Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in StylemixThemes Pearl - Corporate Business pearl allows PHP Local File Inclusion.This issue affects Pearl - Corporate Business: from n/a through < 3.4.8. CVSSv3.1 8.1 (HIGH)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in andy_moyle Church Admin church-admin allows SQL Injection.This issue affects Church Admin: from n/a through <= 5.0.18. CVSSv3.1 9.3 (CRITICAL)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Michele Giorgi Formality formality allows PHP Local File Inclusion.This issue affects Formality: from n/a through <= 1.5.7. CVSSv3.1 8.1 (HIGH)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ntm custom-field-list-widget custom-field-list-widget allows PHP Local File Inclusion.This issue affects custom-field-list-widget: from n/a through <= 1.5.1. CVSSv3.1 8.1 (HIGH)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Alex Furr LinkedIn Lite linkedin-lite allows PHP Local File Inclusion.This issue affects LinkedIn Lite: from n/a through <= 1.0. CVSSv3.1 8.1 (HIGH)
Elastic Security Labs analyzed SHELBY, a novel malware family deployed by REF8685 against Iraqi telecommunications and aviation targets via spear-phishing. The malware abuses GitHub repositories and Personal Access Tokens (PATs) for command-and-control, employing multi-stage .NET loaders with extensive sandbox evasion, reflective loading, and AES-encrypted payload delivery. A critical design flaw exposes the embedded PAT token to any victim or third-party analyst, allowing unauthorized takeover of all infected machines.
The Memory Management Module of NASA cFS (Core Flight System) Aquila has insecure permissions, which can be exploited to gain an RCE on the platform. CVSSv3.1 9.8 (CRITICAL) · EPSS 64th percentile
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shamalli Web Directory Free web-directory-free allows Blind SQL Injection.This issue affects Web Directory Free: from n/a through <= 1.7.6. CVSSv3.1 9.3 (CRITICAL)
Rhino Security Labs disclosed three critical vulnerabilities in Appsmith (versions 1.20–1.51): CVE-2024-55963 allows unauthenticated RCE via a misconfigured default PostgreSQL database with trust authentication combined with default signup; CVE-2024-55964 is an IDOR enabling App Viewer users to enumerate and query arbitrary datasources through predictable ID patterns; CVE-2024-55965 permits DoS via a broken access control flaw in the restart endpoint. All three have been patched in v1.52 and later.
Cross-Site Request Forgery (CSRF) vulnerability in Jacob Schwartz WP e-Commerce Style Email wp-e-commerce-style-email allows Code Injection.This issue affects WP e-Commerce Style Email: from n/a through <= 0.6.2. CVSSv3.1 9.6 (CRITICAL)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dourou Flickr set slideshows flickr-set-slideshows allows SQL Injection.This issue affects Flickr set slideshows: from n/a through <= 0.9. CVSSv3.1 8.5 (HIGH)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jahertor WP Featured Entries wp-featured-entries allows SQL Injection.This issue affects WP Featured Entries: from n/a through <= 1.0. CVSSv3.1 8.5 (HIGH)
Cross-Site Request Forgery (CSRF) vulnerability in wpshopee Awesome Logos awesome-logos allows SQL Injection.This issue affects Awesome Logos: from n/a through <= 1.2. CVSSv3.1 9.3 (CRITICAL)
Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery (SSRF) where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism. CVSSv3.1 8.2 (HIGH) · EPSS 34th percentile
The Block Logic – Full Gutenberg Block Display Control plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0.8 via the block_logic_check_logic function. This is due to the unsafe evaluation of user-controlled input. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server. CVSSv3.1 8.8 (HIGH)
Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling login logging allows unauthenticated users to store HTML content in the viewable log component accessible at /mbilling/index.php/logUsers/read" cross-site scripting This vulnerability is associated with program files protected/components/MagnusLog.Php. This issue affects MagnusBilling: through 7.3.0. CVSSv3.1 8.2 (HIGH) · EPSS 61th percentile
Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in Sechard Information Technologies SecHard allows Authentication Bypass, Interface Manipulation, Authentication Abuse, Harvesting Information via API Event Monitoring. This issue affects SecHard: before 3.3.0.20220411. CVSSv3.1 9.0 (CRITICAL)
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. EPSS 98th percentile
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CM Informatics CM News allows SQL Injection. This issue affects CM News: through 6.0. NOTE: The vendor was contacted and it was learned that the product is not supported. CVSSv3.1 9.8 (CRITICAL) · EPSS 28th percentile
A GitHub repository documenting container escape challenges from the Real World CTF competition, spanning 2022–2024. The challenges progressively demonstrate escape techniques including Docker socket mapping, binfmt misconfigurations, kernel vulnerabilities, PID namespace sharing, and CAP_SYS_ADMIN abuse without mount permissions.
Elastic Security Labs published a comprehensive technical analysis of ABYSSWORKER, a malicious kernel driver used in MEDUSA ransomware campaigns to disable EDR systems. The driver, signed with stolen Chinese certificates and packed with VMProtect, provides a suite of kernel-level capabilities including callback removal, driver function replacement, thread termination, and file manipulation to blind and disable endpoint detection tools. The analysis includes reverse-engineered IOCTLs, obfuscation techniques, and a reference client implementation.
The File Away plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check and missing file type validation in the upload() function in all versions up to, and including, 3.9.9.0.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. CVSSv3.1 9.8 (CRITICAL)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Vestel EVC04 Configuration Interface allows SQL Injection. This issue affects EVC04 Configuration Interface: before V3.187, V4.53. CVSSv3.1 9.8 (CRITICAL) · EPSS 33th percentile
A flaw was found in Hive, a component of Multicluster Engine (MCE) and Advanced Cluster Management (ACM). This vulnerability causes VCenter credentials to be exposed in the ClusterProvision object after provisioning a VSphere cluster. Users with read access to ClusterProvision objects can extract sensitive credentials even if they do not have direct access to Kubernetes Secrets. This issue can lead to unauthorized VCenter access, cluster management, and privilege escalation. CVSSv3.1 8.2 (HIGH) · EPSS 39th percentile
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in cookforweb All In Menu all-in-menu allows Blind SQL Injection.This issue affects All In Menu: from n/a through <= 1.1.5. CVSSv3.1 8.5 (HIGH)