Lucene search
+L

1737 matches found

OSV
OSV
•added 2024/11/25 1:32 a.m.•15 views

MAL-2024-10934 Malicious code in imon-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3e79b6d6a40bed6caf15c5c2efc6da41d06f25fb082db4b3d3964112a091874 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/25 1:32 a.m.•10 views

Malicious code in imon-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3e79b6d6a40bed6caf15c5c2efc6da41d06f25fb082db4b3d3964112a091874 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/25 1:29 a.m.•6 views

Malicious code in delta-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7d26055bd3522d0ee0e99be091c1c9091ebc165f47a807c39261ddbac77ad67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/11/25 1:29 a.m.•3 views

Malware in delta-downloader

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/11/25 1:29 a.m.•9 views

MAL-2024-10922 Malicious code in delta-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7d26055bd3522d0ee0e99be091c1c9091ebc165f47a807c39261ddbac77ad67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/25 1:22 a.m.•6 views

Malicious code in alif-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09c054a9fdb7c2b20ed0b7838086b67063d75062d681e05edfeb1c377ea19a67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/11/25 1:22 a.m.•2 views

Malware in alif-media-downloader

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/11/25 1:22 a.m.•18 views

MAL-2024-10915 Malicious code in alif-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09c054a9fdb7c2b20ed0b7838086b67063d75062d681e05edfeb1c377ea19a67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/23 12:00 a.m.•24 views

PT-2024-16562 · WordPress · Mp3 Sticky Player

Name of the Vulnerable Software and Affected Versions: MP3 Sticky Player plugin for WordPress versions up to, and including, 8.0 Description: The MP3 Sticky Player plugin for WordPress is vulnerable to Directory Traversal via the content/downloader.php file. This makes it possible for...

7.5CVSS9.2AI score0.00943EPSS
SaveExploits0References7
OSV
OSV
•added 2024/11/19 5:15 p.m.•15 views

CVE-2024-51875

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nazmul Ahsan MDC YouTube Downloader allows DOM-Based XSS.This issue affects MDC YouTube Downloader: from n/a through 3.0.0...

5.4CVSS7.3AI score0.00312EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/19 5:15 p.m.•40 views

CVE-2024-51875

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nazmul Ahsan MDC YouTube Downloader mdc-youtube-downloader allows DOM-Based XSS.This issue affects MDC YouTube Downloader: from n/a through = 3.0.0...

6.5CVSS0.00312EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/19 5:15 p.m.•16 views

CVE-2024-51654

Cross-Site Request Forgery CSRF vulnerability in Eric Allen APK Downloader apk-downloader allows Stored XSS.This issue affects APK Downloader: from n/a through = 1.0.0...

7.1CVSS0.00215EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/19 4:32 p.m.•83 views

CVE-2024-51654

CVE-2024-51654 affects the WordPress APK Downloader plugin (versions

7.1CVSS5.9AI score0.00215EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/19 4:32 p.m.•38 views

CVE-2024-51654 WordPress APK Downloader plugin <= 1.0.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Eric Allen APK Downloader apk-downloader allows Stored XSS.This issue affects APK Downloader: from n/a through = 1.0.0...

7.1CVSS0.00215EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/19 4:32 p.m.•22 views

CVE-2024-51654 WordPress APK Downloader plugin <= 1.0.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Eric Allen APK Downloader apk-downloader allows Stored XSS.This issue affects APK Downloader: from n/a through = 1.0.0...

7.1CVSS5.9AI score0.00215EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/19 4:31 p.m.•51 views

CVE-2024-51875 WordPress MDC YouTube Downloader plugin <= 3.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nazmul Ahsan MDC YouTube Downloader mdc-youtube-downloader allows DOM-Based XSS.This issue affects MDC YouTube Downloader: from n/a through = 3.0.0...

6.5CVSS0.00312EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/19 4:31 p.m.•10 views

CVE-2024-51875 WordPress MDC YouTube Downloader plugin <= 3.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nazmul Ahsan MDC YouTube Downloader allows DOM-Based XSS.This issue affects MDC YouTube Downloader: from n/a through 3.0.0...

6.5CVSS6.9AI score0.00312EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/19 4:31 p.m.•56 views

CVE-2024-51875

CVE-2024-51875 is a DOM-based Cross-Site Scripting vulnerability in the WordPress plugin “MDC YouTube Downloader” (MDC YouTube Downloader) affecting versions up to 3.0.0. The issue stems from improper input neutralization during web page generation, enabling DOM-based XSS. Public records describe...

6.5CVSS7.2AI score0.00312EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/11/19 12:00 a.m.•28 views

WordPress plugin MDC YouTube Downloader 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

6.5CVSS7.7AI score0.00312EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/19 12:00 a.m.•16 views

WordPress plugin APK Downloade 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

7.1CVSS6.5AI score0.00215EPSS
SaveExploits0References1
Rows per page
Query Builder