163 matches found
FreePBX ARI - Cookie Auth Bypass Detection (CVE-2014-7235)
Detects CVE-2014-7235 by sending crafted ariauth cookie to /recordings/index.php and matching authenticated UI markers. !/usr/bin/env python3 -- coding: utf-8 -- """FreePBX ARI recordings auth bypass CVE-2014-7235.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...
CVE-2022-0161
The ARI Fancy Lightbox WordPress plugin before 1.3.9 does not sanitise and escape the msg parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...
EUVD-2006-0363
Malware in sbrugna...
EUVD-2020-11063
Malware in sbrugna...
EUVD-2025-26993
Malicious code in bioql PyPI...
EUVD-2023-51624
Malicious code in bioql PyPI...
EUVD-2023-56855
Malicious code in bioql PyPI...
EUVD-2023-56200
Malicious code in bioql PyPI...
EUVD-2024-22247
Malicious code in bioql PyPI...
EUVD-2024-42346
Malicious code in bioql PyPI...
EUVD-2023-51930
Malicious code in bioql PyPI...
CVE-2025-58784
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arisoft ARI Fancy Lightbox ari-fancy-lightbox allows Stored XSS.This issue affects ARI Fancy Lightbox: from n/a through = 1.4.0...
CVE-2025-58784
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arisoft ARI Fancy Lightbox ari-fancy-lightbox allows Stored XSS.This issue affects ARI Fancy Lightbox: from n/a through = 1.4.0...
CVE-2025-58784 WordPress ARI Fancy Lightbox Plugin <= 1.4.0 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arisoft ARI Fancy Lightbox ari-fancy-lightbox allows Stored XSS.This issue affects ARI Fancy Lightbox: from n/a through = 1.4.0...
CVE-2025-58784
CVE-2025-58784 affects the WordPress plugin ARI Fancy Lightbox. It is a Stored XSS due to improper input neutralization during web page generation, affecting ARI Fancy Lightbox versions through 1.4.0. The issue can store attacker-controlled input that is later reflected in pages. Remediation: upd...
WordPress ARI Fancy Lightbox Plugin <= 1.4.0 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Prissy Patchstack Alliance in WordPress Plugin ARI Fancy Lightbox versions = 1.4.0...
WordPress plugin ARI Fancy Lightbox: Cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2025-58784: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arisoft ARI Fancy Lightbox ari-fancy-lightbox allows Stored XSS.This issue affects ARI Fancy Lightbox: from n/a through = 1.4.0...
PT-2025-36124
Name of the Vulnerable Software and Affected Versions: ARI Fancy Lightbox versions through 1.4.0 Description: The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, specifically a Stored Cross-site Scripting XSS issue. This allows for the injection of...