CVE-2025-14469 Theme Editor <= 3.1 - Cross-Site Request Forgery to CSS Modification

The Theme Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1. This is due to missing nonce validation on the msupdate AJAX action. This makes it possible for unauthenticated attackers to modify child theme CSS styles via a forged...

CVE-2025-14469

The Theme Editor WordPress plugin (up to v3.1) is affected by a Cross-Site Request Forgery due to missing nonce validation on the ms_update AJAX action. This allows unauthenticated attackers to modify child theme CSS styles via a forged request if an administrator is tricked into performing an ac...

EUVD-2025-210579

The Theme Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1. This is due to missing nonce validation on the msupdate AJAX action. This makes it possible for unauthenticated attackers to modify child theme CSS styles via a forged...

PT-2025-21009 · Microsoft · Windows Ntfs +1

Name of the Vulnerable Software and Affected Versions: Windows NTFS affected versions not specified Description: The issue is an out-of-bounds read in Windows NTFS, allowing an unauthorized attacker to elevate privileges locally. This could potentially lead to SYSTEM-level access risk. There is n...

SureBackup Fails After MS Update KB3139914

Challenge SureBackup script tests fail as seen below: Info SureBackup VMNAME ScriptTests Begin 'Predefined script 1: name DNS Server, starting...' Error Failed to create process with net logon ERRORENVVARNOTFOUND System.Exception This is the DNS Script test specifically. The various script tests...

Quick FTP Pro 2.1 Transfer-Mode Overflow

No description provided by source. $Id: quicktftppromode.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Quick TFTP Server Pro 2.1 - Transfer-Mode Overflow (Metasploit)

$Id: quicktftppromode.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Quick FTP Pro 2.1 Transfer-Mode Overflow

require 'msf/core' class Metasploit3 'Quick FTP Pro 2.1 Transfer-Mode Overflow', 'Description' = %q This module exploits a stack overflow in the Quick TFTP Pro server product. MS Update KB926436 screws up the opcode address being used in oledlg.dll resulting in a DoS. This is a port of a sploit b...

Quick FTP Pro 2.1 Transfer-Mode Overflow

This module exploits a stack buffer overflow in the Quick TFTP Pro server product. MS Update KB926436 screws up the opcode address being used in oledlg.dll resulting in a DoS. This is a port of a sploit by Mati "muts" Aharoni. This module requires Metasploit: https://metasploit.com/download Curre...