Lucene search
+L

2342 matches found

Patchstack
Patchstack
added 2025/09/16 10:41 p.m.12 views

WordPress Quiz Maker plugin <= 6.7.0.56 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Rahul Sreenivasan Tr0j4n in WordPress Plugin Quiz Maker versions = 6.7.0.56...

7.5CVSS7.7AI score0.0088EPSS
SaveExploits3References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/07 4:39 p.m.5 views

Malicious code in amzn-sagemaker-studio (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a557d275cca7627fa4d3e2c72f0fc9b78fc5ac70aa87a0ab586f1abf9f8777a6 Package exfiltrates the environment variables during the import --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaig...

7AI score
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/28 12:37 p.m.2 views

CVE-2025-53328 WordPress Poll, Survey & Quiz Maker Plugin by Opinion Stage Plugin <= 19.11.0 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Assaf Parag Poll, Survey & Quiz Maker Plugin by Opinion Stage allows PHP Local File Inclusion. This issue affects Poll, Survey & Quiz Maker Plugin by Opinion Stage: from n/a...

7.5CVSS7.3AI score0.00447EPSS
SaveExploits1References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/28 7:11 a.m.5 views

Malicious code in solution-maker (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2025/08/28 7:11 a.m.4 views

MAL-2025-41762 Malicious code in solution-maker (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
CNNVD
CNNVD
added 2025/08/28 12:0 a.m.6 views

WordPress plugin Poll, Survey & Quiz Maker Plugin by Opinion Stage 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A security vulnerability exists in WordPress plugin Poll, Survey & Quiz Maker Plugin...

7.5CVSS6.4AI score0.00447EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/08/25 5:32 a.m.6 views

CVE-2025-7841

The Sertifier Certificate & Badge Maker for WordPress – Tutor LMS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.19. This is due to missing or incorrect nonce validation on the 'sertifiersettings' page. This makes it possible for...

4.3CVSS6.7AI score0.0011EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/23 4:25 a.m.28 views

CVE-2025-7841 Sertifier Certificate & Badge Maker for WordPress – Tutor LMS <= 1.19 - Cross-Site Request Forgery to Settings Update

The Sertifier Certificate & Badge Maker for WordPress – Tutor LMS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.19. This is due to missing or incorrect nonce validation on the 'sertifiersettings' page. This makes it possible for...

4.3CVSS0.0011EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/08/23 12:0 a.m.10 views

PT-2025-34512 · WordPress · Sertifier Certificate & Badge Maker For Wordpress – Tutor Lms

Name of the Vulnerable Software and Affected Versions: Sertifier Certificate & Badge Maker for WordPress – Tutor LMS plugin versions prior to 1.20 Description: The Sertifier Certificate & Badge Maker for WordPress – Tutor LMS plugin is susceptible to Cross-Site Request Forgery CSRF due to missing...

4.3CVSS6.6AI score0.0011EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/08/22 4:35 p.m.8 views

CVE-2011-10021

Magix Musik Maker 16 is vulnerable to a stack-based buffer overflow due to improper handling of .mmm arrangement files. The vulnerability arises from an unsafe strcpy operation that fails to validate input length, allowing attackers to overwrite the Structured Exception Handler SEH. By crafting a...

8.4CVSS8.3AI score0.00345EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/20 4:15 p.m.11 views

CVE-2011-10021

Magix Musik Maker 16 is vulnerable to a stack-based buffer overflow due to improper handling of .mmm arrangement files. The vulnerability arises from an unsafe strcpy operation that fails to validate input length, allowing attackers to overwrite the Structured Exception Handler SEH. By crafting a...

8.4CVSS0.00345EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2025/08/20 3:36 p.m.15 views

CVE-2011-10021 Magix Musik Maker <= v16 .mmm Stack-Based Buffer Overflow

Magix Musik Maker 16 is vulnerable to a stack-based buffer overflow due to improper handling of .mmm arrangement files. The vulnerability arises from an unsafe strcpy operation that fails to validate input length, allowing attackers to overwrite the Structured Exception Handler SEH. By crafting a...

8.4CVSS0.00345EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2025/08/20 3:36 p.m.10 views

CVE-2011-10021 Magix Musik Maker <= v16 .mmm Stack-Based Buffer Overflow

Magix Musik Maker 16 is vulnerable to a stack-based buffer overflow due to improper handling of .mmm arrangement files. The vulnerability arises from an unsafe strcpy operation that fails to validate input length, allowing attackers to overwrite the Structured Exception Handler SEH. By crafting a...

8.4CVSS7.4AI score0.00345EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2025/08/20 3:36 p.m.6 views

CVE-2011-10021

Magix Musik Maker 16 is vulnerable to a stack-based buffer overflow due to improper handling of .mmm arrangement files. The vulnerability arises from an unsafe strcpy operation that fails to validate input length, allowing attackers to overwrite the Structured Exception Handler SEH. By crafting a...

8.4CVSS6.4AI score0.00345EPSS
SaveExploits0References6
CVE
CVE
added 2025/08/20 3:36 p.m.29 views

CVE-2011-10021

Magix Musik Maker 16 is affected by a stack-based buffer overflow when processing .mmm files due to an unsafe strcpy() that fails to validate input length, allowing an attacker to overwrite the Structured Exception Handler (SEH). Exploitation is triggered by opening a crafted .mmm file and can le...

8.4CVSS7.6AI score0.00345EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/08/20 12:0 a.m.14 views

PT-2025-34102 · Undefined · Undefined

Magix Musik Maker 16 is vulnerable to a stack-based buffer overflow due to improper handling of .mmm arrangement files. The vulnerability arises from an unsafe strcpy operation that fails to validate input length, allowing attackers to overwrite the Structured Exception Handler SEH. By crafting a...

8.4CVSS8.3AI score0.00345EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/08/20 12:0 a.m.7 views

MAGIX Musik Maker 安全漏洞

MAGIX Musik Maker is a computerized music production software from the German company MAGIX. A security vulnerability exists in MAGIX Musik Maker that stems from a stack-based buffer overflow when processing .mmm files, which could lead to the execution of arbitrary code...

8.4CVSS7.3AI score0.00345EPSS
SaveExploits0References9
Packet Storm News
Packet Storm News
added 2025/08/19 12:0 a.m.4 views

liblcf 0.8.1 Denial of Service

lcf2xml part of liblcf aborts when parsing specially crafted RPG Maker 2000/2003 files that supply a negative element count for vectors of structured records. Version 0.8.1 is affected...

6.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/08/18 2:37 a.m.13 views

CVE-2024-12575

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Basic Information Exposure in all versions up to, and including, 5.8.9 via the 'aysfinishpoll' AJAX action. This makes it possible for unauthenticated attackers to retrieve admin email information...

5.3CVSS6.9AI score0.00273EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/16 3:15 a.m.9 views

CVE-2024-12575

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Basic Information Exposure in all versions up to, and including, 5.8.9 via the 'aysfinishpoll' AJAX action. This makes it possible for unauthenticated attackers to retrieve admin email information...

5.3CVSS0.00273EPSS
SaveExploits0References2
Rows per page
Query Builder