Lucene search
+L

4717 matches found

Vulnrichment
Vulnrichment
added 2025/12/16 8:12 a.m.3 views

CVE-2025-64242 WordPress Easy Property Listings plugin <= 3.5.22 - Broken Access Control vulnerability

Missing Authorization vulnerability in Merv Barrett Easy Property Listings easy-property-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Property Listings: from n/a through = 3.5.22...

4.3CVSS5.1AI score0.00192EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/16 8:12 a.m.9 views

CVE-2025-64242

CVE-2025-64242 concerns a Missing Authorization vulnerability in the WordPress plugin Easy Property Listings (versions up to and including 3.5.15). The issue is described as broken access control allowing an attacker with insufficient privileges to access restricted functionality. The CVE's base ...

4.3CVSS5.7AI score0.00192EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.6 views

PT-2025-51390

Name of the Vulnerable Software and Affected Versions Easy Property Listings versions through 3.5.15 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. This allows for exploitation of the system. Recommendations Update...

4.3CVSS6.5AI score0.00192EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.5 views

WordPress plugin Easy Property Listings 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.4AI score0.00192EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/15 12:54 p.m.15 views

USN-7929-1 usbmuxd vulnerability

It was discovered that usbmuxd incorrectly handled certain paths received with the SavePairRecord command. A local attacker could possibly use this issue to delete and write files named .plist in arbitrary locations...

5.7CVSS5.9AI score0.00134EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/12/12 6:12 p.m.5 views

CVE-2025-14530

A vulnerability has been found in SourceCodester Real Estate Property Listing App 1.0. The impacted element is an unknown function of the file /admin/property.php. Such manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...

7.2CVSS6.8AI score0.00399EPSS
SaveExploits1References1
SUSE Linux
SUSE Linux
added 2025/12/12 4:18 p.m.9 views

Security update for rhino

This update for rhino fixes the following issues: Update to version 1.7.15.1. Security issues fixed: CVE-2025-66453: high CPU consumption when processing specific numbers via the toFixed function bsc1254481. Other changes and issues fixed: Version 1.7.15: Basic support for "rest parameters"...

6.9CVSS7.1AI score0.00241EPSS
SaveExploits0References4
OSV
OSV
added 2025/12/12 4:18 p.m.4 views

SUSE-SU-2025:4390-1 Security update for rhino

This update for rhino fixes the following issues: Update to version 1.7.15.1. Security issues fixed: - CVE-2025-66453: high CPU consumption when processing specific numbers via the toFixed function bsc1254481. Other changes and issues fixed: - Version 1.7.15: Basic support for 'rest parameters'...

7.5CVSS6.9AI score0.00241EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/12/12 12:55 p.m.7 views

WordPress Easy Property Listings plugin <= 3.5.20 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by daroo in WordPress Plugin Easy Property Listings versions = 3.5.20...

4.3CVSS5.4AI score0.00192EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/12/11 6:16 p.m.13 views

CVE-2025-14530

A vulnerability has been found in SourceCodester Real Estate Property Listing App 1.0. The impacted element is an unknown function of the file /admin/property.php. Such manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...

7.2CVSS0.00399EPSS
SaveExploits1References5
OSV
OSV
added 2025/12/11 6:16 p.m.7 views

CVE-2025-14530

A vulnerability has been found in SourceCodester Real Estate Property Listing App 1.0. The impacted element is an unknown function of the file /admin/property.php. Such manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...

7.2CVSS5.5AI score0.00399EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/12/11 5:32 p.m.3 views

CVE-2025-14530 SourceCodester Real Estate Property Listing App property.php unrestricted upload

A vulnerability has been found in SourceCodester Real Estate Property Listing App 1.0. The impacted element is an unknown function of the file /admin/property.php. Such manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...

5.8CVSS4.9AI score0.00399EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/12/11 5:32 p.m.25 views

EUVD-2025-202754

A vulnerability has been found in SourceCodester Real Estate Property Listing App 1.0. The impacted element is an unknown function of the file /admin/property.php. Such manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...

5.8CVSS4.8AI score0.00399EPSS
SaveExploits1References6
CVE
CVE
added 2025/12/11 5:32 p.m.28 views

CVE-2025-14530

CVE-2025-14530 affects SourceCodester Real Estate Property Listing App 1.0. The vulnerability is in /admin/property.php where the image parameter can be manipulated to achieve unrestricted file uploads. This allows remote exploitation; the exploit has been publicly disclosed. Root cause is descri...

7.2CVSS5.1AI score0.00399EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/12/11 5:32 p.m.57 views

CVE-2025-14530 SourceCodester Real Estate Property Listing App property.php unrestricted upload

A vulnerability has been found in SourceCodester Real Estate Property Listing App 1.0. The impacted element is an unknown function of the file /admin/property.php. Such manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...

5.8CVSS0.00399EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/11 12:0 a.m.4 views

SourceCodester Real Estate Property Listing App 安全漏洞

SourceCodester Real Estate Property Listing App is an open source real estate listing application from SourceCodester. A security vulnerability exists in version 1.0 of the SourceCodester Real Estate Property Listing App, which stems from an incorrect manipulation of the parameter image in file...

7.2CVSS5AI score0.00399EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/12/11 12:0 a.m.12 views

PT-2025-50647

Name of the Vulnerable Software and Affected Versions SourceCodester Real Estate Property Listing App version 1.0 Description A flaw exists in SourceCodester Real Estate Property Listing App version 1.0 that allows for unrestricted file uploads. This is due to manipulation of the image argument...

5.8CVSS4.6AI score0.00399EPSS
SaveExploits1References7
Mageia
Mageia
added 2025/12/09 7:12 p.m.9 views

Updated python3 packages fix security vulnerabilities

Excessive read buffering DoS in http.client. CVE-2025-13836 Out-of-memory when loading Plist. CVE-2025-13837 Quadratic complexity in node ID cache clearing. CVE-2025-12084...

7.5CVSS6.8AI score0.01525EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
added 2025/12/05 9:3 a.m.4 views

Out-of-memory when loading Plist

...

5.5CVSS7AI score0.00193EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2025/12/04 3:28 a.m.207 views

Exploit for CVE-2025-55182

CVE-2025-55182: React Server Components RCE A minimal proof o...

10CVSS8.3AI score0.99562EPSS
SaveExploits394
Rows per page
Query Builder