Lucene search
+L

539 matches found

Kitploit
Kitploit
•added 2026/10/10 3:35 p.m.•18 views

decode-spam-headers

decode-spam-headers.py Che tu stia cercando di capire perché una specifica e-mail è finita in SPAM/Junk per le tue attività amministrative quotidiane o per i tuoi scopi di simulazione di Phishing Red-Team, questo script è qui per aiutarti! L'idea è nata durante la consegna di esercizi commerciali...

6.2AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/10 6:01 a.m.•41 views

spamscanner

A spam filter for Node.js, the command line and mail servers. It catches spam, phishing, scams and malware in any language, explains every decision, and can ask a language model about close calls. spamscanner.net · Getting started · Documentation Features A classifier that reads every language...

6.4AI score
SaveExploits0References4
Kitploit
Kitploit
•added 2026/10/10 6:01 a.m.•19 views

spamscanner

A spam filter for Node.js, the command line and mail servers. It catches spam, phishing, scams and malware in any language, explains every decision, and can ask a language model about close calls. spamscanner.net · Getting started · Documentation Features A classifier that reads every language...

6.4AI score
SaveExploits0References4
NVD
NVD
•added 2026/10/10 5:16 a.m.•5 views

CVE-2026-103424

The Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 6.88 due to insufficient input sanitization and output escaping. This makes it possible for...

5.4CVSS0.00221EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/10 4:26 a.m.•35 views

CVE-2026-103424 Anti-Spam by CleanTalk <= 6.88 - Unauthenticated Stored Cross-Site Scripting via Comment Content via ContactsEncoder Greedy Regex

The Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 6.88 due to insufficient input sanitization and output escaping. This makes it possible for...

5.4CVSS0.00221EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/10 4:26 a.m.•4 views

EUVD-2026-96064

The Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 6.88 due to insufficient input sanitization and output escaping. This makes it possible for...

5.4CVSS5.8AI score0.00221EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/10 4:26 a.m.•12 views

CVE-2026-103424

The Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting (XSS) in all versions up to and including 6.88 . The root cause is insufficient input sanitization and output escaping of the 'comment' parameter . An una...

5.4CVSS5.8AI score0.00221EPSS
SaveExploits0References6
Patchstack
Patchstack
•added 2026/10/09 5:34 p.m.•7 views

WordPress Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA plugin <= 6.88 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Maciej Komorowski in WordPress Plugin Spam protection, AntiSpam, FireWall by CleanTalk versions = 6.88...

5.4CVSS5.8AI score0.00221EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2026/09/23 4:26 p.m.•12 views

DRUPAL-CONTRIB-2026-171

The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The Webform Share submodule can expose a webform for embedding on another site. Under certain circumstances, submissions for an Ajax-enabled Webform using Webform Share...

5.7AI score
SaveExploits0References1
Drupal
Drupal
•added 2026/09/23 12:00 a.m.•20 views

Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171

The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The Webform Share submodule can expose a webform for embedding on another site. Under certain circumstances, submissions for an Ajax-enabled Webform using Webform Share...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•10 views

PT-2026-97656

Name of the Vulnerable Software and Affected Versions Drupal Webform module affected versions not specified Description The Webform Share submodule, which allows site builders to expose webforms for embedding on other sites, contains a flaw where submissions for Ajax-enabled webforms can bypass...

5.6AI score
SaveExploits0References3
Patchstack
Patchstack
•added 2026/09/18 1:43 p.m.•15 views

WordPress Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin 2.0.5-5.1.0 - Subscriber+ Arbitrary Form Submission Deletion vulnerability

Subscriber+ Arbitrary Form Submission Deletion vulnerability discovered by JunHee CHO in WordPress Plugin Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant versions 2.0.5-5.1.0...

4.3CVSS5.8AI score0.00254EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/09/17 6:16 a.m.•24 views

CVE-2026-91010

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms WordPress plugin before 5.1.1 does not check the user's capabilities in its message deletion AJAX action, and only tests that a nonce parameter is present rather than validating it, allowing any authenticated user, such as a...

4.3CVSS0.00254EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/17 6:00 a.m.•36 views

CVE-2026-91010

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms WordPress plugin (versions before 5.1.1 ) contains a vulnerability where the message deletion AJAX action fails to verify user capabilities. Instead of validating the nonce parameter, the plugin only checks for its presence. ...

4.3CVSS5.8AI score0.00254EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/17 6:00 a.m.•19 views

CVE-2026-91010 Invisible Anti-Spam & CAPTCHA < 5.1.1 - Subscriber+ Arbitrary Form Submission Deletion

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms WordPress plugin before 5.1.1 does not check the user's capabilities in its message deletion AJAX action, and only tests that a nonce parameter is present rather than validating it, allowing any authenticated user, such as a...

5.8AI score0.00254EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 6:00 a.m.•25 views

EUVD-2026-81353

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms WordPress plugin before 5.1.1 does not check the user's capabilities in its message deletion AJAX action, and only tests that a nonce parameter is present rather than validating it, allowing any authenticated user, such as a...

4.3CVSS5.8AI score0.00254EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/17 6:00 a.m.•46 views

CVE-2026-91010 Invisible Anti-Spam & CAPTCHA < 5.1.1 - Subscriber+ Arbitrary Form Submission Deletion

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms WordPress plugin before 5.1.1 does not check the user's capabilities in its message deletion AJAX action, and only tests that a nonce parameter is present rather than validating it, allowing any authenticated user, such as a...

0.00254EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•6 views

CVE-2026-91010: Missing Authorization

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms WordPress plugin before 5.1.1 does not check the user's capabilities in its message deletion AJAX action, and only tests that a nonce parameter is present rather than validating it, allowing any authenticated user, such as a...

4.3CVSS5.8AI score0.00254EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•8 views

PT-2026-94177

Name of the Vulnerable Software and Affected Versions Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms WordPress plugin versions prior to 5.1.1 Description An issue exists in the message deletion AJAX action where the software fails to verify user capabilities and only checks f...

4.3CVSS5.8AI score0.00254EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/05 6:37 a.m.•38 views

CVE-2026-77830

The Spam protection, Honeypot, Anti-Spam by CleanTalk WordPress plugin (versions ≤ 6.86 ) contains a Stored Cross-Site Scripting vulnerability in the Comment Content aria-label Placeholder , caused by insufficient input sanitization and output escaping. Authenticated attackers with custom-level a...

7.2CVSS6.1AI score0.00474EPSS
SaveExploits0References12
Rows per page
Query Builder