Lucene search
K

10 matches found

Patchstack
Patchstack
added 2026/05/11 6:31 p.m.5 views

NPM: automagik-genie has a command injection vulnerability

NPM: automagik-genie has a command injection vulnerability discovered by ? in WordPress Npm automagik-genie versions 2.5.27...

8.1CVSS5.8AI score0.00055EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2026/02/13 7:17 p.m.2 views

CVE-2026-26190

Milvus is an open-source vector database built for generative AI applications. Prior to 2.5.27 and 2.6.10, Milvus exposes TCP port 9091 by default, which enables authentication bypasses. The /expr debug endpoint uses a weak, predictable default authentication token derived from etcd.rootPath...

9.8CVSS0.15051EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/12/01 2:16 p.m.2 views

CVE-2025-66386

app/Model/EventReport.php in MISP before 2.5.27 allows path traversal in view picture for a site-admin...

4.1CVSS6.9AI score0.00041EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/11/28 12:0 a.m.1 views

MISP 安全漏洞

MISP is an open source software solution from MISP Open Source. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.5.27,...

4.1CVSS6.4AI score0.00041EPSS
Exploits0References3
CVE
CVE
added 2025/11/28 12:0 a.m.8 views

CVE-2025-66386

Vulnerability summary for CVE-2025-66386: In MISP up to version 2.5.27, the file app/Model/EventReport.php is vulnerable to a path traversal condition when a site-admin views a picture, enabling navigation outside the intended directory. Affected product: MISP (before 2.5.27). Root cause: path tr...

4.1CVSS6.5AI score0.00041EPSS
Exploits0References2
wpexploit
wpexploit
added 2024/05/30 12:0 a.m.148 views

HTML5 Video Player < 2.5.27 - Unauthenticated SQLi

Description The plugin does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks % time curl "https://example.com/?restroute=/h5vp/v1/video/1&id=1'+OR+SELECT+1+FROM+SELECTSLEEP5xyz--+-"...

7.4AI score0.83843EPSS
Exploits6
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.25 views

Wordpress wpStoreCart Plugin 2.5.27-2.5.29 Arbitrary File Upload

No description provided by source. Description : Wordpress Plugins - wpStoreCart Arbitrary File Upload Vulnerability Version : 2.5.27 - 2.5.29 Link : http://wordpress.org/extend/plugins/wpstorecart/ Plugins : http://downloads.wordpress.org/plugin/wpstorecart.2.5.29.zip Date : 03-06-2012 Google Do...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2012/06/08 12:0 a.m.25 views

WordPress Plugin wpStoreCart 2.5.27-2.5.29 - Arbitrary File Upload

WordPress Plugin wpStoreCart 2.5.27-2.5.29 - Arbitrary File Upload Description : Wordpress Plugins - wpStoreCart Arbitrary File Upload Vulnerability Version : 2.5.27 - 2.5.29 Link : http://wordpress.org/extend/plugins/wpstorecart/ Plugins :...

0.8AI score
Exploits0
Packet Storm
Packet Storm
added 2012/06/08 12:0 a.m.39 views

WordPress wpStoreCart 2.5.29 Shell Upload

Description : Wordpress Plugins - wpStoreCart Arbitrary File Upload Vulnerability Version : 2.5.27 - 2.5.29 Link : http://wordpress.org/extend/plugins/wpstorecart/ Plugins : http://downloads.wordpress.org/plugin/wpstorecart.2.5.29.zip Date : 03-06-2012 Google Dork :...

0.1AI score
Exploits0
Exploit DB
Exploit DB
added 2012/06/08 12:0 a.m.49 views

WordPress Plugin wpStoreCart 2.5.27-2.5.29 - Arbitrary File Upload

Description : Wordpress Plugins - wpStoreCart Arbitrary File Upload Vulnerability Version : 2.5.27 - 2.5.29 Link : http://wordpress.org/extend/plugins/wpstorecart/ Plugins : http://downloads.wordpress.org/plugin/wpstorecart.2.5.29.zip Date : 03-06-2012 Google Dork :...

7AI score
Exploits0
Rows per page
Query Builder