Lucene search
+L

1191 matches found

Microsoft CVE
Microsoft CVE
added 2025/03/11 7:0 a.m.20 views

Windows Mark of the Web Security Feature Bypass Vulnerability

Protection mechanism failure in Windows Mark of the Web MOTW allows an unauthorized attacker to bypass a security feature locally...

7.8CVSS7AI score0.0113EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/03/11 12:0 a.m.7 views

PT-2025-10811 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows 10 Version 1809 Windows versions prior to the patch released on 2025-03-11 Description: A security-feature bypass vulnerability in Windows Mark of the Web MOTW allows an unauthorized attacker to bypass a security feature locally. This...

7.8CVSS8.2AI score0.0113EPSS
SaveExploits0References21
SUSE CVE
SUSE CVE
added 2025/02/28 2:24 a.m.3 views

SUSE CVE-2024-52560

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Mark inode as bad as soon as error detected in mienumattr Extended the mienumattr function interface with an additional parameter, struct ntfsinode ni, to allow marking the inode as bad as soon as an error is detected...

5.5CVSS7.7AI score0.00165EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2025/02/27 3:11 a.m.7 views

SUSE CVE-2022-49174

In the Linux kernel, the following vulnerability has been resolved: ext4: fix ext4mbmarkbb with flexbg with fastcommit In case of flexbg feature which is by default enabled, extents for any given inode might span across blocks from two different block group. ext4mbmarkbb only reads the bufferhead...

5.5CVSS6.3AI score0.00252EPSS
SaveExploits0References7
OSV
OSV
added 2025/02/26 7:0 a.m.8 views

UBUNTU-CVE-2022-49171

In the Linux kernel, the following vulnerability has been resolved: ext4: don't BUG if someone dirty pages without asking ext4 first unpinuserpagesremote is dirtying pages without properly warning the file system in advance. A related race was noted by Jan Kara in 20181; however, more recently...

5.5CVSS5.8AI score0.00259EPSS
SaveExploits0References12
GithubExploit
GithubExploit
added 2025/02/23 2:55 a.m.936 views

Exploit for Protection Mechanism Failure in 7-Zip

7-Zip-CVE-2025-0411-POC CVE-2025-0411 Details "This vuln...

7CVSS7.3AI score0.67071EPSS
SaveExploits9
CNNVD
CNNVD
added 2025/02/22 12:0 a.m.8 views

WordPress plugin Post Grid and Gutenberg Blocks – ComboBlocks 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin.... WordPress plugin Post Grid and...

5.3CVSS8.7AI score0.00322EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2025/02/19 4:47 a.m.694 views

Exploit for Protection Mechanism Failure in 7-Zip

CVE-2025-0411: 7-Zip MoTW Bypass Vulnerability Introductio...

8.1CVSS7.5AI score0.95443EPSS
SaveExploits9
Microsoft CVE
Microsoft CVE
added 2025/02/17 8:0 a.m.4 views

GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow

...

5.1CVSS5.2AI score0.00665EPSS
SaveExploits1
CVE
CVE
added 2025/02/14 12:44 p.m.47 views

CVE-2025-23534

CVE-2025-23534: Affects WordPress WPLingo plugin (

6.5CVSS7.2AI score0.00389EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/14 12:44 p.m.7 views

CVE-2025-23534 WordPress WPLingo plugin <= 1.1.2 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in Mark Winiarski WPLingo wplingo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLingo: from n/a through = 1.1.2...

6.5CVSS7.2AI score0.00389EPSS
SaveExploits0References1
Redos
Redos
added 2025/02/13 12:0 a.m.83 views

ROS-20250212-17

A vulnerability in the Mark-of-the-Web protection mechanism of the 7-Zip archiver is related to a breach of the data protection mechanism. data protection mechanism. Exploitation of the vulnerability could allow an attacker to execute arbitrary code in the context of the current user...

7CVSS7.7AI score0.67071EPSS
SaveExploits8
SUSE CVE
SUSE CVE
added 2025/02/12 3:49 a.m.5 views

SUSE CVE-2025-1176

A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function bfdelfgcmarkrsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The complexity of an attack is rather...

4.5CVSS4.8AI score0.00665EPSS
SaveExploits1References6
OSV
OSV
added 2025/02/11 8:15 a.m.1 views

DEBIAN-CVE-2025-1181

A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function bfdelfgcmarkrsec of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather...

2.3CVSS4.4AI score0.00698EPSS
SaveExploits1References1
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.7 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: xtables: avoided NFPROTOUNSPEC where needed syzbot managed to call xtcluster via ebtables: WARNING: CPU: 0 PID: 11 at net/netfilter/xtcluster.c:72 xtclustermt+0x196/0x780 .. ebtdotable+0x174b/0x2a40 The module...

5.5CVSS6.5AI score0.00231EPSS
SaveExploits0References3
OSV
OSV
added 2025/02/11 6:15 a.m.6 views

AZL-56579 CVE-2025-1176 affecting package binutils for versions less than 2.41-4

A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function bfdelfgcmarkrsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The complexity of an attack is rather...

5CVSS5.3AI score0.00665EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/02/11 12:0 a.m.5 views

GNU Binutils 安全漏洞

GNU Binutils GNU Binary Utilities is a set of programming language utilities developed by the American GNU community. A memory corruption vulnerability exists in GNU Binutils. The vulnerability originates from the function bfdelfgcmarkrsec in bfd/elflink.c. No details of the vulnerability are...

5.1CVSS6.8AI score0.00698EPSS
SaveExploits1References8
RedhatCVE
RedhatCVE
added 2025/02/09 10:20 a.m.15 views

CVE-2025-25160

Cross-Site Request Forgery CSRF vulnerability in Mark Barnes Style Tweaker style-tweaker allows Stored XSS.This issue affects Style Tweaker: from n/a through = 0.11...

7.1CVSS7.2AI score0.00141EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/07 10:15 a.m.15 views

CVE-2025-25160

Cross-Site Request Forgery CSRF vulnerability in Mark Barnes Style Tweaker style-tweaker allows Stored XSS.This issue affects Style Tweaker: from n/a through = 0.11...

7.1CVSS0.00141EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/07 10:11 a.m.57 views

CVE-2025-25160

CVE-2025-25160 describes a CSRF-to-Stored XSS vulnerability in WordPress Style Tweaker

7.1CVSS7.2AI score0.00141EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder