Lucene search
+L

178 matches found

Kitploit
Kitploit
added 2026/08/25 4:32 a.m.1 views

EternalLiberty

EternalLiberty Beschreibung Dieses Repository enthält alle Aliase von Bedrohungsakteuren, die von verschiedenen Threat-Intelligence-Unternehmen in ihren Berichten verwendet werden. Ziele Dies ermöglicht es, die Bedrohungsakteure, die Sie untersuchen oder suchen möchten, anhand des Namens zu finde...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/24 10:06 a.m.2 views

vamp-forticheck

vamp-forticheck CVE-Scanner für Edge-Geräte mehrerer Anbieter — VampSecure Labs Übersicht vamp-forticheck ist ein asynchroner, nicht-destruktiver Sicherheitsscanner, der CVE-Schwachstellen bei sieben großen Netzwerk-Sicherheitsanbietern erkennt. Er führt eine strukturierte Analyse in drei Phasen...

5.5AI score
SaveExploits0
NVD
NVD
added 2026/08/19 6:17 a.m.4 views

CVE-2026-16058

The YayCurrency WordPress plugin before 3.3.5 does not perform any capability or ownership check on several of its multi-vendor integration handlers that are reachable by unauthenticated users, allowing anyone to read the store's order totals and its vendors' earnings, balance ledgers, and...

5.3CVSS0.00235EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/19 6:00 a.m.12 views

EUVD-2026-62269

The YayCurrency WordPress plugin before 3.3.5 does not perform any capability or ownership check on several of its multi-vendor integration handlers that are reachable by unauthenticated users, allowing anyone to read the store's order totals and its vendors' earnings, balance ledgers, and...

5.3CVSS5.4AI score0.00235EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/05 7:16 a.m.13 views

CVE-2026-16605

The MultiVendorX WordPress plugin before 5.0.11 does not verify that the store targeted through its REST API belongs to the requesting vendor, allowing an authenticated vendor Store Owner and above to view, take over, permanently delete, or modify any other vendor's store on the marketplace...

7.2CVSS0.00316EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/05 7:16 a.m.15 views

CVE-2026-16746

The MultiVendorX WordPress plugin before 5.0.11 does not verify that the requested store belongs to the current user in one of its REST API endpoints, allowing any vendor-level user to read other vendors' commission and financial data...

2.7CVSS0.00218EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/05 6:00 a.m.10 views

EUVD-2026-53109

The MultiVendorX WordPress plugin before 5.0.11 does not verify that the requested store belongs to the current user in one of its REST API endpoints, allowing any vendor-level user to read other vendors' commission and financial data...

5.5AI score0.00218EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/16 2:30 a.m.20 views

EUVD-2026-44860

The MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 5.0.9 due to insufficient escaping on the user supplied parameter and lack of sufficient...

6.5CVSS6.1AI score0.00413EPSS
SaveExploits0References5
Lenovo
Lenovo
added 2026/07/14 5:55 p.m.12 views

Multi-Vendor BIOS Security Vulnerabilities (July 2026) - Lenovo Support US

No description provided...

5.3AI score
SaveExploits0
NVD
NVD
added 2026/07/05 3:16 a.m.17 views

CVE-2026-14695

A vulnerability was found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function saveclient of the file classes/Users.php of the component Registration Handler. The manipulation of the argument Name results in sql injection. It is possible to launch the...

7.5CVSS0.00431EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/05 3:16 a.m.20 views

CVE-2026-14693

A flaw has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this vulnerability is the function cancelorder of the file classes/Master.php. Executing a manipulation can lead to improper authorization. The attack may be performed from remote. The exploit h...

5.5CVSS0.00401EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/05 3:16 a.m.18 views

CVE-2026-14692

A vulnerability was detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0/5.7.26. Affected is the function saveshoptype of the file classes/Master.php of the component POST Parameter Handler. Performing a manipulation results in sql injection. The attack is possible to be...

6.5CVSS0.00333EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/05 2:45 a.m.12 views

CVE-2026-14695

A vulnerability was found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function saveclient of the file classes/Users.php of the component Registration Handler. The manipulation of the argument Name results in sql injection. It is possible to launch the...

7.5CVSS6.8AI score0.00431EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
added 2026/07/05 2:45 a.m.18 views

EUVD-2026-41718

A vulnerability was found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function saveclient of the file classes/Users.php of the component Registration Handler. The manipulation of the argument Name results in sql injection. It is possible to launch the...

7.5CVSS5.8AI score0.00431EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/05 2:17 a.m.18 views

CVE-2026-14691

A security vulnerability has been detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This impacts the function updatesettingsinfo of the file classes/SystemSettings.php of the component Setting Handler. Such manipulation of the argument content leads to code injection...

6.5CVSS0.00413EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/05 2:00 a.m.23 views

EUVD-2026-41715

A vulnerability was detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0/5.7.26. Affected is the function saveshoptype of the file classes/Master.php of the component POST Parameter Handler. Performing a manipulation results in sql injection. The attack is possible to be...

6.5CVSS5.8AI score0.00333EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/05 1:45 a.m.19 views

EUVD-2026-41714

A security vulnerability has been detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This impacts the function updatesettingsinfo of the file classes/SystemSettings.php of the component Setting Handler. Such manipulation of the argument content leads to code injection...

6.5CVSS6.4AI score0.00413EPSS
SaveExploits0References6
Lenovo
Lenovo
added 2026/06/09 5:23 p.m.20 views

Multi-Vendor BIOS Security Vulnerabilities (June 2026) - Lenovo Support US

No description provided...

5.4AI score
SaveExploits0
Lenovo
Lenovo
added 2026/03/10 1:41 p.m.14 views

Multi-Vendor BIOS Security Vulnerabilities (March 2026) - Lenovo Support US

No description provided...

5.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/02/12 12:00 a.m.11 views

The vulnerability of the CS-Cart Multi-Vendor electronic shopping platform’s software lies in its ability to bypass authentication using a user-controlled key, allowing attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the CS-Cart Multi-Vendor software for electronic shopping platforms relates to the bypassing of authentication using a user-controlled key. Exploiting this vulnerability allows an attacker to remotely compromise the integrity and accessibility of protected information...

5.5CVSS5.9AI score
SaveExploits0Affected Software1
Rows per page
Query Builder