Lucene search
+L

3558 matches found

NVD
NVD
added 2026/04/18 12:16 a.m.8 views

CVE-2026-40484

ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the database backup restore functionality extracts uploaded archive contents and copies files from the Images/ directory into the web-accessible document root using recursiveCopyDirectory, which performs no file...

9.1CVSS0.00867EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/04/17 11:25 p.m.6 views

EUVD-2026-23597

ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the database backup restore functionality extracts uploaded archive contents and copies files from the Images/ directory into the web-accessible document root using recursiveCopyDirectory, which performs no file...

9.1CVSS6.3AI score0.00867EPSS
SaveExploits0References3
CVE
CVE
added 2026/04/17 11:25 p.m.17 views

CVE-2026-40484

ChurchCRM prior to version 7.2.0 is affected by an authenticated remote code execution in the database backup restore feature. The restore operation extracts uploaded archives and copies files from Images/ into the web root using recursiveCopyDirectory(), without file extension filtering, allowin...

9.1CVSS6.3AI score0.00867EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/04/17 11:25 p.m.43 views

CVE-2026-40484 ChurchCRM: Authenticated Remote Code Execution via Unrestricted PHP File Write in Database Restore Function

ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the database backup restore functionality extracts uploaded archive contents and copies files from the Images/ directory into the web-accessible document root using recursiveCopyDirectory, which performs no file...

9.1CVSS0.00867EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/04/17 12:00 a.m.30 views

PT-2026-33532

ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the database backup restore functionality extracts uploaded archive contents and copies files from the Images/ directory into the web-accessible document root using recursiveCopyDirectory, which performs no file...

9.1CVSS6.3AI score0.00867EPSS
SaveExploits0References4
Veeam
Veeam
added 2026/04/16 12:00 a.m.93 views

Release Information for Veeam Backup for Microsoft 365 8.4

More Recent Version Available Please find the latest version of Veeam Backup for Microsoft 365 here: Veeam Downloads - Latest Version Build Numbers and Versions of Veeam Backup for Microsoft 365 Requirements This release can be used to: upgrade an existing v7, v8, v8.1, v8.2, or v8.3 deployment o...

5.7AI score
SaveExploits0Affected Software1
Packet Storm
Packet Storm
added 2026/04/16 12:00 a.m.124 views

📄 ChurchCRM Database Restore Remote Code Execution

This Metasploit module exploits a remote code execution vulnerability in ChurchCRM versions prior to 6.2.0. The vulnerability resides in the Database Restore functionality, which allows an authenticated user with administrative privileges to upload a malicious backup file. By bypassing upload...

9.1CVSS6.4AI score0.0157EPSS
SaveExploits3
RedhatCVE
RedhatCVE
added 2026/04/14 7:23 p.m.14 views

CVE-2026-5507

When restoring a session from cache, a pointer from the serialized session data is used in a free operation without validation. An attacker who can poison the session cache could trigger an arbitrary free. Exploitation requires the ability to inject a crafted session into the cache and for the...

4.1CVSS5.9AI score0.00172EPSS
SaveExploits0References1
Chainguard
Chainguard
added 2026/04/11 2:18 a.m.17 views

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: chartmuseum, gatekeeper-fips, fuse-overlayfs-snapshotter, karpenter, trivy-fips, azurefile-csi, cilium, kargo, redka, seaweedfs, kpt, gomplate, knative-eventing-fips, libnvidia-container, extism, azuredisk-csi-fips, gitness, amazon-ssm-agent-fips, docker-cli-fips,...

5.5CVSS6.5AI score0.0029EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/04/11 2:18 a.m.11 views

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: chartmuseum, gatekeeper-fips, fuse-overlayfs-snapshotter, karpenter, trivy-fips, azurefile-csi, cilium, kargo, redka, seaweedfs, kpt, gomplate, knative-eventing-fips, libnvidia-container, extism, azuredisk-csi-fips, gitness, amazon-ssm-agent-fips, docker-cli-fips,...

5.2AI score
SaveExploits0
NVD
NVD
added 2026/04/10 2:16 a.m.8 views

CVE-2026-4305

The Royal WordPress Backup & Restore Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wprpendingtemplate' parameter in all versions up to, and including, 1.0.16 due to insufficient input validation. This makes it possible for unauthenticated attackers to inject...

6.1CVSS0.00277EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/04/10 1:25 a.m.5 views

CVE-2026-4305 Royal WordPress Backup & Restore Plugin <= 1.0.16 - Reflected Cross-Site Scripting via 'wpr_pending_template' Parameter

The Royal WordPress Backup & Restore Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wprpendingtemplate' parameter in all versions up to, and including, 1.0.16 due to insufficient input validation. This makes it possible for unauthenticated attackers to inject...

6.1CVSS5.9AI score0.00277EPSS
SaveExploits0References4
CVE
CVE
added 2026/04/10 1:25 a.m.15 views

CVE-2026-4305

The Royal WordPress Backup & Restore Plugin for WordPress is affected (versions up to and including 1.0.16). The issue is a Reflected Cross-Site Scripting vulnerability via the wpr_pending_template parameter caused by insufficient input validation. Unauthenticated attackers could inject arbitrary...

6.1CVSS6.1AI score0.00277EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/04/10 1:25 a.m.37 views

CVE-2026-4305 Royal WordPress Backup & Restore Plugin <= 1.0.16 - Reflected Cross-Site Scripting via 'wpr_pending_template' Parameter

The Royal WordPress Backup & Restore Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wprpendingtemplate' parameter in all versions up to, and including, 1.0.16 due to insufficient input validation. This makes it possible for unauthenticated attackers to inject...

6.1CVSS0.00277EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/04/10 12:30 a.m.16 views

EUVD-2026-21216

When restoring a session from cache, a pointer from the serialized session data is used in a free operation without validation. An attacker who can poison the session cache could trigger an arbitrary free. Exploitation requires the ability to inject a crafted session into the cache and for the...

4.1CVSS6AI score0.00172EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/04/10 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-5507

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When restoring a session from cache, a pointer from the serialized session data is used in a free operation without validation. An attacker who can poison the...

4.1CVSS5.5AI score0.00172EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/04/10 12:00 a.m.13 views

WordPress plugin Royal WordPress Backup & Restore Plugin 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.1CVSS5.7AI score0.00277EPSS
SaveExploits0References5
NVD
NVD
added 2026/04/09 11:17 p.m.19 views

CVE-2026-5507

When restoring a session from cache, a pointer from the serialized session data is used in a free operation without validation. An attacker who can poison the session cache could trigger an arbitrary free. Exploitation requires the ability to inject a crafted session into the cache and for the...

4.1CVSS0.00172EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/09 11:17 p.m.12 views

DEBIAN-CVE-2026-5507

When restoring a session from cache, a pointer from the serialized session data is used in a free operation without validation. An attacker who can poison the session cache could trigger an arbitrary free. Exploitation requires the ability to inject a crafted session into the cache and for the...

4CVSS5.6AI score0.00172EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/04/09 11:17 p.m.10 views

CVE-2026-5507

When restoring a session from cache, a pointer from the serialized session data is used in a free operation without validation. An attacker who can poison the session cache could trigger an arbitrary free. Exploitation requires the ability to inject a crafted session into the cache and for the...

4.1CVSS5.9AI score0.00172EPSS
SaveExploits0References2
Rows per page
Query Builder