Lucene search
+L

3988 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/21 12:00 a.m.•4 views

CVE-2025-22732: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Admiral Ad Blocking Detector ad-blocking-detector allows Stored XSS.This issue affects Ad Blocking Detector: from n/a through = 3.6.0...

6.5CVSS5.8AI score0.00234EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/01/20 7:23 a.m.•8 views

Malicious code in ad-shield (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fa203eed643427755b02207456b1deb0838e2d56b76368ad46a08dfd5b087e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/01/20 7:23 a.m.•7 views

Malicious code in ad-shield-essential (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52a7e1710e2d79d0dbdce080eb340926c5b9099faea1b5116d16c5620e04a278 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/01/20 7:23 a.m.•9 views

Malicious code in ad-shield-essential-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 204851191eeff7f39b152f6eea9aadd2303a89c305e1ea65c73ac3c54c96a25f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/01/20 7:23 a.m.•8 views

Malicious code in ad-shield-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65332410795abdd16c79e5d2778ed52c4dc3725715f2c4624d21e1a5f4ca3b92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2025/01/20 7:23 a.m.•9 views

MAL-2025-151 Malicious code in ad-shield (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fa203eed643427755b02207456b1deb0838e2d56b76368ad46a08dfd5b087e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2025/01/20 7:23 a.m.•16 views

MAL-2025-153 Malicious code in ad-shield-essential-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 204851191eeff7f39b152f6eea9aadd2303a89c305e1ea65c73ac3c54c96a25f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2025/01/20 7:23 a.m.•8 views

MAL-2025-152 Malicious code in ad-shield-essential (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52a7e1710e2d79d0dbdce080eb340926c5b9099faea1b5116d16c5620e04a278 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2025/01/20 7:23 a.m.•8 views

MAL-2025-154 Malicious code in ad-shield-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65332410795abdd16c79e5d2778ed52c4dc3725715f2c4624d21e1a5f4ca3b92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/15 12:18 p.m.•17 views

WordPress Ad Blocking Detector plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Ad Blocking Detector versions = 3.6.0...

6.5CVSS6.1AI score0.00234EPSS
SaveExploits0Affected Software1
Oracle linux
Oracle linux
•added 2025/01/15 12:00 a.m.•195 views

ipa security update

4.12.2-1.0.1.3 - Set IPAPLATFORM=rhel when build on Oracle Linux Orabug: 29516674 - Add bind to ipa-server-common Requires Orabug: 36518596 4.12.2-1.3 - Resolves: RHEL-69928 add support for python cryptography 44.0.0 - Resolves: RHEL-70258 Upgrade to ipa-server-4.12.2-1.el9 OTP-based bind to LDAP...

5.5CVSS7.1AI score0.00231EPSS
SaveExploits0
OSV
OSV
•added 2025/01/11 7:15 a.m.•90 views

BIT-MATTERMOST-2024-23493

Mattermost fails to properly authorize the requests fetching team associated AD/LDAP groups, allowing a user to fetch details of AD/LDAP groups of a team that they are not a member of...

6.5CVSS5.1AI score0.00389EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/24 12:00 a.m.•5 views

CVE-2024-10584: Unrestricted Upload of File with Dangerous Type

The DirectoryPress – Business Directory And Classified Ad Listing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.6.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticate...

5.4CVSS6AI score0.00301EPSS
SaveExploits0References1
Malwarebytes
Malwarebytes
•added 2024/12/16 4:18 a.m.•29 views

Malicious ad distributes SocGholish malware to Kaiser Permanente employees

On December 15, we detected a malicious campaign targeting Kaiser Permanente employees via Google Search Ads. The fraudulent ad masquerades as the health care company's HR portal used to check for benefits, download paystubs and other corporate related tasks. We believe the threat actors' intent...

7.1AI score
SaveExploits0
NVD
NVD
•added 2024/12/14 5:15 a.m.•33 views

CVE-2024-12411

The WP Ad Guru – Banner ad, Responsive popup, Popup maker, Ad rotator & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 2.5.4 due to insufficient input sanitization and output escaping. This makes it possible fo...

6.1CVSS0.00299EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/12/14 4:23 a.m.•38 views

CVE-2024-12411 WP Ad Guru – Banner ad, Responsive popup, Popup maker, Ad rotator & More <= 2.5.4 - Reflected Cross-Site Scripting

The WP Ad Guru – Banner ad, Responsive popup, Popup maker, Ad rotator & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 2.5.4 due to insufficient input sanitization and output escaping. This makes it possible fo...

6.1CVSS0.00299EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/12/14 4:23 a.m.•9 views

CVE-2024-12411 WP Ad Guru – Banner ad, Responsive popup, Popup maker, Ad rotator & More <= 2.5.4 - Reflected Cross-Site Scripting

The WP Ad Guru – Banner ad, Responsive popup, Popup maker, Ad rotator & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 2.5.4 due to insufficient input sanitization and output escaping. This makes it possible fo...

6.1CVSS6.1AI score0.00299EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/12/14 12:00 a.m.•19 views

WordPress plugin WP Ad Guru 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site...

6.1CVSS7.9AI score0.00299EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/14 12:00 a.m.•2 views

CVE-2024-12411: Improper Neutralization of Input During Web Page Generation

The WP Ad Guru – Banner ad, Responsive popup, Popup maker, Ad rotator & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 2.5.4 due to insufficient input sanitization and output escaping. This makes it possible fo...

6.1CVSS6AI score0.00299EPSS
SaveExploits0References1
Opera Security Advisories
Opera Security Advisories
•added 2024/12/11 12:00 a.m.•32 views

How Opera for Android’s revamped ad blocker improves your browsing experience

News, Privacy How Opera for Android’s revamped ad blocker improves your browsing experience Share December 11th, 2024 Hi Opera users! At Opera, we know how intrusive advertising can disrupt your browsing experience by turning it into a frustrating maze of pop-ups. That’s why we have included a...

8.8CVSS5.8AI score
SaveExploits0References1
Rows per page
Query Builder