15196 matches found
CVE-2025-57925 WordPress immonex Kickstart Team Plugin <= 1.6.9 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in immonex immonex Kickstart Team immonex-kickstart-team allows PHP Local File Inclusion.This issue affects immonex Kickstart Team: from n/a through = 1.6.9...
CVE-2025-57925
CVE-2025-57925 affects immonex Kickstart Team (WordPress plugin)
CVE-2025-57975 WordPress Team Plugin <= 5.0.6 - Broken Access Control Vulnerability
Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team: from n/a through = 5.0.6...
CVE-2025-57975
CVE-2025-57975 is a Missing Authorization vulnerability in RadiusTheme Team (WordPress plugin) affecting versions up to 5.0.6. Affected product: RadiusTheme Team; root cause: misconfigured access control allowing unauthorized access; impact: potential unauthorized actions (per CVSS 3.1/4.3), with...
CVE-2025-57975 WordPress Team Plugin <= 5.0.6 - Broken Access Control Vulnerability
Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team: from n/a through = 5.0.6...
CVE-2025-58222 WordPress Team Manager plugin <= 2.5.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Maidul Team Manager wp-team-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team Manager: from n/a through = 2.5.1...
CVE-2025-58222
CVE-2025-58222 describes a Missing Authorization vulnerability in the WordPress Team Manager plugin (Maidul Team Manager), affecting Team Manager versions up to 2.3.14 per the initial description and up to 2.3.16 per Wordfence vulnerability listings. The CVSS 3.1 vector indicates a Medium impact ...
CVE-2025-58222 WordPress Team Manager plugin <= 2.5.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Maidul Team Manager wp-team-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team Manager: from n/a through = 2.5.1...
PT-2025-38888
Name of the Vulnerable Software and Affected Versions Maidul Team Manager versions through 2.3.14 Description An authorization issue exists in Maidul Team Manager, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Maidul Team Manager to a versi...
WordPress plugin Team Manager 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A security...
PT-2025-38776
Name of the Vulnerable Software and Affected Versions immonex Kickstart Team versions through 1.6.9 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Remote File Inclusion issue. This allows for PHP Local File...
PT-2025-38825
Name of the Vulnerable Software and Affected Versions RadiusTheme Team versions through 5.0.6 Description An issue exists in RadiusTheme Team related to incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendations Update RadiusTheme Team to a...
WordPress plugin immonex Kickstart Team 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
RedTeam-Tactics-and-Techniques
Red Teaming Tactics and Techniques...
Alex Ryan: From zero chill to quiet confidence
Welcome to another episode of Humans of Talos, our ongoing video interview series that celebrates the people powering Cisco's threat intelligence efforts. In each episode, we dive deep into the personal journeys, motivations and lessons learned from the team members who help keep the internet saf...
Improper Input Validation
github.com/mattermost/mattermost-servert is vulnerable to Improper Input Validation. The vulnerability is due to failure to sanitize the team invite ID in the /api/v4/teams/:teamId/restore endpoint, which allows a team admin without invite privileges to obtain the team’s invite ID...
Improper Authorization
github.com/mattermost/mattermost-server is vulnerable to Improper Authorization. The vulnerability is due to insufficient validation of authorization for team scheme role modifications, which allows an attacker Team Admins to demote Team Members to Guests via the affected API endpoint...
CVE-2025-59377
creationtimestamp| type| source ---|---|--- 2025-09-15 13:18:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/51708...
redteam-notebook
It is an offensive tool for network and web exploitation. The repository, redteam-notebook, contains a collection of commands, tips, and tricks for preparation and execution of red teaming activities, specifically for the OSCP exam. The primary vulnerability targeted is not explicitly stated, but...