Lucene search
+L

25685 matches found

Cvelist
Cvelist
added 2025/05/01 10:54 a.m.77 views

CVE-2025-27007 WordPress SureTriggers <= 1.0.82 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through = 1.0.82...

9.8CVSS0.5148EPSS
SaveExploits3References1
CVE
CVE
added 2025/05/01 10:54 a.m.195 views

CVE-2025-27007

CVE-2025-27007 affects WordPress plugin SureTriggers (also called OttoKit) up to version 1.0.82. The vulnerability is an Incorrect Privilege Assignment that allows unauthenticated privilege escalation via the SureTriggers REST API endpoints, enabling an attacker to create an administrator account...

9.8CVSS7.4AI score0.5148EPSS
SaveExploits3References1
Packet Storm News
Packet Storm News
added 2025/05/01 12:00 a.m.20 views

HoneyWin: High-Interaction Windows Honeypot in Enterprise Environment

Windows operating systems OS are ubiquitous in enterprise Information Technology IT and operational technology OT environments. Due to their widespread adoption and known vulnerabilities, they are often the primary targets of malware and ransomware attacks. With 93% of the ransomware targeting...

7.4AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/05/01 12:00 a.m.18 views

PT-2025-18381

Name of the Vulnerable Software and Affected Versions Brainstorm Force SureTriggers versions 1.0.0 through 1.0.82 Description The issue is related to an incorrect privilege assignment vulnerability in Brainstorm Force SureTriggers, allowing privilege escalation. This vulnerability can be exploite...

9.8CVSS9.8AI score0.5148EPSS
SaveExploits3References48
VulnCheck KEV
VulnCheck KEV
added 2025/04/30 12:00 a.m.6 views

VulnCheck KEV: CVE-2025-27007

Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through = 1.0.82...

9.8CVSS5.8AI score0.5148EPSS
SaveExploits3References1
GithubExploit
GithubExploit
added 2025/04/29 7:02 p.m.258 views

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

CVE-2025-32433Erlang-OTP This script is a custom security too...

10CVSS8.7AI score0.98594EPSS
SaveExploits38
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/29 2:34 a.m.68 views

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation Fixes for April 2024.

Summary In addition to OS level package updates, multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 21.0.3-IF032 and 23.0.2-IF004. Vulnerability Details CVEID:CVE-2024-22353 DESCRIPTION: IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 is...

9.8CVSS7.3AI score0.99999EPSS
SaveExploits29Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/29 2:33 a.m.27 views

Security Bulletin: Several vulnerabilities affect Watson Machine Learning Accelerator on Cloud Pak for Data 5.0.0

Summary Several vulnerabilities in Watson Machine Learning Accelerator on Cloud Pak for Data 5.0.0 have been fixed in Watson Machine Learning Accelerator on Cloud Pak for Data 5.0 latest refresh. Vulnerability Details CVEID:CVE-2024-3568 DESCRIPTION: Hugging Face Transformers could allow a remote...

9.6CVSS8.9AI score0.03397EPSS
SaveExploits4Affected Software1
Packet Storm News
Packet Storm News
added 2025/04/28 12:00 a.m.10 views

American Fuzzy Lop plus plus 4.32c

Google's American Fuzzy Lop is a brute-force fuzzer coupled with an exceedingly simple but rock-solid instrumentation-guided genetic algorithm. afl++ is a superior fork to Google's afl. It has more speed, more and better mutations, more and better instrumentation, custom module support, etc...

6.9AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/04/28 12:00 a.m.19 views

A Virtual Cybersecurity Department for Securing Digital Twins in Water Distribution Systems

Digital twins DTs help improve real-time monitoring and decision-making in water distribution systems. However, their connectivity makes them easy targets for cyberattacks such as scanning, denial-of-service DoS, and unauthorized access. Small and medium-sized enterprises SMEs that manage these...

8.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/04/28 12:00 a.m.11 views

The vulnerability of the CHOCO TEI WATCHER mini’s microprogramming software, related to weak password requirements, allows attackers to perform brute-force attacks and gain unauthorized access to protected information.

The vulnerability of the CHOCO TEI WATCHER mini camera’s microprogramming software is related to weak password requirements. Exploiting this vulnerability could allow an attacker to perform a brute-force attack and gain unauthorized access to protected information...

10CVSS8AI score0.00832EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/04/26 5:52 p.m.18 views

CVE-2025-46521

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Silver Muru WS Force Login Page ws-force-login-page allows Stored XSS.This issue affects WS Force Login Page: from n/a through = 3.0.3...

5.9CVSS7.2AI score0.00214EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/26 5:05 p.m.22 views

CVE-2025-39408

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EverPress BruteGuard – Brute Force Login Protection bruteguard allows Reflected XSS.This issue affects BruteGuard – Brute Force Login Protection: from n/a through = 0.1.4...

7.1CVSS7.2AI score0.00276EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/26 4:25 a.m.11 views

CVE-2024-53591

An issue in the login page of Seclore v3.27.5.0 allows attackers to bypass authentication via a brute force attack...

9.8CVSS7.1AI score0.00624EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/04/25 4:37 p.m.16 views

CVE-2025-42600

This vulnerability exists in Meon KYC solutions due to missing restrictions on the number of incorrect One-Time Password OTP attempts through certain API endpoints of login process. A remote attacker could exploit this vulnerability by performing a brute force attack on OTP, which could lead to...

8.2CVSS7.1AI score0.00436EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/24 4:15 p.m.15 views

CVE-2025-46521

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Silver Muru WS Force Login Page ws-force-login-page allows Stored XSS.This issue affects WS Force Login Page: from n/a through = 3.0.3...

5.9CVSS0.00214EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/24 4:15 p.m.10 views

CVE-2025-39408

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EverPress BruteGuard – Brute Force Login Protection bruteguard allows Reflected XSS.This issue affects BruteGuard – Brute Force Login Protection: from n/a through = 0.1.4...

7.1CVSS0.00276EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/24 4:09 p.m.10 views

CVE-2025-46521 WordPress WS Force Login Page <= 3.0.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Silver Muru WS Force Login Page allows Stored XSS. This issue affects WS Force Login Page: from n/a through 3.0.3...

5.9CVSS6.7AI score0.00214EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/24 4:09 p.m.49 views

CVE-2025-46521

CVE-2025-46521 concerns the WordPress plugin "WS Force Login Page". The vulnerability is a cross‑site scripting (stored XSS) flaw caused by improper input neutralization, affecting versions from n/a up to and including 3.0.3. Public references in the provided documents corroborate stored XSS as t...

5.9CVSS7.2AI score0.00214EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/24 4:08 p.m.75 views

CVE-2025-39408

CVE-2025-39408 describes a reflected cross-site scripting (XSS) vulnerability in the WordPress plugin BruteGuard – Brute Force Login Protection, due to improper neutralization of input during web page generation. Affected versions are BruteGuard – Brute Force Login Protection up to 0.1.4. The con...

7.1CVSS7.2AI score0.00276EPSS
SaveExploits0References1
Rows per page
Query Builder