3622 matches found
CVE-2025-32164
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in maennchen1.de m1.DownloadList m1downloadlist allows Retrieve Embedded Sensitive Data.This issue affects m1.DownloadList: from n/a through = 0.24...
WordPress Question Answer plugin <= 1.2.70 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k in WordPress Plugin Question Answer versions = 1.2.70...
CVE-2025-32213 WordPress Flo Forms plugin <= 1.0.43 - Broken Access Control vulnerability
Missing Authorization vulnerability in flothemesplugins Flo Forms flo-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flo Forms: from n/a through = 1.0.43...
AquilaCMS 1.409.20 - Remote Command Execution (RCE)
Exploit Title: AquilaCMS 1.409.20 - Remote Command Execution RCE Date: 2024-10-25 Exploit Author: Eui Chul Chung Vendor Homepage: https://www.aquila-cms.com/ Software Link: https://github.com/AquilaCMS/AquilaCMS Version: v1.409.20 CVE: CVE-2024-48572, CVE-2024-48573 import io import json import...
openSUSE 15 Security Update : doomsday (openSUSE-SU-2025:0117-1)
The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2025:0117-1 advisory. - CVE-2025-2592: Use system assimp library to fix a heap-based buffer overflow boo1239917 Tenable has extracted the preceding description block directly...
📄 flatCore 1.5.5 Shell Upload
flatCore version 1.5.5 suffers from a remote shell upload vulnerability. Exploit Title: flatCore Arbitrary .php File Upload via acp/acp.php Date: 2024-10-26 Exploit Author: CodeSecLab Vendor Homepage: https://github.com/flatCore/flatCore-CMS Software Link: https://github.com/flatCore/flatCore-CMS...
CVE-2025-29150
BlueCMS 1.6 suffers from Arbitrary File Deletion via the id parameter in an /publish.php?act=del request...
CVE-2025-2630 DLL Hijacking Vulnerability in NI LabVIEW
There is a DLL hijacking vulnerability due to an uncontrolled search path that exists in NI LabVIEW. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to insert a malicious DLL into the uncontrolled search path. This vulnerability affects NI...
WordPress Material Dashboard plugin <= 1.4.5 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by LVT-tholv2k in WordPress Plugin Material Dashboard versions = 1.4.5...
WordPress Sandwich Adsense plugin <= 4.0.2 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by timomangcut in WordPress Plugin Sandwich Adsense versions = 4.0.2...
WordPress FAT Cooming Soon plugin <= 1.1 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin FAT Cooming Soon versions = 1.1...
WordPress All push notification for WP Plugin <= 1.5.3 - CSRF to SQL Injection vulnerability
CSRF to SQL Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin All push notification for WP versions = 1.5.3...
WordPress WP Inquiries plugin <= 0.2.1 - SQL Injection Vulnerability
SQL Injection Vulnerability discovered by Phan Trong Quan - VNPT Cyber Immunity in WordPress Plugin WP Inquiries versions = 0.2.1...
WordPress Ultimate WP Mail plugin <= 1.3.10 - Open Redirection vulnerability
Open Redirection vulnerability discovered by Le Ngoc Anh in WordPress Plugin Ultimate WP Mail versions = 1.3.10...
WordPress WP Project Manager plugin <= 2.6.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by siavashvafshar in WordPress Plugin WP Project Manager versions = 2.6.22...
CVE-2025-30303 Adobe Framemaker | Out-of-bounds Read (CWE-125)
Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in tha...
CVE-2025-30297 Adobe Framemaker | Out-of-bounds Write (CWE-787)
Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2025-26649 Windows Secure Channel Elevation of Privilege Vulnerability
...
