346 matches found
CVE-2023-30912
A remote code execution issue exists in HPE OneView...
CVE-2021-25273
Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706...
CVE-2018-11580
An issue was discovered in mass-pages-posts-creator.php in the MULTIDOTS Mass Pages/Posts Creator plugin 1.2.2 for WordPress. Any logged in user can launch Mass Pages/Posts creation with custom content. There is no nonce or user capability check, so anyone can launch a DoS attack against a site a...
PT-2025-22699 · Grafana +1 · Grafana Oss +1
Name of the Vulnerable Software and Affected Versions: Grafana OSS affected versions not specified Description: An access control issue was discovered where an Organization administrator could permanently delete the Server administrator account through the "DELETE /api/org/users/" endpoint. This...
GHSA-4PG4-QVPC-4Q3H
creationtimestamp| type| source ---|---|--- 2025-05-19 19:39:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16917...
WordPress plugin AWcode Toolkit 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
PT-2025-21745
Name of the Vulnerable Software and Affected Versions: ECOVACS robot vacuums and base stations affected versions not specified Description: ECOVACS robot vacuums and base stations communicate over an insecure Wi-Fi network. The communication utilizes AES encryption with a deterministic key that c...
WordPress plugin Eventer SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...
PT-2025-21599 · Unknown · Campcodes Sales/Inventory System
Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue affects the processing of the file /pages/purchase add.php in Campcodes Sales and Inventory System. The manipulation of the ID argument leads to SQL injection. Thi...
PT-2025-21744
Name of the Vulnerable Software and Affected Versions: ECOVACS robot vacuums and base stations affected versions not specified Description: ECOVACS robot vacuums and base stations communicate over an insecure Wi-Fi network using a predictable WPA2-PSK. This allows for easy derivation of the Wi-Fi...
BELL-CVE-2025-37865
Bulletin has no description...
PT-2025-20600 · Unknown · Campcodes Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: Campcodes Online Food Ordering System version 1.0 Description: A critical vulnerability has been found in the Campcodes Online Food Ordering System. This issue affects the processing of the file /routers/ticket-message.php, where the...
PT-2025-20604 · Undefined · Undefined
⚠️ Vulnerability Alert: Multiple vulnerabilities in GL-MT2500 and GL-MT2500A 📅 Timeline: Not provided 🆔 cveId: CVE-2024-57391 📊 baseScore: 7.2 📏 cvssMetrics: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H cvssSeverity: High 🟠 📈 EPSS Percentile: Not available 🛠️...
PT-2025-20325 · Undefined · Undefined
⚠️ Vulnerability Alert: SysAid On-Premise Pre-Auth RCE Chain 4 Critical Flaws 📅 Timeline: Disclosure: 2025-05-07, Patch: 2025-03-01 🆔 CVE ID: CVE-2025-2778 📊 Base Score: 9.8 assessed Critical 📏 CVSS Metrics: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H cvssSeverity:...
BELL-CVE-2023-53066
Bulletin has no description...
GHSA-X39X-9QW5-GHRF
creationtimestamp| type| source ---|---|--- 2025-05-03 21:19:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14707...
CVE-2024-55069
ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamfreadheader in /libavformat/iamfdec.c...
GHSA-F9C6-2F9P-82JJ
creationtimestamp| type| source ---|---|--- 2025-04-30 19:13:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14128...