32855 matches found
CVE-2025-67924 WordPress Corpkit theme <= 2.0 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Corpkit corpkit allows Upload a Web Shell to a Web Server.This issue affects Corpkit: from n/a through = 2.0...
CVE-2025-67910
The CVE-2025-67910 entry corresponds to an Unrestricted Upload of File with Dangerous Type vulnerability in the WordPress Contentstudio plugin (<= 1.3.7). The affected component is the Contentstudio WordPress plugin, where the upload routine allows arbitrary file types, enabling a Web Shell up...
CVE-2025-67910 WordPress Contentstudio plugin <= 1.3.7 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in contentstudio Contentstudio contentstudio allows Upload a Web Shell to a Web Server.This issue affects Contentstudio: from n/a through = 1.3.7...
CVE-2025-67910 WordPress Contentstudio plugin <= 1.3.7 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in contentstudio Contentstudio contentstudio allows Upload a Web Shell to a Web Server.This issue affects Contentstudio: from n/a through = 1.3.7...
CVE-2025-61489
A command injection vulnerability in the shellexec function of sonirico mcp-shell v0.3.1 allows attackers to execute arbitrary commands via supplying a crafted command string...
CVE-2025-14625
Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Standard on Windows Nios II Command Shell modules, Altera Quartus Prime Lite on Windows Nios II Command Shell modules allows Search Order Hijacking.This issue affects Quartus Prime Standard: from 19.1 through 24.1; Quartus Pri...
CVE-2025-30996
Unrestricted Upload of File with Dangerous Type vulnerability in Themify Themify Sidepane WordPress Theme, Themify Themify Newsy, Themify Themify Folo, Themify Themify Edmin, Themify Bloggie, Themify Photobox, Themify Wigi, Themify Rezo, Themify Slide allows Upload a Web Shell to a Web Server.Thi...
CVE-2026-22035
Greenshot is an open source Windows screenshot utility. Versions 1.3.310 and below arvulnerable to OS Command Injection through unsanitized filename processing. The FormatArguments method in ExternalCommandDestination.cs:269 uses string.Format to insert user-controlled filenames directly into she...
CVE-2026-22035
CVE-2026-22035 affects Greenshot for Windows. Versions 1.3.310 and earlier are vulnerable to an OS Command Injection through unsanitized filename processing in the ExternalCommandDestination.FormatArguments() function (line 269), which uses string.Format() to insert user-controlled filenames dire...
PT-2026-1668
Name of the Vulnerable Software and Affected Versions FLIR Thermal Camera F/FC/PT/D version 8.0.0.64 Description The FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 includes hard-coded SSH credentials that cannot be altered through standard camera settings. This allows attackers to obtain...
KAYSUS KS-WR1200 安全漏洞
The KAYSUS KS-WR1200 is a wireless router from the Chinese company KAYSUS. A security vulnerability exists in the KAYSUS KS-WR1200 version 107, which originates from exposing SSH and TELNET services on the LAN interface with hard-coded credentials, which could lead to an attacker logging in with...
WordPress plugin Corpkit 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2025-1358)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1358 advisory. SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read...
PT-2026-1920
Name of the Vulnerable Software and Affected Versions KAYSUS KS-WR1200 version 107 Description KAYSUS KS-WR1200 routers with firmware version 107 expose SSH and TELNET services on the LAN interface with hardcoded root credentials root:12345678. The administrator cannot disable these services or...
PT-2026-1888
Name of the Vulnerable Software and Affected Versions Contentstudio versions through 1.3.7 Description The software contains a flaw that permits the upload of files with dangerous types, potentially allowing an attacker to upload a web shell to a web server. Recommendations Update to a version...
KAYSUS KS-WR3600 安全漏洞
The KAYSUS KS-WR3600 is a wireless router from the Chinese company KAYSUS. A security vulnerability exists in the KAYSUS KS-WR3600, which stems from the SSH service being enabled by default and the root account not having a password, which could lead to arbitrary command execution...
PT-2026-1900
Name of the Vulnerable Software and Affected Versions zozothemes Corpkit versions n/a through 2.0 Description The software contains an unrestricted file upload issue that allows for the upload of a web shell to a web server. This allows for potentially malicious code execution. Recommendations...
PT-2026-1918
Name of the Vulnerable Software and Affected Versions KAYSUS KS-WR3600 version 1.0.5.9.1 Description KAYSUS KS-WR3600 routers with firmware version 1.0.5.9.1 have the SSH service enabled by default on the LAN interface. The root account is configured without a password, and administrators are...
CVE-2025-68716
KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 enable the SSH service enabled by default on the LAN interface. The root account is configured with no password, and administrators cannot disable SSH or enforce authentication via the CLI or web GUI. This allows any LAN-adjacent attacker to...
WordPress plugin Contentstudio 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...