1986 matches found
WordPress Plan My Day theme <= 1.1.13 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Plan My Day versions = 1.1.13...
WordPress Finag theme <= 1.5.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Finag versions = 1.5.0...
WordPress Magazine Elite Theme <= 1.2.4 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by Le Ngoc Anh in WordPress Theme Magazine Elite versions = 1.2.4...
When Machine Learning Meets Vulnerability Discovery: Challenges and Lessons Learned
In recent years, machine learning has demonstrated impressive results in various fields, including software vulnerability detection. Nonetheless, using machine learning to identify software vulnerabilities presents new challenges, especially regarding the scale of data involved, which was not a...
WordPress Katelyn theme <= 1.0.10 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Katelyn versions = 1.0.10...
WordPress Cook&Meal <= 1.2.3 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Cook&Meal versions = 1.2.3...
Cisco Talos at Black Hat 2025: Briefings, booth talks and what to expect
Cisco Talos is back at Black Hat with new research, threat detection overviews and opportunities to connect with our team. Whether you're interested in what we're seeing in the threat landscape, detection engineering or real-world incident response, here's where and how to find us: Visit us at th...
Exploit for CVE-2007-6750
ReconScan The purpose of this project is to develop scripts that can be useful in the pentesting workflow, be it for VulnHub VMs, CTFs, hands-on certificates, or real-world targets. The project currently consists of two major components: a script invoking and aggregating the results of existing...
WordPress WoodMart - Multipurpose WooCommerce Theme plugin <= 8.2.6 - Improper Input Validation Leading to Unauthenticated Cart Manipulation vulnerability
WordPress WoodMart - Multipurpose WooCommerce Theme plugin = 8.2.6 - Improper Input Validation Leading to Unauthenticated Cart Manipulation vulnerability discovered by Samir El Khaouti in WordPress Theme WoodMart versions = 8.2.6...
WordPress Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App Plugin <= 0.8.8.8 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Blappsta Mobile App Plugin Your native, mobile iPhone App and Android App versions = 0.8.8.8...
CVE-2025-54295
CVE-2025-54295 concerns a Reflected XSS in the DJ-Reviews Joomla extension (versions 1.0–1.3.6). The vulnerability arises from a reflected cross-site scripting issue in that component, as reported across multiple sources (NVD/Red Hat/CVE list, PT Security). Affected product: DJ-Reviews (DJ-Extens...
CVE-2025-7888
creationtimestamp| type| source ---|---|--- 2025-07-20 15:10:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lufr44myo62j 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:41+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...
CVE-2025-50240
nbcio-boot v1.0.3 was discovered to contain a SQL injection vulnerability via the userIds parameter at /sys/user/deleteRecycleBin...
Google AI "Big Sleep" Stops Exploitation of Critical SQLite Vulnerability Before Hackers Act
Google on Tuesday revealed that its large language model LLM-assisted vulnerability discovery framework identified a security flaw in the SQLite open-source database engine before it could have been exploited in the wild. The vulnerability, tracked as CVE-2025-6965 CVSS score: 7.2, is a memory...
CVE-2025-7503
creationtimestamp| type| source ---|---|--- 2025-07-15 17:42:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3ltzh7v7v2f24 2025-07-21 00:52:15+00:00| seen| https://bsky.app/profile/nelnia.bsky.social/post/3lugrljszkk2x...
PT-2025-29275
Name of the Vulnerable Software and Affected Versions: saltbo zpan versions up to 1.6.5 saltbo zpan version 1.7.0-beta2 Description: A vulnerability exists in saltbo zpan related to the JSON Web Token Handler component. The issue affects the NewToken function within the...
CVE-2025-7220
creationtimestamp| type| source ---|---|--- 2025-07-09 06:53:19+00:00| seen| https://bsky.app/profile/potato.software/post/3ltja64zxce2j 2025-07-09 09:45:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltjjr4w3nx2s...
PT-2025-29370 · Tenda · Tenda Fh1202
Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: A critical vulnerability exists in the Tenda FH1202. The fromNatlimit function within the /goform/Natlimit file is susceptible to a stack-based buffer overflow. This occurs through the manipulatio...
AI Agent Smart Contract Exploit Generation
We present A1, an agentic execution driven system that transforms any LLM into an end-to-end exploit generator. A1 has no hand-crafted heuristics and provides the agent with six domain-specific tools that enable autonomous vulnerability discovery. The agent can flexibly leverage these tools to...
