Vulnerabilities
Summary — last 7 days
New vulnerabilities4,622▼ 808 vs. last week
Critical / high1,741▼ 1,357 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)957▲ 858 vs. last week
More filters
4 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Critical (9.8) | 0.83% | — | Playsms | 2/13/2023 | 6/17/2026 | A type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows attackers to bypass authentication. | |
| Modified | Critical (9.8) | 4.7% | PoC | Playsms | 9/10/2021 | 6/17/2026 | playSMS before 1.4.5 allows Arbitrary Code Execution by entering PHP code at the #tabs-information-page of core_main_config, and then executing that code via the index.php?app=main&inc=core_welcome URI. | |
| Analyzed | Critical (9.8) | 87% | ⚠ Active exploitationExploit | Playsms | 2/5/2020 | 6/17/2026 | PlaySMS before 1.4.3 does not sanitize inputs from a malicious string. | |
| Modified | Critical (9.8) | 77% | Exploit | Playsms | 5/21/2017 | 6/17/2026 | import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via vectors involving the User-Agent HTTP header and PHP code in the name of a file. |