11799 matches found
WordPress Smash theme <= 1.7 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Smash versions = 1.7...
WordPress Catwalk theme <= 1.4 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Catwalk versions = 1.4...
WordPress Assembly theme <= 1.1 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Assembly versions = 1.1...
WordPress Vocal theme <= 1.12 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Vocal versions = 1.12...
PT-2025-35546
Name of the Vulnerable Software and Affected Versions: TYPO3 ns backup extension versions through 13.0.2 Description: The ns backup extension for TYPO3 allows command injection. Recommendations: Update to a version beyond 13.0.2...
Linux Distros Unpatched Vulnerability : CVE-2025-38617
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/packet: fix a race in packetsetring and packetnotifier When packetsetring releases po-bindlock, another thread can run packetnotifier and process an NETDEVU...
CVE-2025-9799 Langfuse Webhook promptRouter.ts promptChangeEventSourcing server-side request forgery
A security flaw has been discovered in Langfuse up to 3.88.0. Affected by this vulnerability is the function promptChangeEventSourcing of the file web/src/features/prompts/server/routers/promptRouter.ts of the component Webhook Handler. Performing manipulation results in server-side request...
CVE-2025-9735
CVE-2025-9735 concerns O2OA up to version 10.0-410. The vulnerability arises from manipulation of arguments in the file /x_query_assemble_designer/jaxrs/table within the Personal Profile Page component, specifically description/applicationName/queryName, which triggers cross-site scripting. Explo...
CVE-2025-9732 DCMTK dcm2img diybrpxt.h memory corruption
A vulnerability was identified in DCMTK up to 3.6.9. This affects an unknown function in the library dcmimage/include/dcmtk/dcmimage/diybrpxt.h of the component dcm2img. Such manipulation leads to memory corruption. Local access is required to approach this attack. The name of the patch is...
CVE-2025-9716
CVE-2025-9716 affects O2OA up to version 10.0-410. The vulnerability exists in the Personal Profile Page’s file path /x_processplatform_assemble_designer/jaxrs/form, where manipulation of the name/alias/description argument enables cross-site scripting. The issue can be exploited remotely and, pe...
CVE-2024-32589
Missing Authorization vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through = 1.5.3...
WordPress Spock theme <= 1.17 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Spock versions = 1.17...
CVE-2025-9422
A vulnerability was found in oitcode samarium up to 0.9.6. This impacts an unknown function of the file /dashboard/team of the component Team Image Handler. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used...
CVE-2025-58198
Missing Authorization vulnerability in Xpro Xpro Theme Builder xpro-theme-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xpro Theme Builder: from n/a through = 1.2.9...
CVE-2025-58203
Server-Side Request Forgery SSRF vulnerability in solacewp Solace Extra solace-extra allows Server Side Request Forgery.This issue affects Solace Extra: from n/a through = 1.3.2...
CVE-2025-48110
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mibuthu Link View link-view allows Stored XSS.This issue affects Link View: from n/a through = 0.8.0...
CVE-2025-48318
Cross-Site Request Forgery CSRF vulnerability in shen2 多说社会化评论框 duoshuo allows Cross Site Request Forgery.This issue affects 多说社会化评论框: from n/a through = 1.2...
CVE-2025-48327
Missing Authorization vulnerability in inkthemes WP Mailgun SMTP wp-mailgun-smtp allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Mailgun SMTP: from n/a through = 1.0.7...
CVE-2025-48362
Cross-Site Request Forgery CSRF vulnerability in Saeed Sattar Beglou Hesabfa Accounting hesabfa-accounting allows Cross Site Request Forgery.This issue affects Hesabfa Accounting: from n/a through = 2.2.5...