38021 matches found
CVE-2025-15224
The curl tool and libcurl library are vulnerable to a libssh key passphrase bypass when performing SSH-based transfers via SCP or SFTP . The root cause is that curl wrongly requests and authenticates using a locally running SSH agent when prompted for public key authentication. This flaw was intr...
CVE-2025-15224 libssh key passphrase bypass without agent set
When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would wrongly still ask and authenticate using a locally running SSH agent...
CVE-2025-15224
When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would wrongly still ask and authenticate using a locally running SSH agent...
CVE-2025-15079
When doing SSH-based transfers using either SCP or SFTP, and setting the knownhosts file, libcurl could still mistakenly accept connecting to hosts not present in the specified file if they were added as recognized in the libssh global knownhosts file...
CVE-2025-15079
The libcurl library is vulnerable to a security flaw where it may mistakenly accept connections to SSH hosts not present in the specified known_hosts file. This occurs during SCP or SFTP transfers if the hosts are recognized in the libssh global known_hosts file. This vulnerability was introduced...
CVE-2025-15079 libssh global known_hosts override
When doing SSH-based transfers using either SCP or SFTP, and setting the knownhosts file, libcurl could still mistakenly accept connecting to hosts not present in the specified file if they were added as recognized in the libssh global knownhosts file...
CVE-2025-67924 WordPress Corpkit theme <= 2.0 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Corpkit corpkit allows Upload a Web Shell to a Web Server.This issue affects Corpkit: from n/a through = 2.0...
CVE-2025-67924
CVE-2025-67924 is a WordPress theme vulnerability affecting Corpkit (Corpkit – Business Consulting WordPress Theme)
CVE-2025-67924 WordPress Corpkit theme <= 2.0 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Corpkit corpkit allows Upload a Web Shell to a Web Server.This issue affects Corpkit: from n/a through = 2.0...
CVE-2025-67910
The CVE-2025-67910 entry corresponds to an Unrestricted Upload of File with Dangerous Type vulnerability in the WordPress Contentstudio plugin (<= 1.3.7). The affected component is the Contentstudio WordPress plugin, where the upload routine allows arbitrary file types, enabling a Web Shell up...
CVE-2025-67910 WordPress Contentstudio plugin <= 1.3.7 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in contentstudio Contentstudio contentstudio allows Upload a Web Shell to a Web Server.This issue affects Contentstudio: from n/a through = 1.3.7...
CVE-2025-67910 WordPress Contentstudio plugin <= 1.3.7 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in contentstudio Contentstudio contentstudio allows Upload a Web Shell to a Web Server.This issue affects Contentstudio: from n/a through = 1.3.7...
CVE-2025-61489
A command injection vulnerability in the shellexec function of sonirico mcp-shell v0.3.1 allows attackers to execute arbitrary commands via supplying a crafted command string...
CVE-2025-14625
Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Standard on Windows Nios II Command Shell modules, Altera Quartus Prime Lite on Windows Nios II Command Shell modules allows Search Order Hijacking.This issue affects Quartus Prime Standard: from 19.1 through 24.1; Quartus Pri...
CVE-2025-30996
Unrestricted Upload of File with Dangerous Type vulnerability in Themify Themify Sidepane WordPress Theme, Themify Themify Newsy, Themify Themify Folo, Themify Themify Edmin, Themify Bloggie, Themify Photobox, Themify Wigi, Themify Rezo, Themify Slide allows Upload a Web Shell to a Web Server.Thi...
CVE-2026-22035
Greenshot is an open source Windows screenshot utility. Versions 1.3.310 and below arvulnerable to OS Command Injection through unsanitized filename processing. The FormatArguments method in ExternalCommandDestination.cs:269 uses string.Format to insert user-controlled filenames directly into she...
CVE-2026-22035
CVE-2026-22035 affects Greenshot for Windows. Versions 1.3.310 and earlier are vulnerable to an OS Command Injection through unsanitized filename processing in the ExternalCommandDestination.FormatArguments() function (line 269), which uses string.Format() to insert user-controlled filenames dire...
KAYSUS KS-WR1200 安全漏洞
The KAYSUS KS-WR1200 is a wireless router from the Chinese company KAYSUS. A security vulnerability exists in the KAYSUS KS-WR1200 version 107, which originates from exposing SSH and TELNET services on the LAN interface with hard-coded credentials, which could lead to an attacker logging in with...
WordPress plugin Corpkit 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
PT-2026-1668
Name of the Vulnerable Software and Affected Versions FLIR Thermal Camera F/FC/PT/D version 8.0.0.64 Description The FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 includes hard-coded SSH credentials that cannot be altered through standard camera settings. This allows attackers to obtain...