1615 matches found
CVE-2025-1712
Argument injection in special agent configuration in Checkmk 2.4.0p1, 2.3.0p32, 2.2.0p42 and 2.1.0 allows authenticated attackers to write arbitrary files...
CVE-2025-62154
Missing Authorization vulnerability in recorp AI Content Writing Assistant Content Writer, ChatGPT, Image Generator All in One ai-content-writing-assistant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Content Writing Assistant Content Writer,...
CVE-2025-62154
Missing Authorization vulnerability in recorp AI Content Writing Assistant Content Writer, ChatGPT, Image Generator All in One ai-content-writing-assistant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Content Writing Assistant Content Writer,...
CVE-2025-62154 WordPress AI Content Writing Assistant (Content Writer, ChatGPT, Image Generator) All in One plugin <= 1.1.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in Recorp AI Content Writing Assistant Content Writer, ChatGPT, Image Generator All in One allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Content Writing Assistant Content Writer, ChatGPT, Image Generator All in On...
EUVD-2025-206022
Missing Authorization vulnerability in Recorp AI Content Writing Assistant Content Writer, ChatGPT, Image Generator All in One allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Content Writing Assistant Content Writer, ChatGPT, Image Generator All in On...
WordPress AI Content Writing Assistant (Content Writer, ChatGPT, Image Generator) All in One plugin <= 1.1.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by NumeX in WordPress Plugin AI Content Writing Assistant Content Writer, ChatGPT, Image Generator All in One versions = 1.1.7...
WordPress plugin AI Content Writing Assistant (Content Writer, ChatGPT, Image Generator) All in One 安全漏洞
...
EUVD-2025-205592
Picklescan vulnerable to Arbitrary File Writing...
[SECURITY] [DLA 4417-1] usbmuxd security update
----------------------------------------------------------------------- Debian LTS Advisory DLA-4417-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 21, 2025 https://wiki.debian.org/LTS -...
SUSE-SU-2025:4501-1 Security update for taglib
This update for taglib fixes the following issues: - CVE-2023-47466: application crash when processing specially crafted WAV files during tag writing operations bsc1243499...
Arbitrary Code Injection
Neuron is vulnerable to Arbitrary Code Injection. The vulnerability is due to insufficient validation in the MySQLSelectTool that fails to block file-writing SQL constructs, which allows an attacker to bypass read-only restrictions and write arbitrary files to the database server...
Barracuda Service Center 安全漏洞
Barracuda Service Center is a service center software from Barracuda USA. A security vulnerability exists in Barracuda Service Center versions prior to 2025.1.1 that originates from a URL defined in a WSDL under the control of an unauthenticated attacker, which could lead to arbitrary file writin...
USN-7904-1: Ghostscript vulnerabilities
Piotr Kajda discovered that Ghostscript incorrectly handled writing certain files. An attacker could possibly use this issue to cause Ghostscript to crash, resulting in a denial of service...
Socomec DIRIS Digiware M-70 Modbus TCP reboot denial of service vulnerability
Talos Vulnerability Report TALOS-2024-2119 Socomec DIRIS Digiware M-70 Modbus TCP reboot denial of service vulnerability December 1, 2025 CVE Number CVE-2024-48882 SUMMARY A denial of service vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially...
Directory Traversal
Overview keras is a Keras is a high-level neural networks API for Python.. Affected versions of this package are vulnerable to Directory Traversal via the keras.utils.getfile function when extracting tar archives. An attacker can write arbitrary files outside the intended extraction directory by...
TencentOS Server 4: mingw-taglib (TSSA-2025:0471)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0471 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
TencentOS Server 4: taglib (TSSA-2025:0423)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0423 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-47669)
nilfs2: state management vulnerability in error path of log writing function. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504649;...
CVE-2025-36236
CVE-2025-36236 is an IBM AIX/VIOS path traversal vulnerability in the NIM server (nimesis) that allows a remote attacker to traverse directories and write arbitrary files via a crafted URL. Affected: AIX 7.2 and 7.3; VIOS 3.1 and 4.1. Affected filesets include bos.sysmgt.nim.client/master, bos.sy...