Lucene search
+L

2223 matches found

The Hacker News
The Hacker News
added 2025/10/28 10:30 a.m.7 views

Is Your Google Workspace as Secure as You Think it is?

The New Reality for Lean Security Teams If you're the first security or IT hire at a fast-growing startup, you've likely inherited a mandate that's both simple and maddeningly complex: secure the business without slowing it down. Most organizations using Google Workspace start with an environment...

6.7AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/10/28 6:59 a.m.14 views

CVE-2025-12229

A security flaw has been discovered in projectworlds Expense Management System 1.0. This affects an unknown function of the file /public/admin/roles/create of the component Roles Page. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit has been...

4.8CVSS2.9AI score0.00239EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/10/28 1:34 a.m.6 views

CVE-2025-62883

Missing Authorization vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premmerce User Roles: from n/a through = 1.0.13...

4.3CVSS7AI score0.00234EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/27 6:15 a.m.9 views

CVE-2025-12229

A security flaw has been discovered in projectworlds Expense Management System 1.0. This affects an unknown function of the file /public/admin/roles/create of the component Roles Page. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit has been...

4.8CVSS0.00239EPSS
SaveExploits1References4
OSV
OSV
added 2025/10/27 6:15 a.m.7 views

CVE-2025-12229

A security flaw has been discovered in projectworlds Expense Management System 1.0. This affects an unknown function of the file /public/admin/roles/create of the component Roles Page. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit has been...

4.8CVSS4AI score0.00239EPSS
SaveExploits1References4
CVE
CVE
added 2025/10/27 5:32 a.m.27 views

CVE-2025-12229

Projectworlds Expense Management System 1.0 is reportedly vulnerable to cross-site scripting via the /public/admin/roles/create function in the Roles Page. Affected component is the Roles Page, with the root cause described as manipulation of an unknown function in that file. The vulnerability en...

4.8CVSS2.9AI score0.00239EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/27 5:32 a.m.6 views

CVE-2025-12229 projectworlds Expense Management System Roles Page create cross site scripting

A security flaw has been discovered in projectworlds Expense Management System 1.0. This affects an unknown function of the file /public/admin/roles/create of the component Roles Page. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit has been...

4.8CVSS2.9AI score0.00239EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/27 5:32 a.m.14 views

EUVD-2025-36082

A security flaw has been discovered in projectworlds Expense Management System 1.0. This affects an unknown function of the file /public/admin/roles/create of the component Roles Page. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit has been...

4.8CVSS5.1AI score0.00239EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/10/27 5:32 a.m.15 views

CVE-2025-12229 projectworlds Expense Management System Roles Page create cross site scripting

A security flaw has been discovered in projectworlds Expense Management System 1.0. This affects an unknown function of the file /public/admin/roles/create of the component Roles Page. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit has been...

4.8CVSS0.00239EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/27 3:30 a.m.6 views

EUVD-2025-36054

Missing Authorization vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premmerce User Roles: from n/a through = 1.0.13...

4.3CVSS6.5AI score0.00234EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/27 2:15 a.m.9 views

CVE-2025-62883

Missing Authorization vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premmerce User Roles: from n/a through = 1.0.13...

4.3CVSS0.00234EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/27 1:33 a.m.5 views

CVE-2025-62883 WordPress Premmerce User Roles plugin <= 1.0.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premmerce User Roles: from n/a through = 1.0.13...

4.3CVSS6.6AI score0.00234EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/27 1:33 a.m.11 views

CVE-2025-62883 WordPress Premmerce User Roles plugin <= 1.0.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premmerce User Roles: from n/a through = 1.0.13...

4.3CVSS0.00234EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/27 1:33 a.m.8 views

CVE-2025-62883

CVE-2025-62883 concerns the WordPress plugin Premmerce User Roles (versions up to and including 1.0.13). The vulnerability is described as Missing Authorization due to incorrectly configured access control security levels, enabling broken access control and potential elevation of privileges. Affe...

4.3CVSS6.6AI score0.00234EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.6 views

WordPress plugin Premmerce User Roles 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.6AI score0.00234EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.6 views

PT-2025-43763

Missing Authorization vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premmerce User Roles: from n/a through = 1.0.13...

4.3CVSS7AI score0.00234EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.15 views

PT-2025-43883

Name of the Vulnerable Software and Affected Versions projectworlds Expense Management System version 1.0 Description A security flaw exists in projectworlds Expense Management System 1.0. The issue involves cross site scripting and affects an unknown function within the /public/admin/roles/creat...

4.8CVSS5.2AI score0.00239EPSS
SaveExploits1References9
RedhatCVE
RedhatCVE
added 2025/10/24 3:40 p.m.8 views

CVE-2025-59048

OpenBao's AWS Plugin generates AWS access credentials based on IAM policies. Prior to version 0.1.1, the AWS Plugin is vulnerable to cross-account IAM role Impersonation in the AWS auth method. The vulnerability allows an IAM role from an untrusted AWS account to authenticate by impersonating a...

8.1CVSS6.7AI score0.00248EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/23 12:0 a.m.4 views

PT-2025-43523

Name of the Vulnerable Software and Affected Versions OpenBao AWS Plugin versions prior to 0.1.1 Description The OpenBao AWS Plugin generates AWS access credentials based on IAM policies. Versions of the plugin prior to 0.1.1 are susceptible to cross-account IAM role Impersonation within the AWS...

8.1CVSS6.3AI score0.00248EPSS
SaveExploits0References13
EUVD
EUVD
added 2025/10/22 6:31 a.m.12 views

EUVD-2025-35355

The Meta Tag Manager WordPress plugin before 3.3 does not restrict which roles can create http-equiv refresh meta tags...

6.5CVSS6.3AI score0.00242EPSS
SaveExploits0References3
Rows per page
Query Builder