Lucene search
+L

37104 matches found

Cvelist
Cvelist
added 2026/03/05 5:53 a.m.43 views

CVE-2025-54001 WordPress Classter theme <= 2.5 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Classter classter allows Object Injection.This issue affects Classter: from n/a through = 2.5...

9.8CVSS0.0051EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/05 5:53 a.m.10 views

CVE-2025-54001 WordPress Classter theme <= 2.5 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Classter classter allows Object Injection.This issue affects Classter: from n/a through = 2.5...

5.9AI score0.0051EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/05 3:31 a.m.13 views

EUVD-2026-9515

A SUID root-owned binary in /home/xd/terminal/XDTerminal in International Data Casting IDC SFX2100 on Linux allows a local actor to potentially preform local privilege escalation depending on conditions of the system via execution of the affected SUID binary. This can be via PATH hijacking, symli...

8.6CVSS6.1AI score0.00127EPSS
SaveExploits1References2
NVD
NVD
added 2026/03/05 2:16 a.m.16 views

CVE-2026-29123

A SUID root-owned binary in /home/xd/terminal/XDTerminal in International Data Casting IDC SFX2100 on Linux allows a local actor to potentially preform local privilege escalation depending on conditions of the system via execution of the affected SUID binary. This can be via PATH hijacking, symli...

8.6CVSS0.00127EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2026/03/05 1:18 a.m.8 views

CVE-2026-29123 Multiple SUID Root Binaries in `xd` User Home Directory Leading to Potential Local Privilege Escalation

A SUID root-owned binary in /home/xd/terminal/XDTerminal in International Data Casting IDC SFX2100 on Linux allows a local actor to potentially preform local privilege escalation depending on conditions of the system via execution of the affected SUID binary. This can be via PATH hijacking, symli...

8.6CVSS6.1AI score0.00127EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/03/05 1:18 a.m.5 views

CVE-2026-29123

A SUID root-owned binary in /home/xd/terminal/XDTerminal in International Data Casting IDC SFX2100 on Linux allows a local actor to potentially preform local privilege escalation depending on conditions of the system via execution of the affected SUID binary. This can be via PATH hijacking, symli...

8.6CVSS6.1AI score0.00127EPSS
SaveExploits1References2
CVE
CVE
added 2026/03/05 1:18 a.m.28 views

CVE-2026-29123

CVE-2026-29123 affects a SUID root-owned binary at /home/xd/terminal/XDTerminal in International Data Casting (IDC) SFX2100 on Linux. The issue enables local privilege escalation through execution of the affected SUID binary, with attack methods including PATH hijacking, symlink abuse, or shared ...

8.6CVSS6.1AI score0.00127EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2026/03/05 1:18 a.m.49 views

CVE-2026-29123 Multiple SUID Root Binaries in `xd` User Home Directory Leading to Potential Local Privilege Escalation

A SUID root-owned binary in /home/xd/terminal/XDTerminal in International Data Casting IDC SFX2100 on Linux allows a local actor to potentially preform local privilege escalation depending on conditions of the system via execution of the affected SUID binary. This can be via PATH hijacking, symli...

8.6CVSS0.00127EPSS
SaveExploits1References1
vulnersOsv
vulnersOsv
added 2026/03/05 12:12 a.m.2 views

@backstage/plugin-search-backend-module-techdocs (>=0.4.2-next.0, <=0.4.11-next.1), @backstage/plugin-techdocs-backend (>=0.0.0-nightly-2021111822616, <=2.1.5-next.2) +2 more potentially affected by CVE-2026-29186 via @backstage/plugin-techdocs-node (>=1.0.0, <=1.14.2-next.1)

@backstage/plugin-techdocs-node NPM version =1.0.0, =0.4.2-next.0, =0.0.0-nightly-2021111822616, =0.11.13, =0.0.0-nightly-2021111822616, =1.10.5-next.1 Source cves: CVE-2026-29186 Source advisory: OSV:GHSA-928R-FM4V-MVRW...

9.8CVSS5.3AI score0.00782EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/03/05 12:00 a.m.9 views

PT-2026-23269

Deserialization of Untrusted Data vulnerability in ThemeREX Tennis Club tennis-sportclub allows Object Injection.This issue affects Tennis Club: from n/a through = 1.2.3...

5.9AI score0.00375EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/05 12:00 a.m.16 views

WordPress plugin Equestrian Centre 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

9.8CVSS5.9AI score0.00389EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/05 12:00 a.m.19 views

WordPress plugin Good Energy 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

9.8CVSS5.8AI score0.00375EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/05 12:00 a.m.15 views

WordPress plugin Dental Clinic 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There we...

8.8CVSS5.9AI score0.00368EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/05 12:00 a.m.14 views

WordPress plugin PowerPress Podcasting 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

8.8CVSS5.9AI score0.00482EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/05 12:00 a.m.12 views

PT-2026-23270

Deserialization of Untrusted Data vulnerability in ThemeREX Kingler kingler allows Object Injection.This issue affects Kingler: from n/a through = 1.7...

5.9AI score0.00375EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/05 12:00 a.m.14 views

WordPress plugin Car Zone 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There ar...

8.8CVSS5.9AI score0.00381EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/05 12:00 a.m.15 views

PT-2026-23213

Name of the Vulnerable Software and Affected Versions axiomthemes Mounthood versions through 1.3.2 Description A deserialization of untrusted data issue exists in axiomthemes Mounthood, allowing for object injection. This impacts the application’s ability to securely handle incoming data,...

5.9AI score0.0051EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/03/05 12:00 a.m.12 views

PT-2026-23267

Deserialization of Untrusted Data vulnerability in SeventhQueen Sweet Date sweetdate allows Object Injection.This issue affects Sweet Date: from n/a through 4.0.1...

5.9AI score0.00375EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/05 12:00 a.m.13 views

WordPress plugin NextScripts 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

8.8CVSS5.9AI score0.00355EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/05 12:00 a.m.15 views

WordPress plugin Classter 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

9.8CVSS5.8AI score0.0051EPSS
SaveExploits0References1
Rows per page
Query Builder