24989 matches found
vsftpd: vsftpd: Denial of service via integer overflow in ls command parameter parsing
A flaw was found in vsftpd. This vulnerability allows a denial of service DoS via an integer overflow in the ls command parameter parsing, triggered by a remote, authenticated attacker sending a crafted STAT command with a specific byte sequence...
GHSA-VRQC-59MW-QQG7
creationtimestamp| type| source ---|---|--- 2026-03-12 11:40:06+00:00| seen| https://gist.github.com/alon710/ac739fc815a71a1bbc17c69f0d2579f2...
GHSA-RHCG-3H8R-V6VP
creationtimestamp| type| source ---|---|--- 2026-03-12 11:10:06+00:00| seen| https://gist.github.com/alon710/795c8bcaebe4db185c8f673cfc6fa748...
EUVD-2025-208611
The Timetics WordPress plugin before 1.0.52 does not have authorization in a REST endpoint, allowing unauthenticated users to arbitrarily change a booking's payment status and post status for the "timetics-booking" custom post type...
CVE-2025-15473
The Timetics WordPress plugin before 1.0.52 does not have authorization in a REST endpoint, allowing unauthenticated users to arbitrarily change a booking's payment status and post status for the "timetics-booking" custom post type...
CVE-2026-31957
creationtimestamp| type| source ---|---|--- 2026-03-12 06:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116214676048572168...
CVE-2025-15473 Timetics < 1.0.52 - Unauthenticated Payment/Booking Status Update
The Timetics WordPress plugin before 1.0.52 does not have authorization in a REST endpoint, allowing unauthenticated users to arbitrarily change a booking's payment status and post status for the "timetics-booking" custom post type...
CVE-2025-15473
CVE-2025-15473 concerns the Timetics WordPress plugin, prior to version 1.0.52 , which exposes a REST endpoint without proper authorization. This allows unauthenticated users to arbitrarily change a booking’s payment status and post status for the timetics-booking custom post type. The vulnerabil...
CVE-2025-15473 Timetics < 1.0.52 - Unauthenticated Payment/Booking Status Update
The Timetics WordPress plugin before 1.0.52 does not have authorization in a REST endpoint, allowing unauthenticated users to arbitrarily change a booking's payment status and post status for the "timetics-booking" custom post type...
CVE-2025-15473
The Timetics WordPress plugin before 1.0.52 does not have authorization in a REST endpoint, allowing unauthenticated users to arbitrarily change a booking's payment status and post status for the "timetics-booking" custom post type...
GHSA-GQC5-XV7M-GCJQ
creationtimestamp| type| source ---|---|--- 2026-03-12 04:10:06+00:00| seen| https://gist.github.com/alon710/e3dc62168c67266174e7a28a55951177...
GHSA-C4P7-RWRG-PF6P
creationtimestamp| type| source ---|---|--- 2026-03-12 03:40:05+00:00| seen| https://gist.github.com/alon710/b03cab59ac9b3af949ff7e9d16d01a05...
CVE-2026-3931
creationtimestamp| type| source ---|---|--- 2026-03-12 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260312 2026-03-12 04:30:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116214321125739442 2026-03-12 21:00:47+00:00| seen|...
CVE-2026-3919
creationtimestamp| type| source ---|---|--- 2026-03-12 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260312 2026-03-12 04:03:14+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116214214929795362 2026-03-12 21:50:05+00:00| seen|...
CVE-2026-3923
creationtimestamp| type| source ---|---|--- 2026-03-12 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260312 2026-03-12 03:50:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116214163774152917 2026-03-12 22:01:06+00:00| seen|...
PT-2026-24924
The Timetics WordPress plugin before 1.0.52 does not have authorization in a REST endpoint, allowing unauthenticated users to arbitrarily change a booking's payment status and post status for the "timetics-booking" custom post type...
Linux Distros Unpatched Vulnerability : CVE-2026-3939
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in PDF in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted PDF fil...
WordPress plugin Timetics 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
CVE-2026-20046
creationtimestamp| type| source ---|---|--- 2026-03-11 23:50:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116213220098846252 2026-03-12 03:00:08+00:00| seen| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-privesc-bF8D5U4W 2026-03-12...
CVE-2025-70244
creationtimestamp| type| source ---|---|--- 2026-03-11 23:10:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116213062812879067 2026-03-12 08:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mgtwm7ojre2u...