Lucene search
+L

12855 matches found

Positive Technologies
Positive Technologies
added 2025/07/16 12:00 a.m.10 views

PT-2025-29763 · WordPress · Wp Hide Post

Name of the Vulnerable Software and Affected Versions: xfinitysoft WP Post Hide versions n/a through 1.0.9 Description: A Cross-Site Request Forgery CSRF issue exists in xfinitysoft WP Post Hide, allowing attackers to perform actions on behalf of an authenticated user. Recommendations: Update...

4.3CVSS6.4AI score0.00128EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/07/16 12:00 a.m.15 views

PT-2025-29775 · WordPress · Wp-Businessdirectory

Name of the Vulnerable Software and Affected Versions: WP-BusinessDirectory versions through 3.1.3 Description: The WordPress Business Directory Plugins WP-BusinessDirectory contains a SQL injection flaw. The flaw is due to improper neutralization of special elements used in an SQL command. This...

9.3CVSS7.1AI score0.0035EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/07/16 12:00 a.m.16 views

PT-2025-29786 · Telegram · Site Chat On Telegram

Name of the Vulnerable Software and Affected Versions: Site Chat on Telegram versions n/a through 1.0.4 Description: A deserialization of untrusted data issue exists in Site Chat on Telegram, potentially allowing object injection. Recommendations: Update Site Chat on Telegram to a version later...

9.8CVSS6.3AI score0.00503EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/07/16 12:00 a.m.16 views

PT-2025-29827

Name of the Vulnerable Software and Affected Versions Vue I18n versions 9.0.0 through 9.14.4 Vue I18n versions 10.0.0 through 10.0.7 Vue I18n versions 11.0.0 through 11.0.9 Description Vue I18n, an internationalization plugin for Vue.js, contains a flaw in the escapeParameterHtml: true option. Th...

5.3CVSS5.9AI score0.00703EPSS
SaveExploits0References18
Positive Technologies
Positive Technologies
added 2025/07/16 12:00 a.m.17 views

PT-2025-29836 · Meta Inf Kft. · Email This Issue

Name of the Vulnerable Software and Affected Versions: META-INF Kft. Email This Issue Data Center versions prior to 9.13.0-GA Description: A cross-site scripting XSS issue exists in META-INF Kft. Email This Issue Data Center. Attackers can execute arbitrary web scripts or HTML by injecting a...

5.4CVSS5.7AI score0.00174EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/07/16 12:00 a.m.11 views

PT-2025-29806 · Woocommerce · Nc Wishlist For Woocommerce

Name of the Vulnerable Software and Affected Versions: Wishlist for WooCommerce versions n/a through 3.2.3 Description: The software contains a missing authorization flaw due to incorrectly configured access control security levels. Recommendations: Update Wishlist for WooCommerce to a version...

6.5CVSS6.4AI score0.0025EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/07/16 12:00 a.m.10 views

PT-2025-29816 · Unknown · Uxper Sala

Name of the Vulnerable Software and Affected Versions: uxper Sala versions n/a through 1.1.3 Description: A missing authorization issue exists in uxper Sala, allowing access to functionality not properly constrained by Access Control Lists ACLs. Recommendations: Update uxper Sala to a version...

7.5CVSS6.3AI score0.00257EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/07/16 12:00 a.m.16 views

PT-2025-29859 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: Adobe Experience Manager is susceptible to a DOM-based Cross-Site Scripting XSS issue. A low privileged attacker could exploit this issue by manipulating the DOM environment to...

5.5CVSS5.5AI score0.00346EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/07/16 12:00 a.m.14 views

PT-2025-29889 · Achat · Achat

Name of the Vulnerable Software and Affected Versions: Achat version 0.150 Description: A stack-based buffer overflow exists in the default configuration. By sending a specially crafted message to the UDP port 9256, an attacker can overwrite the structured exception handler SEH due to insufficien...

9.3CVSS7.5AI score0.01621EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2025/07/16 12:00 a.m.13 views

PT-2025-29692 · WordPress · Events Manager – Calendar

Name of the Vulnerable Software and Affected Versions: WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce versions up to and including 3.1.49 Description: The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress contai...

