Lucene search
+L

58 matches found

Kitploit
Kitploit
•added 2026/10/30 1:51 p.m.•28 views

nahsra__antisamy_CVE-2016-10006_1-5-3

antisamy A library for performing fast, configurable cleansing of HTML coming from untrusted sources. Another way of saying that could be: It's an API that helps you make sure that clients don't supply malicious cargo code in the HTML they supply for their profile, comments, etc., that get...

6.1CVSS6.8AI score0.02354EPSS
SaveExploits0
osv_cleanstart
osv_cleanstart
•added 2026/07/30 7:10 a.m.•22 views

CLEANSTART-2026-IS48136 Security fixes in opentofu-fips 1.10.9-r0

Package opentofu-fips version 1.10.9-r0 fixes 2 vulnerabilities: CVE-2024-10005, CVE-2024-10006...

8.3CVSS6.9AI score0.00772EPSS
SaveExploits0References1
Wolfi
Wolfi
•added 2026/06/05 7:48 p.m.•22 views

CVE-2026-10006 vulnerabilities

Vulnerabilities for packages: chromium...

7.5CVSS7.2AI score0.0023EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/05/29 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-10006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race in WebAudio in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium...

7.5CVSS7.7AI score0.0023EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/28 10:25 p.m.•138 views

CVE-2026-10006

A race condition vulnerability exists in the WebAudio component of Google Chrome (and Microsoft Edge ) prior to version 148.0.7778.216 . The flaw is caused by improper synchronization during simultaneous execution using a shared resource. A remote attacker could exploit this by delivering a craft...

7.5CVSS8.2AI score0.0023EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2026/05/28 10:25 p.m.•49 views

CVE-2026-10006

Race in WebAudio in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

7.5CVSS8.2AI score0.0023EPSS
SaveExploits0
Circl
Circl
•added 2026/05/28 6:00 p.m.•33 views

CVE-2026-10006

creationtimestamp| type| source ---|---|--- 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260529 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260529 2026-05-29...

7.5CVSS7.3AI score0.0023EPSS
SaveExploits0References3
Mend
Mend
•added 2026/05/16 2:44 a.m.•2 views

MSC-2025-10006

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

9.8CVSS5.8AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:54 a.m.•28 views

CVE-2020-10006

This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to access restricted files...

5.5CVSS6.5AI score0.00918EPSS
SaveExploits0References1
Circl
Circl
•added 2025/10/18 7:37 a.m.•25 views

CVE-2025-10006

creationtimestamp| type| source ---|---|--- 2025-10-18 07:37:46+00:00| seen| Telegram/TD5wjaSFldegPRJdxiNQ9kUtWX3nZhXTi3oZDKxhHeQ-Zg...

6.4CVSS5.8AI score0.00233EPSS
SaveExploits0
Cvelist
Cvelist
•added 2025/10/18 6:42 a.m.•34 views

CVE-2025-10006 WPBakery Page Builder <= 8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'revslidervc' shortcode in all versions up to, and including, 8.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00233EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/10/18 1:15 a.m.•26 views

WordPress WPBakery Page Builder plugin <= 8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by stealthcopter in WordPress Plugin WPBakery Page Builder versions = 8.6...

6.4CVSS5.8AI score0.00233EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•46 views

EUVD-2019-9469

Malware in sbrugna...

9.8CVSS8.6AI score0.01022EPSS
SaveExploits0References2
Circl
Circl
•added 2025/08/20 9:02 p.m.•35 views

CVE-2016-10006

creationtimestamp| type| source ---|---|--- 2025-08-20 21:02:30+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwud77izd22t...

6.1CVSS6.3AI score0.02354EPSS
SaveExploits0References1
Chainguard
Chainguard
•added 2025/08/20 7:17 p.m.•54 views

CVE-2024-10006 vulnerabilities

Vulnerabilities for packages: consul-fips, consul...

8.3CVSS7AI score0.00467EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 9:51 a.m.•21 views

CVE-2011-10006

A vulnerability was found in GamerZ WP-PostRatings up to 1.64. It has been classified as problematic. This affects an unknown part of the file wp-postratings.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.65 is able to...

6.1CVSS3.2AI score0.00433EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 12:39 a.m.•18 views

CVE-2015-10006

A vulnerability, which was classified as problematic, has been found in admont28 Ingnovarq. Affected by this issue is some unknown functionality of the file app/controller/insertarSliderAjax.php. The manipulation of the argument imagetitle leads to cross site scripting. The attack may be launched...

6.1CVSS3.4AI score0.00568EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2024-10006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was identified in Consul and Consul Enterprise Consul such that using Headers in L7 traffic intentions could bypass HTTP header based access...

8.3CVSS7AI score0.00467EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2016-10006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input a tag that supports style with active content, you could bypass the library protections...

6.1CVSS6.3AI score0.02354EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2024/11/09 12:00 a.m.•53 views

openSUSE Security Advisory (SUSE-SU-2024:3950-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9CVSS7.1AI score0.40842EPSS
SaveExploits4References3
Rows per page
Query Builder