678EPSS
Exploits1
Patchstack
Patchstack
added 2025/11/05 1:18 a.m.3 views

WordPress Features plugin <= 0.0.2 - Missing Authorization to Authenticated (Subscriber+) Option Reset vulnerability

Missing Authorization to Authenticated Subscriber+ Option Reset vulnerability discovered by Nabil Irawan - Heroes Cyber Security in WordPress Module Features versions = 0.0.2...

4.3CVSS7AI score0.00159EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2025/11/05 12:0 a.m.6 views

Drupal Features Module <= 0.0.2 is vulnerable to Broken Access Control

Software Features Type Module Vulnerable versions = 0.0.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2025-12582 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 2b7c0646055d Credits Nabil Irawan - Heroes Cyber Security...

4.3CVSS5.9AI score0.00159EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/05 12:0 a.m.3 views

PT-2025-45065

Name of the Vulnerable Software and Affected Versions Features plugin for WordPress versions up to and including 0.0.2 Description The Features plugin for WordPress is susceptible to unauthorized data modification. This is due to a missing capability check on the features revert option API...

4.3CVSS5.8AI score0.00159EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/11/05 12:0 a.m.2 views

PT-2025-48308

Name of the Vulnerable Software and Affected Versions Huawei HarmonyOS versions 5.0.1 through 5.1.0 Huawei HarmonyOS version 6.0.0 Description An improper criterion security check exists within the call module. Successful exploitation of this issue may cause features to perform abnormally...

7.3CVSS6.5AI score0.00071EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2025/11/05 12:0 a.m.3 views

PT-2025-45104

Name of the Vulnerable Software and Affected Versions Premium Portfolio Features for Phlox theme plugin for WordPress versions prior to 2.3.11 Description The Premium Portfolio Features for Phlox theme plugin for WordPress is susceptible to Local File Inclusion in versions prior to 2.3.11. This...

8.1CVSS7.5AI score0.00536EPSS
Exploits0References6
Rows per page
Query Builder