Lucene search
+L

5020 matches found

RedhatCVE
RedhatCVE
added 2025/07/19 6:58 p.m.15 views

CVE-2025-54068

Livewire is a full-stack framework for Laravel. In Livewire v3 up to and including v3.6.3, a vulnerability allows unauthenticated attackers to achieve remote command execution in specific scenarios. The issue stems from how certain component property updates are hydrated. This vulnerability is...

9.8CVSS6.9AI score0.96473EPSS
SaveExploits5References1
Positive Technologies
Positive Technologies
added 2025/07/19 12:00 a.m.15 views

PT-2025-103: Deserialization of untrusted data in FreeScout

The vulnerability was identified in FreeScout, version 1.8.182. The discovered vulnerability allows an attacker to deserialize data, instantiate arbitrary objects and alter their properties, causing severe disruption of the system. Vulnerability status: Confirmed by vendor Date of vulnerability...

7CVSS5.9AI score
SaveExploits0References2
Cvelist
Cvelist
added 2025/07/17 9:02 p.m.27 views

CVE-2025-7757 PHPGurukul Land Record System edit-property.php sql injection

A vulnerability classified as critical was found in PHPGurukul Land Record System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit-property.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit has be...

7.5CVSS0.00511EPSS
SaveExploits1References5
NVD
NVD
added 2025/07/17 7:15 p.m.25 views

CVE-2025-54068

Livewire is a full-stack framework for Laravel. In Livewire v3 up to and including v3.6.3, a vulnerability allows unauthenticated attackers to achieve remote command execution in specific scenarios. The issue stems from how certain component property updates are hydrated. This vulnerability is...

9.8CVSS0.96473EPSS
SaveExploits5References5
Vulnrichment
Vulnrichment
added 2025/07/17 6:16 p.m.9 views

CVE-2025-54068 Livewire vulnerable to remote command execution during property update hydration

Livewire is a full-stack framework for Laravel. In Livewire v3 up to and including v3.6.3, a vulnerability allows unauthenticated attackers to achieve remote command execution in specific scenarios. The issue stems from how certain component property updates are hydrated. This vulnerability is...

9.2CVSS7AI score0.96473EPSS
SaveExploits5References3
Cvelist
Cvelist
added 2025/07/17 6:16 p.m.64 views

CVE-2025-54068 Livewire vulnerable to remote command execution during property update hydration

Livewire is a full-stack framework for Laravel. In Livewire v3 up to and including v3.6.3, a vulnerability allows unauthenticated attackers to achieve remote command execution in specific scenarios. The issue stems from how certain component property updates are hydrated. This vulnerability is...

9.2CVSS0.96473EPSS
SaveExploits5References3
CNNVD
CNNVD
added 2025/07/17 12:00 a.m.102 views

Livewire 代码注入漏洞

Livewire is Livewire open source a full stack framework for Laravel that allows you to build dynamic UI components without leaving PHP. A code injection vulnerability exists in Livewire 3.6.3 and earlier versions, which stems from mishandling of component property updates and could lead to remote...

9.8CVSS7.6AI score0.96473EPSS
SaveExploits5References4
NVD
NVD
added 2025/07/16 11:15 a.m.9 views

CVE-2025-48150

Missing Authorization vulnerability in sminozzi Real Estate Property 2024 Create Your Own Fields and Search Bar WP Plugin real-estate-right-now allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Real Estate Property 2024 Create Your Own Fields and Search Ba...

4.3CVSS0.00241EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/07/16 10:36 a.m.17 views

CVE-2025-48150 WordPress Real Estate Property 2024 Create Your Own Fields and Search Bar WP Plugin plugin <= 4.48 - Broken Access Control Vulnerability

Missing Authorization vulnerability in sminozzi Real Estate Property 2024 Create Your Own Fields and Search Bar WP Plugin real-estate-right-now allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Real Estate Property 2024 Create Your Own Fields and Search Ba...

4.3CVSS0.00241EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/07/16 10:36 a.m.4 views

CVE-2025-48150 WordPress Real Estate Property 2024 Create Your Own Fields and Search Bar WP Plugin plugin <= 4.48 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Bill Minozzi Real Estate Property 2024 Create Your Own Fields and Search Bar WP Plugin allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Real Estate Property 2024 Create Your Own Fields and Search Bar WP Plugin: from...

