18 matches found
CVE-2025-10385
creationtimestamp| type| source ---|---|--- 2025-09-14 01:31:55+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyr5h2ivga2b 2025-09-14 03:21:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyrdlv7a222c...
CVE-2014-10385
The memphis-documents-library plugin before 3.0 for WordPress has XSS via $REQUEST...
CVE-2024-10385 Stored XSS in DirectAdmin Evo Skin
Ticket management system in DirectAdmin Evolution Skin is vulnerable to XSS Cross-site Scripting, which allows a low-privileged user to inject and store malicious JavaScript code. If an admin views the ticket, the script might perform actions with their privileges, including command execution. ...
CVE-2024-10385
CVE-2024-10385 affects DirectAdmin Evolution Skin’s ticket management system. It describes a stored XSS vulnerability that allows a low-privileged user to inject and persist malicious JavaScript; if an admin views the ticket, the script may perform privileged actions, including command execution....
CVE-2020-10385
creationtimestamp| type| source ---|---|--- 2023-12-12 02:13:12+00:00| seen| https://t.me/arpsyndicate/1793 2025-08-29 19:46:25+00:00| seen| https://t.me/gjoyh5/168...
Wordpress WPForms Plugin Cross-Site Scripting (CVE-2020-10385)
A cross-site scripting vulnerability exists in Wordpress WPForms plugin. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
CVE-2020-10385
A stored cross-site scripting XSS vulnerability exists in the WPForms Contact Form aka wpforms-lite plugin before 1.5.9 for WordPress...
Wordpress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting
Wordpress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting Exploit Title: Wordpress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting Date: 2020-02-18 Vendor Homepage: https://wpforms.com Vendor Changelog: https://wordpress.org/plugins/wpforms-lite/developers Exploit Author: Jinson...
WordPress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting
Exploit Title: Wordpress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting Date: 2020-02-18 Vendor Homepage: https://wpforms.com Vendor Changelog: https://wordpress.org/plugins/wpforms-lite/developers Exploit Author: Jinson Varghese Behanan Author Advisory:...
Wordpress WPForms 1.5.9 Plugin - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Wordpress Plugin WPForms 1.5.9 - Persistent Cross-Site Scripting Vendor Homepage: https://wpforms.com Vendor Changelog: https://wordpress.org/plugins/wpforms-lite/developers Exploit Author: Jinson Varghese Behanan Author Advisor...
CVE-2014-10385
creationtimestamp| type| source ---|---|--- 2019-08-22 18:28:43+00:00| seen| https://t.me/cibsecurity/6299...
CVE-2014-10385
CVE-2014-10385 affects the memphis-documents-library WordPress plugin prior to version 3.0. The vulnerability is an XSS flaw triggered via the $_REQUEST parameter, allowing an attacker to inject and execute client-side script in affected pages. The impact is described as cross-site scripting; no ...
CVE-2019-10385
Jenkins eggPlant Plugin 2.2 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master, enabling disclosure to users with Extended Read permission or access to the master filesystem. This is a credentials-情報 disclosure vulnerability affecting the plugin, with the roo...
CVE-2017-10385
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...
CVE-2017-10385
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...
CVE-2017-10385
Removed by vendor...
CVE-2017-10385
CVE-2017-10385 affects Oracle GlassFish Server’s Web Container in Oracle Fusion Middleware 3.0.1 and 3.1.2. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the server, with successful attacks requiring user interaction. This can lead to unauthorized...
Fedora Core 10 FEDORA-2009-10385 (dopewars)
The remote host is missing an update to dopewars announced via advisory FEDORA-2009-10385. OpenVAS Vulnerability Test $Id: fcore200910385.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-10385 dopewars Authors: Thomas Reinke Copyright: Copyright c 20...