Lucene search
+L

16762 matches found

Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•13 views

PT-2025-17078 · D Link · Dir 832

Name of the Vulnerable Software and Affected Versions: dlink DIR 832x version 240802 Description: The issue allows a remote attacker to execute arbitrary code via the macaddr key value to the function 0x42232c. This enables the attacker to potentially gain control over the device. Recommendations...

9.8CVSS7.4AI score0.02305EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•12 views

PT-2025-18287 · NetGear · Netgear Wnr2000V2

Name of the Vulnerable Software and Affected Versions: Netgear JWNR2000v2 version 1.0.0.11 Description: A critical issue was found in the function sub 435E04, where the manipulation of the host argument leads to command injection. This issue can be exploited remotely. The vendor was contacted abo...

8.8CVSS6.5AI score0.02744EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•26 views

PT-2025-18340 · NetGear · Netgear Ex6200

Name of the Vulnerable Software and Affected Versions: Netgear EX6200 version 1.0.3.94 Description: A critical issue was found affecting the function sub 3C03C. The manipulation of the host argument leads to a buffer overflow. It is possible to initiate the attack remotely. The vendor was contact...

9.8CVSS8.6AI score0.0116EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•22 views

PT-2025-17125 · Termel · Termel Pdf 2 Post

Name of the Vulnerable Software and Affected Versions: termel PDF 2 Post versions prior to 2.4.0 Description: The issue is related to an Improper Control of Generation of Code 'Code Injection' vulnerability, which allows Remote Code Inclusion. This means that an attacker could potentially inject...

9.9CVSS9.4AI score0.20328EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•13 views

PT-2025-16963 · Unknown · Alfa Campro-Co

Name of the Vulnerable Software and Affected Versions: ALFA CAMPRO-co version 2.29 Description: A Buffer Overflow issue allows a remote attacker to execute arbitrary code via the newap text 0 key value. This enables the attacker to potentially gain control over the system. Recommendations: For AL...

9.8CVSS7.5AI score0.01082EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•16 views

PT-2025-16998 · WordPress · Amazon Showcase Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Amazon Showcase WordPress Plugin versions n/a through 2.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

7.1CVSS7.3AI score0.0015EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•16 views

PT-2025-17018 · Teamzt · Teamzt Smart Agreements

Name of the Vulnerable Software and Affected Versions: teamzt Smart Agreements versions 1.0.3 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, which allows PHP...

7.5CVSS7.9AI score0.00705EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•20 views

PT-2025-17049 · Unknown · Theme File Duplicator

Name of the Vulnerable Software and Affected Versions: Theme File Duplicator versions 1.3 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the use of malicious files. Recommendations: For Theme File Duplicator versions 1.3 and earlier,...

9.9CVSS9.4AI score0.00537EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•18 views

PT-2025-17344

Name of the Vulnerable Software and Affected Versions Rasa Pro versions prior to 3.9.20 Rasa Pro versions prior to 3.10.19 Rasa Pro versions prior to 3.11.7 Rasa Pro versions prior to 3.12.6 Description A vulnerability has been identified in Rasa Pro where voice connectors do not properly impleme...

6.5CVSS5.8AI score0.00464EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•25 views

PT-2025-16970 · Unknown · Cwd – Stealth Links

Name of the Vulnerable Software and Affected Versions: CWD – Stealth Links versions n/a through 1.3 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. This allows for SQL Injection attacks. Recommendations:...

9.3CVSS9.6AI score0.00441EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•9 views

PT-2025-17137 · Unknown · Verowa Connect

Name of the Vulnerable Software and Affected Versions: Verowa Connect versions 3.0.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

7.1CVSS7.5AI score0.00288EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•17 views

PT-2025-16928 · Unknown · Wisdom Master Pro

Name of the Vulnerable Software and Affected Versions: Wisdom Master Pro versions 5.0 through 5.2 Description: A vulnerability in the retrieve course Information function of Wisdom Master Pro allows remote attackers to perform arbitrary system commands by running a malicious file due to improper...

9.9CVSS7.8AI score0.0048EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•13 views

PT-2025-16997 · Mlanguage · Mlanguage

Name of the Vulnerable Software and Affected Versions: mLanguage versions 1.6.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, and also...

7.1CVSS7.3AI score0.0015EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•12 views

PT-2025-17235 · Unknown · Prison Management System

Name of the Vulnerable Software and Affected Versions: Personal Management System version 1.4.65 Description: An issue in the Personal Management System allows a remote attacker to obtain sensitive information via the my-contacts-settings component. Recommendations: For version 1.4.65, consider...

6.5CVSS6AI score0.00379EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•12 views

PT-2025-17043 · WordPress · Webtoffee Wordpress Backup & Migration

Name of the Vulnerable Software and Affected Versions: WebToffee WordPress Backup & Migration versions 1.5.3 and earlier Description: The issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into log files. Recommendations: For versions 1.5.3 and...

5.9CVSS6.1AI score0.004EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•12 views

PT-2025-18968 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue affects some unknown functionality of the LIST Command Handler component, leading to a buffer overflow. This can be exploited remotely. Recommendations: For PCMan FTP Server version...

9.8CVSS7.4AI score0.00742EPSS
SaveExploits1References15
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•15 views

PT-2025-17207 · Unknown · Litepubl Cms

Name of the Vulnerable Software and Affected Versions: Litepubl CMS versions 7.0.9 and earlier Description: The issue allows for remote code execution RCE in the admin/service/run endpoint. No information is provided about the estimated number of potentially affected devices worldwide or real-wor...

7.2CVSS7.2AI score0.005EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2025/04/16 10:32 p.m.•42 views

CVE-2025-24910 Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference

Overview XML documents optionally contain a Document Type Definition DTD, which, among other features, enables the definition of XML entities. It is possible to define an entity by providing a substitution string in the form of a URI. Once the content of the URI is read, it is fed back into the...

4.9CVSS0.00419EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/16 10:27 p.m.•78 views

CVE-2025-24908

The CVE affects Hitachi Vantara Pentaho Data Integration & Analytics, prior to version 10.2.0.2 (including 9.3.x and 8.3.x). The root cause is that the UploadFile input used to build file paths is not properly sanitized against sequences like '.../...//', allowing a path traversal outside the res...

6.8CVSS6.6AI score0.00493EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/16 9:28 p.m.•119 views

CVE-2025-31478

CVE-2025-31478 applies to Zulip, an open-source team chat tool. A bug in the Zulip server allowed account creation in organizations that rely on a single-sign-on (SSO) backend and have disabled EmailAuthBackend, effectively bypassing the configured SSO. The issue affects configurations where acce...

8.2CVSS8.2AI score0.00355EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder