Lucene search
+L

2950 matches found

NVD
NVD
added 2024/04/15 7:15 a.m.21 views

CVE-2024-32428

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moss Web Works MWW Disclaimer Buttons allows Stored XSS.This issue affects MWW Disclaimer Buttons: from n/a through 3.0.2...

5.9CVSS5.7AI score0.00335EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/15 7:15 a.m.6 views

CVE-2024-32428

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moss Web Works MWW Disclaimer Buttons allows Stored XSS.This issue affects MWW Disclaimer Buttons: from n/a through 3.0.2...

4.8CVSS5.8AI score0.00335EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/15 6:29 a.m.66 views

CVE-2024-32428

CVE-2024-32428 affects the WordPress plugin MWW Disclaimer Buttons (MWW Disclaimer Buttons) up to version 3.0.2, with a Stored XSS due to improper input neutralization during web page generation. Root cause: insufficient sanitization leading to script execution in the context of the affected page...

5.9CVSS5.2AI score0.00335EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/15 6:29 a.m.12 views

CVE-2024-32428 WordPress MWW Disclaimer Buttons plugin <= 3.0.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moss Web Works MWW Disclaimer Buttons allows Stored XSS.This issue affects MWW Disclaimer Buttons: from n/a through 3.0.2...

5.9CVSS6.7AI score0.00335EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/15 6:29 a.m.38 views

CVE-2024-32428 WordPress MWW Disclaimer Buttons plugin <= 3.0.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moss Web Works MWW Disclaimer Buttons allows Stored XSS.This issue affects MWW Disclaimer Buttons: from n/a through 3.0.2...

5.9CVSS5.9AI score0.00335EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/04/14 12:00 a.m.10 views

PT-2024-24557 · Unknown · Mww Disclaimer Buttons

Name of the Vulnerable Software and Affected Versions: MWW Disclaimer Buttons versions 3.0.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in MWW Disclaimer Buttons...

5.9CVSS5.8AI score0.00335EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2024/04/12 3:06 p.m.11 views

WordPress MWW Disclaimer Buttons plugin <= 3.0.2 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by Cronus Patchstack Alliance in WordPress Plugin MWW Disclaimer Buttons versions = 3.0.2...

5.9CVSS5.8AI score0.00335EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/04/12 12:00 a.m.15 views

WordPress MWW Disclaimer Buttons Plugin <= 3.0.2 is vulnerable to Cross Site Scripting (XSS)

Software MWW Disclaimer Buttons Type Plugin Vulnerable versions = 3.0.2 Fixed in 3.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-32428 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 22fa1a3682eb Credits Cronus Required...

5.9CVSS5.8AI score0.00335EPSS
SaveExploits0References2Affected Software1
Citrix
Citrix
added 2024/04/11 8:39 a.m.127 views

XenServer and Citrix Hypervisor Security Update for CVE-2023-46842, CVE-2024-2201 and CVE-2024-31142

Description of Problem Two issues have been identified that affect XenServer and Citrix Hypervisor; each issue may allow malicious unprivileged code in a guest VM to infer the contents of memory belonging to its own or other VMs on the same host. These issues have the following identifiers:...

6.8AI score0.17444EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2024/04/03 7:10 p.m.280 views

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094-Checker The repository consists of a checker fil...

10CVSS10AI score0.85974EPSS
SaveExploits41
GithubExploit
GithubExploit
added 2024/03/29 11:36 p.m.349 views

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094 XZ-Utils Vulnerability Checker and Fixer Th...

10CVSS9.9AI score0.85974EPSS
SaveExploits41
Vulnrichment
Vulnrichment
added 2024/03/27 1:14 p.m.18 views

CVE-2024-29761 WordPress WP Post Disclaimer plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Krunal Prajapati WP Post Disclaimer allows Stored XSS.This issue affects WP Post Disclaimer: from n/a through 1.0.3...

6.5CVSS6.7AI score0.00351EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/27 1:14 p.m.72 views

CVE-2024-29761

Technical details about CVE-2024-29761 (WP Post Disclaimer stored XSS in 1.0.3) are not publicly provided in the connected documents. No affected versions, impact, or fixes are detailed here. Monitor for updates.

6.5CVSS8.6AI score0.00351EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/27 12:00 a.m.10 views

PT-2024-23002 · WordPress · Krunal Prajapati Wp Post Disclaimer

Name of the Vulnerable Software and Affected Versions: Krunal Prajapati WP Post Disclaimer versions 1.0.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS, where an attacker...

6.5CVSS8.8AI score0.00351EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/03/27 12:00 a.m.10 views

WordPress Plugin WP Post Disclaimer 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.5CVSS7AI score0.00351EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/03/25 12:00 a.m.14 views

WordPress WP Post Disclaimer Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)

Software WP Post Disclaimer Type Plugin Vulnerable versions = 1.0.3 Fixed in 1.0.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29761 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 45270e929eab Credits LVT-tholv2k Required privilege...

6.5CVSS6.9AI score0.00351EPSS
SaveExploits0References2Affected Software1
GithubExploit
GithubExploit
added 2024/03/22 9:20 p.m.439 views

Exploit for Authentication Bypass Using an Alternate Path or Channel in Connectwise Screenconnect

ConnectWise ScreenConnect: Authentication Bypass Introduct...

10CVSS10AI score0.9998EPSS
SaveExploits10
GithubExploit
GithubExploit
added 2024/03/20 9:16 p.m.861 views

Exploit for Use After Free in Linux Linux_Kernel

CVE-2024-1086 Universal local privilege escalation Proof-of-C...

7.8CVSS7.8AI score0.28058EPSS
SaveExploits16
GithubExploit
GithubExploit
added 2024/03/17 8:44 a.m.289 views

Exploit for Command Injection in Nextgen Mirth_Connect

RCE vulnerability in Mirth Connect CVE-2023-37679 and CVE-202...

9.8CVSS9.7AI score0.99434EPSS
SaveExploits22
Kitploit
Kitploit
added 2024/03/11 11:30 a.m.26 views

n0Mac - Yet Another Mac Changer!!!

This script changes the MAC address of the network interface to a randomly generated address on system startup using crontab. It then uses the macchanger command to generate a list of MAC address vendors and selects one at random and then combines that vendor prefix with a randomly generated suff...

7.4AI score
SaveExploits0References1
Rows per page
Query Builder