Lucene search
+L

425 matches found

attackerkb
attackerkb
•added 2026/05/27 7:45 a.m.•20 views

CVE-2026-3001

The Gutenverse plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 3.4.6 due to insufficient input sanitization and output escaping. Specifically, the rendercontent method in class-search-result-title.php outputs the val...

6.1CVSS6AI score0.00643EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/05/27 7:45 a.m.•68 views

CVE-2026-3001 Gutenverse <= 3.4.6 - Reflected Cross-Site Scripting via 's' Parameter

The Gutenverse plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 3.4.6 due to insufficient input sanitization and output escaping. Specifically, the rendercontent method in class-search-result-title.php outputs the val...

6.1CVSS0.00643EPSS
SaveExploits0References3
NVD
NVD
•added 2026/05/27 12:16 a.m.•45 views

CVE-2026-9607

A vulnerability was found in itsourcecode Courier Management System 1.0. The affected element is an unknown function of the file /parcellist.php. Performing a manipulation of the argument s results in sql injection. It is possible to initiate the attack remotely. The exploit has been made public...

6.5CVSS0.00316EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/27 12:00 a.m.•7 views

CVE-2026-3001: Improper Neutralization of Input During Web Page Generation

The Gutenverse plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 3.4.6 due to insufficient input sanitization and output escaping. Specifically, the rendercontent method in class-search-result-title.php outputs the val...

6.1CVSS6.1AI score0.00643EPSS
SaveExploits0References2
NVD
NVD
•added 2026/05/13 5:16 a.m.•27 views

CVE-2026-7619

The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to, and including, 1.8.10.4 due to insufficient escaping on the user supplied parameter and lack of...

6.5CVSS0.00472EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/05/13 4:26 a.m.•25 views

EUVD-2026-29900

The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to, and including, 1.8.10.4 due to insufficient escaping on the user supplied parameter and lack of...

6.5CVSS5.9AI score0.00472EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/05/13 12:00 a.m.•32 views

PT-2026-40564

The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to, and including, 1.8.10.4 due to insufficient escaping on the user supplied parameter and lack of...

6.5CVSS5.9AI score0.00472EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/13 12:00 a.m.•7 views

CVE-2026-7619: Improper Neutralization of Special Elements used in an SQL Command

The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to, and including, 1.8.10.4 due to insufficient escaping on the user supplied parameter and lack of...

6.5CVSS5.7AI score0.00472EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/04/15 12:00 a.m.•14 views

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 router’s microprogramming software lies in the copying of buffers without checking the size of input data when processing the s parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted GET request...

7.8CVSS5.8AI score0.00516EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/04/14 12:00 a.m.•14 views

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of input data when processing the s parameter. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a specially crafted GET request...

7.8CVSS5.8AI score0.00408EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
•added 2026/04/10 7:22 p.m.•17 views

CVE-2025-50668

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the s parameter in the /weblistopt.asp endpoint...

7.5CVSS6AI score0.00408EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/04/10 7:22 p.m.•20 views

CVE-2025-50645

A vulnerability has been discovered in D-Link DI-8003 16.07.26A1, which can lead to a buffer overflow when the s parameter in the pppoelistopt.asp endpoint is manipulated. By sending a crafted request with an excessively large value for the s parameter, an attacker can trigger a buffer overflow...

7.5CVSS6.1AI score0.00516EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/08 9:33 p.m.•34 views

EUVD-2025-209358

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the s parameter in the /weblistopt.asp endpoint...

6.2AI score0.00408EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/04/08 9:33 p.m.•34 views

EUVD-2025-209323

A vulnerability has been discovered in D-Link DI-8003 16.07.26A1, which can lead to a buffer overflow when the s parameter in the pppoelistopt.asp endpoint is manipulated. By sending a crafted request with an excessively large value for the s parameter, an attacker can trigger a buffer overflow...

6.1AI score0.00516EPSS
SaveExploits0References3
NVD
NVD
•added 2026/04/08 7:24 p.m.•16 views

CVE-2025-50668

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the s parameter in the /weblistopt.asp endpoint...

7.5CVSS0.00408EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•25 views

PT-2026-31400

Name of the Vulnerable Software and Affected Versions D-Link DI-8003 version 16.07.26A1 Description A buffer overflow exists due to improper handling of the s parameter in the '/web list opt.asp' API endpoint. Recommendations At the moment, there is no information about a newer version that...

7.5CVSS6AI score0.00408EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/04/08 12:00 a.m.•8 views

CVE-2025-50668

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the s parameter in the /weblistopt.asp endpoint...

7.4AI score0.00408EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•5 views

CVE-2025-50645: Buffer Copy without Checking Size of Input

A vulnerability has been discovered in D-Link DI-8003 16.07.26A1, which can lead to a buffer overflow when the s parameter in the pppoelistopt.asp endpoint is manipulated. By sending a crafted request with an excessively large value for the s parameter, an attacker can trigger a buffer overflow...

7.5CVSS7.2AI score0.00516EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•6 views

CVE-2025-50668: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the s parameter in the /weblistopt.asp endpoint...

7.5CVSS7.5AI score0.00408EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•17 views

PT-2026-31371

Name of the Vulnerable Software and Affected Versions D-Link DI-8003 version 16.07.26A1 Description A buffer overflow can occur in D-Link DI-8003 version 16.07.26A1 when the s parameter in the /pppoe list opt.asp API endpoint is manipulated with an excessively large value. This manipulation can...

7.8CVSS7.3AI score0.00516EPSS
SaveExploits0References7
Rows per page
Query Builder