8489 matches found
CVE-2024-53573
Unifiedtransform v2.X is vulnerable to Incorrect Access Control. Unauthorized users can access and manipulate endpoints intended exclusively for administrative use. This issue specifically affects teacher/edit/id...
CVE-2025-25823
A cross-site scripting XSS vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the article header at /admin/article.php...
DEBIAN-CVE-2022-49606
In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix sleep from invalid context BUG Taking the qosmutex to process RoCEv2 QP's on netdev events causes a kernel splat. Fix this by removing the handling for RoCEv2 in irdmacmteardownconnections that uses the mutex. Thi...
UBUNTU-CVE-2022-49606
In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix sleep from invalid context BUG Taking the qosmutex to process RoCEv2 QP's on netdev events causes a kernel splat. Fix this by removing the handling for RoCEv2 in irdmacmteardownconnections that uses the mutex. Thi...
SunGrow iSolarCloud 安全漏洞
SunGrow iSolarCloud is an Android app for new energy power plant management from China SunGrow SunGrow. It is used for power plant data collection, monitoring, operation and maintenance and operation management. A security vulnerability exists in SunGrow iSolarCloud Android app version...
SunGrow iSolarCloud 安全漏洞
SunGrow iSolarCloud is an Android app for new energy power plant management from China SunGrow SunGrow. It is used for power plant data collection, monitoring, operation and maintenance and operation management. A security vulnerability exists in the SunGrow iSolarCloud Android app version...
emlog 安全漏洞
emlog is a PHP and MySQL based CMS website builder by emlog's individual developers. A security vulnerability exists in emlog Pro version v2.5.4, which originates from the sort.php component and is susceptible to server-side request forgery attacks...
CVE-2025-25827
A Server-Side Request Forgery SSRF in the component sort.php of Emlog Pro v2.5.4 allows attackers to scan local and internal ports via supplying a crafted URL...
CVE-2025-25823
A cross-site scripting XSS vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the article header at /admin/article.php...
CVE-2025-25827
A Server-Side Request Forgery SSRF in the component sort.php of Emlog Pro v2.5.4 allows attackers to scan local and internal ports via supplying a crafted URL...
CVE-2025-27321 WordPress Blightly Explorer plugin <= 2.3.0 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Blighty Blightly Explorer blighty-explorer allows Stored XSS.This issue affects Blightly Explorer: from n/a through = 2.3.0...
GreaterWMS 安全漏洞
GreaterWMS is an inventory management system from GreaterWMS open source. A security vulnerability exists in GreaterWMS version 2.1.49 and prior versions that stems from /staff routing not being handled correctly, allowing an unauthenticated attacker to bypass authentication and elevate privilege...
CVE-2025-22633 WordPress Give – Divi Donation Modules plugin <= 2.0.0 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in StellarWP Give – Divi Donation Modules give-donation-modules-for-divi allows Retrieve Embedded Sensitive Data.This issue affects Give – Divi Donation Modules: from n/a through = 2.0.0...
WordPress Variable Inspector plugin <= 2.6.2 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Variable Inspector versions = 2.6.2...
TSINGSEE EasyCVR 访问控制错误漏洞
TSINGSEE EasyCVR is a video management platform from China Xufan TSINGSEE. An access control error vulnerability exists in TSINGSEE EasyCVR version 2.7.0 and prior versions, which stems from an information disclosure issue...
WordPress Search with Typesense Plugin <= 2.0.8 - Path Traversal vulnerability
Path Traversal vulnerability discovered by astra.r3verii Patchstack Alliance in WordPress Plugin Search with Typesense versions = 2.0.8...
WordPress Post Grid and Gutenberg Blocks plugin <= 2.2.92 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Post Grid and Gutenberg Blocks versions = 2.2.92...
CVE-2024-55159
GFast between v2 to v3.2 was discovered to contain a SQL injection vulnerability via the SortName parameter at /system/loginLog/list...
CVE-2024-55159
GFast v2–v3.2 contains a SQL injection vulnerability in the SortName parameter exposed at /system/loginLog/list. Affected versions are 2 through 3.2. The issue is evidenced in multiple sources (e.g., PT-2025-7444) with a recommended workaround: restrict access to the /system/loginLog/list endpoin...