DEBIAN-CVE-2026-56135

In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted...

DEBIAN-CVE-2026-56136

In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfsirnill in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name...

CVE-2025-39247

CVE-2025-39247 الهدف: HikCentral Professional HCMP، خادم VMS مركزي CVE: CVE-2025-39247 — ثغرة في التحكم بالوصول CVSS 3.1: 8.6 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N المتأثر: V2.3.1 – V2.6.2 و V3.0.0 المُعالَج: V2.6.3 / V3.0.1 / حزمة الإصلاح CVE-2025-39247 تاريخ الإفصاح: 2025-08-28 تاريخ التحليل:...

CVE-2026-76816

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.137.Final and 4.2.17.Final, MqttEncoder does not validate client identifiers, will topics, usernames, and PUBLISH topic names before encoding, allowing prohibited null bytes in MQTT UTF-8 string fields and...

CVE-2026-72711

The Lean 4 kernel does not check that the body of an opaque declaration is closed. environment::addopaque omits the checknometavarnofvar call that the definition and theorem paths perform, so a value containing a free variable that is absent from the local context is not rejected outright. A...

CVE-2026-72711

CVE-2026-72711 is a kernel soundness flaw in Lean 4 before 4.32.2. The function environment::add_opaque omits the check_no_metavar_no_fvar closure check that the definition and theorem paths perform. A metaprogram can exploit a stale entry in the type checker's inference cache to submit an opaque...

IS

Dieses Repository hat keine README-Datei...

CVE-2025-3102

Questo repository non contiene un README...

Sakai Profile Image Deletion has an IDOR

Summary The Sakai REST API endpoint DELETE /api/users/userId/profile/image does not verify that the requesting user is authorized to modify the target user's profile. Any authenticated user can delete the profile image of any other user, including administrators, by supplying a different userId i...

CVE-2025-53770

Questo repository non contiene un README...

CVE-2025-5815-Nuclei-Template

📄 Template Nuclei per CVE-2025-5815 🚀 Panoramica Questo repository contiene un template Nuclei progettato specificamente per rilevare una vulnerabilità di disabilitazione non autenticata del logging dei bot CVE-2025-5815 nel plugin Traffic Monitor per WordPress. Questo problema consente ad...

CVE-2025-39459-Nuclei-Template

📄 Nuclei-Vorlage für CVE-2025-39459 🚀 Übersicht Dieses Repository enthält eine Nuclei-Vorlage, die speziell entwickelt wurde, um eine nicht authentifizierte Privilegienausweitungsschwachstelle CVE-2025-39459 im Real Estate 7 WordPress Theme zu erkennen. Dieses Problem ermöglicht es nicht...

CVE-2024-7135

CVE-2024-7135 Tainacan = 0.21.7 - प्रमाणित उपयोगकर्ताओं सब्सक्राइबर+ द्वारा आर्बिट्रेरी फ़ाइल रीड के लिए लापता प्राधिकरण विवरण WordPress के लिए Tainacan प्लगइन 0.21.7 तक के सभी संस्करणों में 'getfile' फ़ंक्शन पर क्षमता जाँच की कमी के कारण डेटा के अनधिकृत अभिगम के लिए संवेदनशील है। यह फ़ंक्शन...

CVE-2024-54262

CVE-2024-54262 Import Export For WooCommerce = 1.5 - Upload Arbitrário de Arquivo Autenticado Assinante+ Descrição O plugin Import Export For WooCommerce para WordPress é vulnerável a uploads arbitrários de arquivos devido à falta de validação de tipo de arquivo em todas as versões até, e...

CVE-2024-5324

CVE-2024-5324 Login/Signup Popup Inline Form + Woocommerce 2.7.1 - 2.7.2 - Autorizzazione mancante per aggiornamento arbitrario delle opzioni Descrizione: Il plugin Login/Signup Popup Inline Form + Woocommerce per WordPress è vulnerabile a modifiche non autorizzate dei dati a causa di una mancanz...

CVE-2024-52382

CVE-2024-52382 Matix Popup Builder = 1.0.0 - Atualização Não Autenticada de Opções Arbitrárias Descrição O plugin Matix Popup Builder para WordPress é vulnerável a modificação não autorizada de dados que pode levar à escalada de privilégios devido a uma falta de verificação de capacidade em uma...

CVE-2024-50490

CVE-2024-50490 PegaPoll = 1.0.2 - Nicht authentifizierte Aktualisierung beliebiger Optionen Beschreibung: Das PegaPoll-Plugin für WordPress ist anfällig für eine unbefugte Änderung von Daten, die zu einer Rechteausweitung führen kann, da in allen Versionen bis einschließlich 1.0.2 eine...

CVE-2024-50482

CVE-2024-50482 Woocommerce Product Design = 1.0.0 - Caricamento arbitrario di file non autenticato Descrizione: Il plugin Woocommerce Product Design per WordPress è vulnerabile al caricamento arbitrario di file a causa della mancanza di validazione del tipo di file in tutte le versioni fino alla...

CVE-2024-50475

CVE-2024-50475 Signup Page = 1.0 - Aggiornamento non autenticato di opzioni arbitrarie Descrizione: Il plugin Signup Page per WordPress è vulnerabile a modifiche non autorizzate dei dati che possono portare a escalation dei privilegi a causa di un controllo delle capacità mancante in tutte le...

CVE-2024-43998

CVE-2024-43998 root@kitploit: Blogpoet = 1.0.2 - Missing Authorization via blogpoetinstallandactivateplugins Published: 2024-08-29 00:00:00 Classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N cvss-score: 5.3 cve-id: CVE-2024-43998 cpe: cpe:2.3:a:blogpoet:blogpoet::::::::...