CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

16 matches found

Kitploit•added 2026/08/28 3:32 p.m.•2 views

PoC-CVE-2025-63406

CVE-2025-63406 – Proof-of-Concept PoC für Sicherheitsforschung Dieses Repository enthält einen forschungsorientierten Proof of Concept PoC zum Sicherheitsproblem CVE-2025-63406 , das die GroupOffice -Plattform betrifft. Der Zweck dieses Projekts ist es, das Verhalten der Sicherheitslücke zu...

8.8CVSS5.8AI score0.00741EPSS

SaveExploits3

NVD•added 2026/07/21 3:16 p.m.•8 views

CVE-2026-65048

Ninja Forms plugin for WordPress versions 3.10.4 through 3.14.9 contains an unauthenticated stored cross-site scripting vulnerability in the Repeatable Fieldset feature where parseSubmissionIndex accepts arbitrary strings as submission indexes without numeric validation, and adminformelement...

9.3CVSS0.00538EPSS

SaveExploits0References3

EUVD•added 2026/07/21 2:16 p.m.•9 views

EUVD-2026-46267

9.3CVSS5AI score0.00538EPSS

SaveExploits0References3

Cvelist•added 2026/07/21 2:16 p.m.•28 views

CVE-2026-65048 Ninja Forms Unauthenticated Stored Cross-Site Scripting via Repeatable Fieldset Submission Index

9.3CVSS0.00538EPSS

SaveExploits0References3

CVE•added 2026/07/21 2:16 p.m.•24 views

CVE-2026-65048

CVE-2026-65048 affects the Ninja Forms WordPress plugin (versions 3.10.4–3.14.9). The issue arises in the Repeatable Fieldset feature where parseSubmissionIndex() accepts arbitrary strings as submission indexes without numeric validation, and admin_form_element() interpolates the index directly i...

9.3CVSS5.1AI score0.00538EPSS

SaveExploits0References3

Vulnrichment•added 2026/07/21 2:16 p.m.•9 views

CVE-2026-65048 Ninja Forms Unauthenticated Stored Cross-Site Scripting via Repeatable Fieldset Submission Index

9.3CVSS5AI score0.00538EPSS

SaveExploits0References3

GithubExploit•added 2025/11/21 7:53 p.m.•187 views

Exploit for CVE-2025-63406

CVE-2025-63406 – Security Research Proof-of-Concept PoC Thi...

8.8CVSS6.9AI score0.00741EPSS

SaveExploits3

EUVD•added 2025/10/03 8:07 p.m.•17 views

EUVD-2025-27270

Malicious code in bioql PyPI...

4.8CVSS6.3AI score0.00226EPSS

SaveExploits0References1

RedhatCVE•added 2025/09/11 1:22 a.m.•21 views

CVE-2025-43778

A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.11, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.20 allows an...

4.8CVSS5.7AI score0.00226EPSS

SaveExploits0References1

Github Security Blog•added 2025/09/09 3:30 a.m.•41 views

Liferay Portal is vulnerable to XSS attack through fieldset name in Kaleo Forms Admin

6.1CVSS5.7AI score0.00226EPSS

SaveExploits0References4Affected Software1

OSV•added 2025/09/09 3:30 a.m.•14 views

GHSA-CPG4-QCJ8-42GP Liferay Portal is vulnerable to XSS attack through fieldset name in Kaleo Forms Admin

4.8CVSS5.8AI score0.00226EPSS

SaveExploits0References4

NVD•added 2025/09/09 2:15 a.m.•14 views

CVE-2025-43778

6.1CVSS0.00226EPSS

SaveExploits0References1

OSV•added 2025/09/09 2:15 a.m.•8 views

CVE-2025-43778

6.1CVSS5.8AI score

SaveExploits0References1

Vulnrichment•added 2025/09/09 1:21 a.m.•4 views

CVE-2025-43778

4.8CVSS5.3AI score0.00226EPSS

SaveExploits0References1

CVE•added 2025/09/09 1:21 a.m.•26 views

CVE-2025-43778

The CVE-2025-43778 issue is a Stored XSS in Liferay Portal and Liferay DXP, exploitable via the name of a fieldset in Kaleo Forms Admin. Affected products/versions include Liferay Portal 7.4.0–7.4.3.132 and Liferay DXP across multiple 2024–2025 quarterly releases (e.g., 2025.Q1.0–Q1.16, 2025.Q2.0...

6.1CVSS5.3AI score0.00226EPSS

SaveExploits0References1Affected Software2

Cvelist•added 2025/09/09 1:21 a.m.•16 views

CVE-2025-43778

4.8CVSS0.00226EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by