Lucene search
K

101 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.2 views

Astra Linux - уязвимость в tiff

A vulnerability was discovered in the libtiff library. This flaw causes a heap buffer overflow issue due to the TIFFTAGINKNAMES and TIFFTAGNUMBEROFINKS values...

5.5CVSS6.9AI score0.00032EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/02/19 1:27 a.m.2 views

CVE-2026-2627

A security flaw has been discovered in Softland FBackup up to 9.9. This impacts an unknown function in the library C:\Program Files\Common Files\microsoft shared\ink\HID.dll of the component Backup/Restore. The manipulation results in link following. The attack needs to be approached locally. The...

8.5CVSS5AI score0.0001EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/01 4:26 p.m.4 views

CVE-2025-62123

Cross-Site Request Forgery CSRF vulnerability in inkthemes WP Gmail SMTP wp-gmail-smtp allows Cross Site Request Forgery.This issue affects WP Gmail SMTP: from n/a through = 1.0.7...

4.3CVSS5.9AI score0.00004EPSS
Exploits0References1
NVD
NVD
added 2025/12/31 5:15 p.m.5 views

CVE-2025-62123

Cross-Site Request Forgery CSRF vulnerability in inkthemes WP Gmail SMTP wp-gmail-smtp allows Cross Site Request Forgery.This issue affects WP Gmail SMTP: from n/a through = 1.0.7...

4.3CVSS0.00004EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/31 4:26 p.m.2 views

CVE-2025-62123 WordPress WP Gmail SMTP plugin <= 1.0.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ink themes WP Gmail SMTP allows Cross Site Request Forgery.This issue affects WP Gmail SMTP: from n/a through 1.0.7...

4.3CVSS6.5AI score0.00004EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/31 12:0 a.m.1 views

PT-2025-54396

Cross-Site Request Forgery CSRF vulnerability in Ink themes WP Gmail SMTP allows Cross Site Request Forgery.This issue affects WP Gmail SMTP: from n/a through 1.0.7...

4.3CVSS6.9AI score0.00004EPSS
Exploits0References2
The Hacker News
The Hacker News
added 2025/12/17 11:12 a.m.9 views

China-Linked Ink Dragon Hacks Governments Using ShadowPad and FINALDRAFT Malware

The threat actor known as Jewelbug has been increasingly focusing on government targets in Europe since July 2025, even as it continues to attack entities located in Southeast Asia and South America. Check Point Research is tracking the cluster under the name Ink Dragon. It's also referenced by t...

7.3AI score
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2014-7632

Malware in sbrugna...

5.4CVSS6.4AI score0.00099EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-21608

Malware in sbrugna...

7.8CVSS7.5AI score0.01717EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-1743

Malicious code in bioql PyPI...

5.3CVSS5.6AI score0.00237EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-43527

Malicious code in bioql PyPI...

9.9CVSS6.4AI score0.00489EPSS
Exploits0References1
OSV
OSV
added 2025/04/17 4:39 a.m.3 views

MAL-2025-3258 Malicious code in ink-web-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7d7d7be1f1ae1e0b29b9c5187d8041c62c44f247b62c7a071b67a0e821fbac8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References3
NVD
NVD
added 2025/01/16 8:15 p.m.3 views

CVE-2025-23530

Cross-Site Request Forgery CSRF vulnerability in yonisink Custom Post Type Lockdown custom-post-type-lockdown allows Privilege Escalation.This issue affects Custom Post Type Lockdown: from n/a through = 1.11...

8.8CVSS0.00122EPSS
Exploits0References1
NVD
NVD
added 2024/12/31 2:15 p.m.8 views

CVE-2024-56204

Cross-Site Request Forgery CSRF vulnerability in yonisink Sinking Dropdowns sinking-dropdowns allows Privilege Escalation.This issue affects Sinking Dropdowns: from n/a through = 1.25...

8.8CVSS0.00181EPSS
Exploits0References1
NVD
NVD
added 2024/10/23 4:15 p.m.6 views

CVE-2024-49669

Unrestricted Upload of File with Dangerous Type vulnerability in Alexander De Ridder INK Official ink-official allows Upload a Web Shell to a Web Server.This issue affects INK Official: from n/a through = 4.1.2...

9.9CVSS0.00489EPSS
Exploits0References1
CVE
CVE
added 2024/10/23 3:35 p.m.35 views

CVE-2024-49669

CVE-2024-49669 concerns the WordPress INK Official plugin. The Initial Description identifies an Unrestricted Upload of File with Dangerous Type allowing an attacker to upload a Web Shell to the web server, affecting INK Official versions from n/a through 4.1.2. Connected sources corroborate the ...

9.9CVSS5.9AI score0.00489EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/23 3:35 p.m.9 views

CVE-2024-49669 WordPress INK Official plugin <= 4.1.2 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Alexander De Ridder INK Official ink-official allows Upload a Web Shell to a Web Server.This issue affects INK Official: from n/a through = 4.1.2...

9.9CVSS5.9AI score0.00489EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/23 3:35 p.m.15 views

CVE-2024-49669 WordPress INK Official plugin <= 4.1.2 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Alexander De Ridder INK Official ink-official allows Upload a Web Shell to a Web Server.This issue affects INK Official: from n/a through = 4.1.2...

9.9CVSS0.00489EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/10/23 12:0 a.m.1 views

PT-2024-33620 · Ink · Ink

Name of the Vulnerable Software and Affected Versions: INK Official versions n/a through 4.1.2 Description: The issue allows for the unrestricted upload of files with dangerous types, enabling an attacker to upload a web shell to a web server. Recommendations: For versions n/a through 4.1.2, upda...

9.9CVSS6.7AI score0.00489EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/10/23 12:0 a.m.1 views

WordPress plugin INK Official 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in WordPress...

9.9CVSS6.7AI score0.00489EPSS
Exploits0References1
Rows per page
Query Builder