Lucene search
+L

12867 matches found

Positive Technologies
Positive Technologies
•added 2025/06/17 12:00 a.m.•15 views

PT-2025-25704 · Unknown · Rustaurius Ultimate Reviews

Name of the Vulnerable Software and Affected Versions: Rustaurius Ultimate Reviews versions n/a through 3.2.14 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For version...

7.1CVSS6.6AI score0.00342EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/06/17 12:00 a.m.•27 views

PT-2025-25712 · Unknown · Aeroscroll Gallery

Name of the Vulnerable Software and Affected Versions: Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid with Photo Gallery versions 1.0.12 and earlier Description: The issue is a Path Traversal vulnerability that affects Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid...

7.5CVSS7.2AI score0.00525EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/06/17 12:00 a.m.•20 views

PT-2025-25692 · WordPress · Wp Dummy Content Generator

Name of the Vulnerable Software and Affected Versions: WP Dummy Content Generator versions 3.4.6 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For WP Dumm...

6.5CVSS6.1AI score0.00396EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/06/17 12:00 a.m.•13 views

PT-2025-25727 · Noptin · Noptin

Name of the Vulnerable Software and Affected Versions: Noptin versions 3.8.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicious...

5.9CVSS5.4AI score0.00202EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/06/17 12:00 a.m.•12 views

PT-2025-25698 · Unknown · Thembay Sapa

Name of the Vulnerable Software and Affected Versions: thembay Sapa versions 1.1.14 and earlier Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

8.1CVSS8AI score0.00582EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/06/17 12:00 a.m.•12 views

PT-2025-25713 · Unknown · Postapanduri

Name of the Vulnerable Software and Affected Versions: PostaPanduri versions n/a through 2.1.3 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...

9.3CVSS9.2AI score0.00323EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/06/17 12:00 a.m.•9 views

PT-2025-25711 · Unknown · Fw Food Menu

Name of the Vulnerable Software and Affected Versions: FW Food Menu versions n/a through 6.0.0 Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the use of malicious files. Recommendations: For FW Food Menu versions n/a through 6.0.0, consider...

10CVSS9.4AI score0.00397EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/06/17 12:00 a.m.•11 views

PT-2025-25669 · Simen · Simen

Name of the Vulnerable Software and Affected Versions: Simen versions n/a through 4.6 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File Inclusion in...

8.1CVSS8AI score0.00719EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/06/17 12:00 a.m.•16 views

PT-2025-25610 · Unknown · Conda Constructor

Name of the Vulnerable Software and Affected Versions: Conda Constructor versions prior to 3.11.3 Description: The issue concerns the Conda Constructor, a tool for creating installers for conda packages. Prior to version 3.11.3, the shell installer scripts process the installation prefix using an...

6.7AI score0.00161EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/06/17 12:00 a.m.•22 views

PT-2025-25736 · Unknown · Cubewp Framework

Name of the Vulnerable Software and Affected Versions: CubeWP Framework versions 1.1.23 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS in the CubeWP Framework...

6.5CVSS6.4AI score0.00187EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/06/17 12:00 a.m.•17 views

PT-2025-25735 · Cyberchimps · Cyberchimps Responsive Blocks

Name of the Vulnerable Software and Affected Versions: CyberChimps Responsive Blocks versions 2.0.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacke...

6.5CVSS6.2AI score0.00187EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/06/17 12:00 a.m.•12 views

PT-2025-25728 · Mycred · Mycred

Name of the Vulnerable Software and Affected Versions: myCred versions n/a through 2.9.4.2 Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions n/a through 2.9.4.2, update t...

5.3CVSS5.1AI score0.00248EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/06/17 12:00 a.m.•10 views

PT-2025-25703 · Unknown · Thembay Diza

Name of the Vulnerable Software and Affected Versions: thembay Diza versions 1.3.8 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion. This ...

8.1CVSS7.9AI score0.00728EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/06/17 12:00 a.m.•9 views

PT-2025-25695 · Unknown · Thembay Lasa

Name of the Vulnerable Software and Affected Versions: thembay Lasa versions 1.1 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion. This is...

8.1CVSS7.9AI score0.00582EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/06/17 12:00 a.m.•13 views

PT-2025-25700 · Thembay · Thembay Maia

Name of the Vulnerable Software and Affected Versions: thembay Maia versions 1.1.15 and earlier Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

8.1CVSS7.9AI score0.00728EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/06/17 12:00 a.m.•19 views

PT-2025-25686 · Unknown · Wp Job Portal

Name of the Vulnerable Software and Affected Versions: WP Job Portal versions n/a through 2.3.2 Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows for Blind SQL Injection, which can b...

9.3CVSS9.3AI score0.00342EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/06/17 12:00 a.m.•10 views

PT-2025-25684 · WordPress · Wpexperts Hub Woocommerce Partial Shipment

Name of the Vulnerable Software and Affected Versions: WpExperts Hub Woocommerce Partial Shipment versions n/a through 3.2 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...

8.5CVSS8.5AI score0.00296EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/06/17 12:00 a.m.•19 views

PT-2025-25759 · Fuji Electric · Fuji Electric Smart Editor

Name of the Vulnerable Software and Affected Versions: Fuji Electric Smart Editor affected versions not specified Description: The issue is related to an out-of-bounds write, which may allow an attacker to execute arbitrary code. Recommendations: At the moment, there is no information about a new...

8.4CVSS6.7AI score0.00232EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/06/17 12:00 a.m.•15 views

PT-2025-25730 · Unknown · If-So Dynamic Content Personalization

Name of the Vulnerable Software and Affected Versions: If-So Dynamic Content Personalization versions 1.9.3.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...

6.5CVSS5.9AI score0.00187EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/06/17 12:00 a.m.•20 views

PT-2025-25606 · WordPress · Wise Chat

Name of the Vulnerable Software and Affected Versions: Wise Chat plugin for WordPress versions up to, and including, 3.3.4 Description: The issue is related to Stored Cross-Site Scripting via the X-Forwarded-For header due to insufficient input sanitization and output escaping. This allows...

7.2CVSS5.8AI score0.00287EPSS
SaveExploits0References7
Rows per page
Query Builder