86 matches found
CVE-2026-105773
Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability in the Privileged Helper Tool caused by a race condition and insufficient file validation, allowing a local attacker to execute arbitrary code with system privileges. Fixed in 3.11.1...
CVE-2026-105773 Canimaan Software ClamXAV local privilege escalation
Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability in the Privileged Helper Tool caused by a race condition and insufficient file validation, allowing a local attacker to execute arbitrary code with system privileges. Fixed in 3.11.1...
CVE-2026-105773
Canimaan Software ClamXAV versions 3.3 through 3.11 are vulnerable to a local privilege escalation vulnerability within the Privileged Helper Tool . This issue is caused by a race condition combined with insufficient file validation , which could allow a local attacker to execute arbitrary code w...
EUVD-2026-92797
Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability in the Privileged Helper Tool caused by a race condition and insufficient file validation, allowing a local attacker to execute arbitrary code with system privileges. Fixed in 3.11.1...
WordPress Unauthenticated RCE via Pix for WooCommerce plugin
This Metasploit module exploits an Unauthenticated Arbitrary File Upload vulnerability in the Pix for WooCommerce plugin for WordPress. Attackers can leverage the missing capability check and insufficient file type validation in the 'lknpixforwoocommercec6savesettings' function to upload arbitrar...
CVE-2025-1282
The Car Dealer Automotive WordPress Theme – Responsive theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deletepostphoto and addcar functions in all versions up to, and including, 1.6.3. This makes it possible for authenticated attackers,...
CVE-2024-2667
The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation in the /wp-json/instawp-connect/v1/config REST API endpoint in all versions up to, and including, 0.1.0.22. This makes it possible for...
EUVD-2024-54050
Malicious code in bioql PyPI...
EUVD-2023-58466
Malicious code in bioql PyPI...
EUVD-2025-9114
Malicious code in bioql PyPI...
EUVD-2025-21584
Malicious code in bioql PyPI...
EUVD-2025-19678
Malicious code in bioql PyPI...
EUVD-2025-5116
Malicious code in bioql PyPI...
EUVD-2025-22296
Malicious code in bioql PyPI...
EUVD-2023-58105
Malicious code in bioql PyPI...
EUVD-2023-59037
Malicious code in bioql PyPI...
EUVD-2025-10393
Malicious code in bioql PyPI...
EUVD-2025-1626
Malicious code in bioql PyPI...
EUVD-2023-59124
Malicious code in bioql PyPI...
CVE-2025-8213 NinjaScanner – Virus & Malware scan <= 3.2.5 - Authenticated (Administrator+) Arbitrary File Deletion
The NinjaScanner – Virus & Malware scan plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'nscanajaxquarantine' and 'nscanquarantineselect' functions in all versions up to, and including, 3.2.5. This makes it possible for authenticated...