Tag
MixPHP Framework 2.2.17 Unsafe Deserialization Remote Code Execution
2 rules 1 TTPMixPHP Framework 2.2.17 is vulnerable to remote code execution due to unsafe deserialization, with a public exploit available, increasing the risk for unpatched systems.
EspoCRM 9.3.3 SSRF Vulnerability (CVE-2026-33534)
2 rules 1 TTP 1 CVEA public exploit is available for EspoCRM 9.3.3, exploiting a Server-Side Request Forgery (SSRF) vulnerability (CVE-2026-33534) allowing authenticated attackers to potentially access internal resources.
Casdoor 3.54.1 Arbitrary File Write via Path Traversal
2 rules 1 TTPCasdoor version 3.54.1 is vulnerable to a path traversal attack, allowing arbitrary file writes on the system, with a public exploit available.
OpenCATS 0.9.7.4 SQL Injection Vulnerability
2 rules 1 TTPA SQL Injection vulnerability exists in OpenCATS 0.9.7.4, with a published exploit that allows for database version and user extraction on unpatched systems.
WordPress Temporary Login Plugin Authentication Bypass Vulnerability
2 rules 1 TTPA public exploit is available for WordPress Temporary Login Plugin version 1.0.0, which demonstrates an authentication bypass vulnerability that can lead to account takeover, increasing the risk for unpatched systems.
SolarEdge CSRF and Out-of-Band Injection Vulnerability
2 rules 1 TTP 1 IOCA CSRF-OOB-Injection vulnerability exists in SolarEdge Monitoring Platform's `/solaredge-web/p/initClient` endpoint due to improper validation of session parameters, allowing attackers to manipulate headers to initiate requests to attacker-controlled domains, potentially leading to session compromise and unauthorized system control.
BookStack 25.12.1 Denial-of-Service Vulnerability
2 rules 1 TTPA denial-of-service vulnerability exists in BookStack version 25.12.1, and a public exploit (EDB-52571) is available, increasing the risk to unpatched systems.
Cockpit 359 Remote Code Execution Vulnerability
2 rules 1 TTPCockpit version 359 is vulnerable to remote code execution, and a public exploit is available on Exploit-DB, increasing the risk for unpatched systems.
ePati Antikor NGFW 2.0.1301 Authentication Bypass Vulnerability
1 rule 1 TTPA public exploit has been published for ePati Antikor NGFW 2.0.1301, exploiting an authentication bypass vulnerability, increasing the risk to unpatched systems.
Apache HertzBeat 1.8.0 Remote Code Execution Vulnerability
2 rules 1 TTPApache HertzBeat 1.8.0 is vulnerable to remote code execution due to a newly published exploit, posing a significant risk to unpatched systems.
Bludit CMS 3.18.4 Remote Code Execution Vulnerability
2 rules 1 TTPA remote code execution vulnerability exists in Bludit CMS 3.18.4, for which a public exploit has been published, increasing the risk to unpatched systems.
LuaJIT 2.1.1774638290 Arbitrary Code Execution Vulnerability
2 rules 1 TTPA public exploit has been published for LuaJIT version 2.1.1774638290, enabling arbitrary code execution on vulnerable web applications.
Ghost CMS 6.19.0 SQL Injection Vulnerability
2 rules 1 TTPA SQL injection vulnerability exists in Ghost CMS 6.19.0, and a public exploit (EDB-52555) is available, increasing the risk to unpatched systems.