WordPress Ajax Search Lite plugin <= 4.12.2 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Ajax Search Lite versions = 4.12.2...

📄 Automic Automation Agent Unix Privilege Escalation

An agent configured to run in privileged mode using the SetUID-Bit can be used to escalate privileges, by supplying an ini file with the "authentication" option set to "PAM" and the "libName" option set to a shared object file controlled by the attacker. The shared object will be loaded in an...

The vulnerability of the "Yandex.Telemost" video conference software lies in its use of an unreliable search path, allowing a hacker to execute arbitrary code.

The vulnerability of the "Yandex.Telemost" video conference software lies in the use of an unreliable search path. Exploiting this vulnerability could allow a hacker to execute arbitrary code...

CVE-2024-8619

The Ajax Search Lite WordPress plugin before 4.12.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2025-4778

A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been declared as critical. This vulnerability affects unknown code of the file /normal-search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The...

CVE-2025-4780

A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been rated as critical. This issue affects some unknown processing of the file /foreigner-search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-4769

A vulnerability classified as critical was found in CBEWIN Anytxt Searcher 1.3.1128.0. This vulnerability affects unknown code of the file ATService.exe. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity of an attack is rather high. The...

CVE-2025-4769 CBEWIN Anytxt Searcher ATService.exe uncontrolled search path

A vulnerability classified as critical was found in CBEWIN Anytxt Searcher 1.3.1128.0. This vulnerability affects unknown code of the file ATService.exe. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity of an attack is rather high. The...

CVE-2025-4769 CBEWIN Anytxt Searcher ATService.exe uncontrolled search path

A vulnerability classified as critical was found in CBEWIN Anytxt Searcher 1.3.1128.0. This vulnerability affects unknown code of the file ATService.exe. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity of an attack is rather high. The...

CVE-2025-4769

The CVE-2025-4769 entry concerns CBEWIN Anytxt Searcher 1.3.1128.0, affecting ATService.exe with an uncontrolled search path vulnerability. According to PT-Security, exploitation requires local access, with high attack complexity and low privileges, leading to a potential local escalation or impa...

PT-2025-21632 · Cbewin · Cbewin Anytxt Searcher

Name of the Vulnerable Software and Affected Versions: CBEWIN Anytxt Searcher version 1.3.1128.0 Description: A critical vulnerability was found in CBEWIN Anytxt Searcher, affecting the file ATService.exe. This issue leads to an uncontrolled search path. The attack requires local access and has a...

PHPGurukul Park Ticketing Management System 注入漏洞

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter searchdata in the file /foreigner-search.php. An...

CBEWIN Anytxt Searcher 代码问题漏洞

CBEWIN Anytxt Searcher is a superb full-text desktop document search engine from CBEWIN. A code issue vulnerability exists in CBEWIN Anytxt Searcher version 1.3.1128.0, which stems from an uncontrolled search path in the file ATService.exe...

CVE-2025-20079

Uncontrolled search path for some IntelR Advisor software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20043

Uncontrolled search path for some IntelR RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-47795

Uncontrolled search path for some IntelR oneAPI DPC++/C++ Compiler software before version 2025.0.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-8619

The Ajax Search Lite WordPress plugin before 4.12.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-8619

The Ajax Search Lite WordPress plugin before 4.12.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-8619 Ajax Search Lite <= 4.12.2 - Admin+ Stored XSS

The Ajax Search Lite WordPress plugin before 4.12.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-8619 Ajax Search Lite <= 4.12.2 - Admin+ Stored XSS

The Ajax Search Lite WordPress plugin before 4.12.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...