4.8CVSS5.7AI score0.00205EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/07/16 12:00 a.m.21 views

PT-2025-29693 · WordPress · Events Manager – Calendar

Name of the Vulnerable Software and Affected Versions: WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce versions prior to 3.1.50 Description: The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is susceptible to...

7.2CVSS6AI score0.00262EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/07/16 12:00 a.m.20 views

PT-2025-29881 · Linknat · Linknat Vos3000 +2

Name of the Vulnerable Software and Affected Versions: Linknat VOS Manager versions prior to 2.1.9.07 Linknat VOS2009 Linknat VOS3000 early builds Description: A path traversal issue exists in Linknat VOS Manager that allows unauthenticated remote attackers to read arbitrary files on the server...

8.7CVSS6.5AI score0.02062EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/07/16 12:00 a.m.11 views

PT-2025-29738 · Crocoblock · Jetpopup

Name of the Vulnerable Software and Affected Versions: Crocoblock JetPopup versions through 2.0.15 Description: The software contains a DOM-Based Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for potential malicious code execution...

6.5CVSS6.2AI score0.00209EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/07/16 12:00 a.m.17 views

PT-2025-29726 · WordPress · Stop/Block Bots Plugin Anti Bots

Name of the Vulnerable Software and Affected Versions: Stop and Block bots plugin Anti bots versions n/a through 1.48 Description: The Stop and Block bots plugin Anti bots contains a missing authorization flaw. This allows access to functionality that is not properly restricted by Access Control...

5.3CVSS6.3AI score0.00265EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/07/16 12:00 a.m.13 views

PT-2025-30579

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.64 Description A flaw exists in Apache HTTP Server where all "RewriteCond expr ..." tests evaluate as true. Recommendations Upgrade to version 2.4.65...

9.1CVSS7.5AI score0.04799EPSS
SaveExploits2References76
Positive Technologies
Positive Technologies
added 2025/07/16 12:00 a.m.13 views

PT-2025-29888 · Unknown · Rips Scanner

Name of the Vulnerable Software and Affected Versions: RIPS Scanner version 0.54 Description: A path traversal vulnerability exists that allows remote attackers to read arbitrary files on the system with the privileges of the web server. This is achieved by sending crafted HTTP GET requests to th...

8.7CVSS6.5AI score0.02126EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2025/07/16 12:00 a.m.14 views

PT-2025-29739 · Crocoblock · Jetpopup

Name of the Vulnerable Software and Affected Versions: Crocoblock JetPopup versions through 2.0.15.1 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, specifically a Stored Cross-site Scripting XSS flaw. This allows for the injection of...

6.5CVSS5.9AI score0.00209EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/07/16 12:00 a.m.11 views

PT-2025-29731 · Yaysmtp · Yaysmtp

Name of the Vulnerable Software and Affected Versions: YaySMTP versions n/a through 1.5 Description: YaySMTP contains a SQL injection flaw. The flaw is due to improper neutralization of special elements used in an SQL command. Recommendations: Versions prior to 1.6 are affected...

7.6CVSS7.1AI score0.00355EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/07/16 12:00 a.m.15 views

PT-2025-29741 · Houzez · Houzez

Name of the Vulnerable Software and Affected Versions: Houzez versions prior to 4.0.5 Description: A missing authorization issue exists in Houzez, allowing exploitation of incorrectly configured access control security levels. Recommendations: Update Houzez to version 4.0.5 or later...

4.3CVSS6.4AI score0.00241EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/07/16 12:00 a.m.12 views

PT-2025-29707 · WordPress · Affiliate Reviews

Name of the Vulnerable Software and Affected Versions: Affiliate Reviews plugin for WordPress versions up to and including 1.0.6 Description: The Affiliate Reviews plugin for WordPress is susceptible to Stored Cross-Site Scripting through the numColumns parameter. Insufficient input sanitization...

6.4CVSS5.8AI score0.0024EPSS
SaveExploits0References7
Rows per page
Query Builder