4.3CVSS7.1AI score0.00241EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/16 12:00 a.m.9 views

WordPress plugin Real Estate Property 2024 Create Your Own Fields and Search Bar 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress plugin Real Estate Property 202...

4.3CVSS6.4AI score0.00241EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/07/14 11:22 p.m.7 views

SUSE CVE-2025-38342

In the Linux kernel, the following vulnerability has been resolved: software node: Correct a OOB check in softwarenodegetreferenceargs softwarenodegetreferenceargs wants to get @index-th element, so the property value requires at least 'index + 1 sizeofref' bytes but that can not be guaranteed by...

4.4CVSS6.5AI score0.0017EPSS
SaveExploits0References22
RedHat Linux
RedHat Linux
added 2025/07/14 4:21 p.m.8 views

commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

A flaw was found in Apache Commons BeanUtils. This vulnerability allows remote attackers to execute arbitrary code via uncontrolled access to the declaredClass property on Java enum objects, which can expose the class loader when property paths are passed from external sources to methods like...

8.8CVSS7.6AI score0.01825EPSS
SaveExploits1References8
RedHat Linux
RedHat Linux
added 2025/07/14 3:56 p.m.14 views

commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

A flaw was found in Apache Commons BeanUtils. This vulnerability allows remote attackers to execute arbitrary code via uncontrolled access to the declaredClass property on Java enum objects, which can expose the class loader when property paths are passed from external sources to methods like...

8.8CVSS7.6AI score0.01825EPSS
SaveExploits1References8
RedHat Linux
RedHat Linux
added 2025/07/14 3:56 p.m.14 views

commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

A flaw was found in Apache Commons BeanUtils. This vulnerability allows remote attackers to execute arbitrary code via uncontrolled access to the declaredClass property on Java enum objects, which can expose the class loader when property paths are passed from external sources to methods like...

8.8CVSS7.6AI score0.01825EPSS
SaveExploits1References8
RedHat Linux
RedHat Linux
added 2025/07/10 4:19 p.m.11 views

commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

A flaw was found in Apache Commons BeanUtils. This vulnerability allows remote attackers to execute arbitrary code via uncontrolled access to the declaredClass property on Java enum objects, which can expose the class loader when property paths are passed from external sources to methods like...

8.8CVSS7.6AI score0.01825EPSS
SaveExploits1References8
OSV
OSV
added 2025/07/10 9:15 a.m.7 views

UBUNTU-CVE-2025-38342

In the Linux kernel, the following vulnerability has been resolved: software node: Correct a OOB check in softwarenodegetreferenceargs softwarenodegetreferenceargs wants to get @index-th element, so the property value requires at least 'index + 1 sizeofref' bytes but that can not be guaranteed by...

7.1CVSS6.2AI score0.0017EPSS
SaveExploits0References41
OSV
OSV
added 2025/07/10 8:15 a.m.9 views

CVE-2025-38342 software node: Correct a OOB check in software_node_get_reference_args()

In the Linux kernel, the following vulnerability has been resolved: software node: Correct a OOB check in softwarenodegetreferenceargs softwarenodegetreferenceargs wants to get @index-th element, so the property value requires at least 'index + 1 sizeofref' bytes but that can not be guaranteed by...

7CVSS6.3AI score
SaveExploits0References13
Amazon
Amazon
added 2025/07/10 12:00 a.m.9 views

Medium: xorg-x11-server-Xwayland

Issue Overview: A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash. CVE-2025-49175 A flaw was found in the Big Requests extension. The reque...

7.8CVSS6.8AI score0.0041EPSS
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/07/10 12:00 a.m.10 views

Quantum Properties Trojans (QuPTs) for Attacking Quantum Neural Networks

Quantum neural networks QNN hold immense potential for the future of quantum machine learning QML. However, QNN security and robustness remain largely unexplored. In this work, we proposed novel Trojan attacks based on the quantum computing properties in a QNN-based binary classifier. Our propose...

6.8AI score
SaveExploits0
Rows per page
Query Builder