Lucene search
+L

6991 matches found

Packet Storm News
Packet Storm News
added 2025/03/12 12:00 a.m.18 views

WordPress ThemeEgg ToolKit 1.2.9 Shell Upload

WordPress ThemeEgg ToolKit plugin versions 1.2.9 and below suffer from a remote shell upload vulnerability...

9.1CVSS7.2AI score0.0125EPSS
SaveExploits3
Patchstack
Patchstack
added 2025/03/11 9:46 p.m.19 views

WordPress ThemeEgg ToolKit plugin <= 1.2.9 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Nabil Irawan in WordPress Plugin ThemeEgg ToolKit versions = 1.2.9...

9.1CVSS9AI score0.0125EPSS
SaveExploits3Affected Software1
NVD
NVD
added 2025/03/11 9:15 p.m.19 views

CVE-2025-28915

Unrestricted Upload of File with Dangerous Type vulnerability in Theme Egg ThemeEgg ToolKit themeegg-toolkit allows Upload a Web Shell to a Web Server.This issue affects ThemeEgg ToolKit: from n/a through = 1.2.9...

9.1CVSS0.0125EPSS
SaveExploits3References1
CVE
CVE
added 2025/03/11 9:01 p.m.91 views

CVE-2025-28915

ThemeEgg ToolKit (WordPress)

9.1CVSS7.2AI score0.0125EPSS
SaveExploits3References1
Vulnrichment
Vulnrichment
added 2025/03/11 9:01 p.m.20 views

CVE-2025-28915 WordPress ThemeEgg ToolKit plugin <= 1.2.9 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Theme Egg ThemeEgg ToolKit themeegg-toolkit allows Upload a Web Shell to a Web Server.This issue affects ThemeEgg ToolKit: from n/a through = 1.2.9...

9.1CVSS8.5AI score0.0125EPSS
SaveExploits3References1
Cvelist
Cvelist
added 2025/03/11 9:01 p.m.35 views

CVE-2025-28915 WordPress ThemeEgg ToolKit plugin <= 1.2.9 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Theme Egg ThemeEgg ToolKit themeegg-toolkit allows Upload a Web Shell to a Web Server.This issue affects ThemeEgg ToolKit: from n/a through = 1.2.9...

9.1CVSS0.0125EPSS
SaveExploits3References1
CNNVD
CNNVD
added 2025/03/11 12:00 a.m.17 views

WordPress plugin ThemeEgg ToolKit 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

9.1CVSS8.9AI score0.0125EPSS
SaveExploits3References3
Fedora
Fedora
added 2025/03/10 4:14 p.m.16 views

[SECURITY] Fedora 42 Update: emacs-30.1-5.fc42

GNU Emacs is a powerful, customizable, self-documenting, modeless text editor. It contains special code editing features, a scripting language elisp, and the capability to read mail, news, and more without leaving the editor. This package provides an emacs binary with support for Wayland, using t...

6.9AI score
SaveExploits0
The Hacker News
The Hacker News
added 2025/03/07 2:15 p.m.34 views

FIN7, FIN8, and Others Use Ragnar Loader for Persistent Access and Ransomware Operations

Threat hunters have shed light on a "sophisticated and evolving malware toolkit" called Ragnar Loader that's used by various cybercrime and ransomware groups like Ragnar Locker aka Monstrous Mantis, FIN7, FIN8, and Ruthless Mantis ex-REvil. "Ragnar Loader plays a key role in keeping access to...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2025/03/07 12:00 a.m.72 views

Apache StreamPipes elevation of privilege vulnerability (CNVD-2025-05698)

Apache StreamPipes is an open source self-service industrial IoT toolkit that enables users to connect, analyze and explore IIoT data streams. A security vulnerability exists in Apache StreamPipes version 0.95.1 and earlier, which stems from a lack of filtering and sloppy validation of resource...

6.5CVSS6.9AI score0.00666EPSS
SaveExploits0References1
Amazon
Amazon
added 2025/03/06 12:00 a.m.13 views

Important: libnvidia-container

Issue Overview: NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges,...

8.4CVSS7.3AI score0.01107EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2024-35176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many s in an attribute value...

5.3CVSS6.5AI score0.02064EPSS
SaveExploits1References4
Amazon
Amazon
added 2025/03/06 12:00 a.m.14 views

Important: nvidia-container-toolkit

Issue Overview: NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use TOCTOU vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution,...

8.3CVSS7.3AI score0.03669EPSS
SaveExploits1
Amazon
Amazon
added 2025/03/06 12:00 a.m.16 views

Important: nvidia-container-toolkit

Issue Overview: NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use TOCTOU vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A...

9CVSS7.4AI score0.38673EPSS
SaveExploits2
Amazon
Amazon
added 2025/03/06 12:00 a.m.14 views

Important: libnvidia-container

Issue Overview: NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use TOCTOU vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A...

9CVSS7.4AI score0.38673EPSS
SaveExploits2
Amazon
Amazon
added 2025/03/06 12:00 a.m.16 views

Important: nvidia-container-toolkit

Issue Overview: NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges,...

8.4CVSS7.3AI score0.01107EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2021-36045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XMP Toolkit SDK versions 2020.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker...

4.3CVSS6.8AI score0.01936EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2022-21821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to...

7.8CVSS8.2AI score0.02089EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:00 a.m.17 views

The vulnerability of the parallel programming library for clusters, the Intel MPI Library, and the Intel oneAPI HPC Toolkit software development tools lies in its uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of the parallel programming library for clusters, the Intel MPI Library, and the Intel oneAPI HPC Toolkit software development tools, is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS5.5AI score0.00195EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:00 a.m.10 views

The vulnerability of the nvdisasm file in the NVIDIA CUDA Toolkit software for parallel computing on Graphics Processing Units allows a hacker to induce a service failure.

The vulnerability of the nvdisasm file in the NVIDIA CUDA Toolkit for parallel computing on Graphics Processing Units is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

3.3CVSS5.5AI score0.00252EPSS
SaveExploits0References4Affected Software3
Rows per page
Query Builder