Lucene search
+L

9117 matches found

Github Security Blog
Github Security Blog
•added 2024/12/19 11:09 a.m.•6 views

Malware in tailchat-service-openapi-generator

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/12/19 10:52 a.m.•5 views

Malware in eip-681-qr-generator

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/12/19 10:52 a.m.•7 views

Malicious code in eip-681-qr-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6d992f1267c6eb7db2bca81d0ea6f421daa4852af6172164111cf8b51ffbbe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
osv_mal
osv_mal
•added 2024/12/19 10:52 a.m.•11 views

MAL-2024-11975 Malicious code in eip-681-qr-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6d992f1267c6eb7db2bca81d0ea6f421daa4852af6172164111cf8b51ffbbe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
GithubExploit
GithubExploit
•added 2024/12/19 8:57 a.m.•582 views

Exploit for CVE-2024-9935

CVE-2024-9935 - PDF Generator Addon for Elementor Page Builder...

7.5CVSS9.4AI score0.07551EPSS
SaveExploits3
NVD
NVD
•added 2024/12/16 4:15 p.m.•39 views

CVE-2024-55999

Missing Authorization vulnerability in Marco Giannini XML Multilanguage Sitemap Generator xml-multilanguage-sitemap-generator.This issue affects XML Multilanguage Sitemap Generator: from n/a through = 2.0.6...

5.3CVSS0.00409EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/16 3:53 p.m.•20 views

CVE-2024-55999 WordPress XML Multilanguage Sitemap Generator plugin <= 2.0.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Marco Giannini XML Multilanguage Sitemap Generator xml-multilanguage-sitemap-generator.This issue affects XML Multilanguage Sitemap Generator: from n/a through = 2.0.6...

5.3CVSS8.4AI score0.00409EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/16 3:53 p.m.•50 views

CVE-2024-55999 WordPress XML Multilanguage Sitemap Generator plugin <= 2.0.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Marco Giannini XML Multilanguage Sitemap Generator xml-multilanguage-sitemap-generator.This issue affects XML Multilanguage Sitemap Generator: from n/a through = 2.0.6...

5.3CVSS0.00409EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/16 3:15 p.m.•30 views

CVE-2024-55978

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WalletStation Code Generator Pro code-generator-pro allows SQL Injection.This issue affects Code Generator Pro: from n/a through = 1.2...

9.3CVSS0.00769EPSS
SaveExploits1References1
NVD
NVD
•added 2024/12/16 3:15 p.m.•31 views

CVE-2024-54364

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in spartac Feedpress Generator feedpress-generator allows Reflected XSS.This issue affects Feedpress Generator: from n/a through = 1.2.1...

7.1CVSS0.00436EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/16 2:31 p.m.•47 views

CVE-2024-54364 WordPress Feedpress Generator plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in spartac Feedpress Generator feedpress-generator allows Reflected XSS.This issue affects Feedpress Generator: from n/a through = 1.2.1...

7.1CVSS0.00436EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/16 2:31 p.m.•74 views

CVE-2024-54364

CVE-2024-54364 is a Reflected XSS in the Feedpress Generator WordPress plugin (up to version 1.2.1) caused by improper neutralization of input during web page generation; affected product and exact root cause are stated, but no patch or exploit details are provided in the connected documents.

7.1CVSS8.4AI score0.00436EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/16 2:31 p.m.•17 views

CVE-2024-54364 WordPress Feedpress Generator plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in spartac Feedpress Generator feedpress-generator allows Reflected XSS.This issue affects Feedpress Generator: from n/a through = 1.2.1...

7.1CVSS8.4AI score0.00436EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/16 2:31 p.m.•39 views

CVE-2024-55978 WordPress Code Generator Pro plugin <= 1.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WalletStation Code Generator Pro code-generator-pro allows SQL Injection.This issue affects Code Generator Pro: from n/a through = 1.2...

9.3CVSS0.00769EPSS
SaveExploits1References1
CVE
CVE
•added 2024/12/16 2:31 p.m.•86 views

CVE-2024-55978

CVE-2024-55978 affects Code Generator Pro (WordPress plugin) up to version 1.2 and is described as an unauthenticated SQL Injection due to improper handling of input. Public coverage in connected sources references unauthenticated SQLi on Code Generator Pro and notes that the vulnerability is cur...

9.3CVSS8.4AI score0.00769EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/12/16 2:31 p.m.•17 views

CVE-2024-55978 WordPress Code Generator Pro plugin <= 1.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WalletStation Code Generator Pro code-generator-pro allows SQL Injection.This issue affects Code Generator Pro: from n/a through = 1.2...

9.3CVSS8.4AI score0.00769EPSS
SaveExploits1References1
osv_mal
osv_mal
•added 2024/12/16 1:30 p.m.•20 views

MAL-2024-11875 Malicious code in asymmetric-key-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d6f4c9090980b70af6effbd1be18a9ca571dd90a4f1cca30d44f84083dcec613 The OpenSSF Package Analysis project identified 'asymmetric-key-generator' @ 9.9.9 npm as malicious. It is considered malicious because: - The...

7.3AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/12/16 1:30 p.m.•15 views

Malicious code in asymmetric-key-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d6f4c9090980b70af6effbd1be18a9ca571dd90a4f1cca30d44f84083dcec613 The OpenSSF Package Analysis project identified 'asymmetric-key-generator' @ 9.9.9 npm as malicious. It is considered malicious because: - The...

7.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/16 12:00 a.m.•8 views

CVE-2024-55999: Missing Authorization

Missing Authorization vulnerability in Marco Giannini XML Multilanguage Sitemap Generator xml-multilanguage-sitemap-generator.This issue affects XML Multilanguage Sitemap Generator: from n/a through = 2.0.6...

5.3CVSS8.6AI score0.00409EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/16 12:00 a.m.•9 views

CVE-2024-54364: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in spartac Feedpress Generator feedpress-generator allows Reflected XSS.This issue affects Feedpress Generator: from n/a through = 1.2.1...

7.1CVSS8.6AI score0.00436EPSS
SaveExploits0References1
Rows per page
Query Builder