Lucene search
+L

783 matches found

Positive Technologies
Positive Technologies
added 2025/08/14 12:0 a.m.10 views

PT-2025-33182 · WordPress · Biscia7 Hide Text Shortcode

Name of the Vulnerable Software and Affected Versions: biscia7 Hide Text Shortcode versions through 1.1 Description: Improper neutralization of input during web page generation allows for stored cross-site scripting XSS. Recommendations: Update biscia7 Hide Text Shortcode to a version later than...

6.5CVSS5.7AI score0.0021EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/14 12:0 a.m.9 views

Debian dsa-5977 : aide - security update

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5977 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5977-1 [email protected]...

6.2CVSS7.6AI score0.0023EPSS
SaveExploits2References7
Patchstack
Patchstack
added 2025/08/13 1:49 p.m.8 views

WordPress Hide Text Shortcode plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin Hide Text Shortcode versions = 1.1...

6.5CVSS5.9AI score0.0021EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/07/30 12:0 a.m.7 views

The Fintech Open Source Foundation GitProxy 安全漏洞

The Fintech Open Source Foundation GitProxy is a The Fintech Open Source Foundation Foundation deployment of custom push protections and policies on top of Git. A security vulnerability exists in The Fintech Open Source Foundation GitProxy 1.19.1 and earlier versions, which stems from the...

7CVSS6.5AI score0.00481EPSS
SaveExploits1References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/07/26 11:15 a.m.7 views

Malicious code in dva-loading-hide-rce (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 236bea5646a5f41a1a00049315bf89b5d58d75f522e1d1dbc8bbc86d85e10919 The OpenSSF Package Analysis project identified 'dva-loading-hide-rce...

7.1AI score
SaveExploits0
OSV
OSV
added 2025/07/26 11:15 a.m.8 views

MAL-2025-6251 Malicious code in dva-loading-hide-rce (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 236bea5646a5f41a1a00049315bf89b5d58d75f522e1d1dbc8bbc86d85e10919 The OpenSSF Package Analysis project identified 'dva-loading-hide-rce...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2025/07/23 12:0 a.m.5 views

WordPress WP Post Hide Cross-Site Request Forgery Vulnerability

WordPress WP Post Hide is a plugin for controlling the visibility of WordPress posts, hiding the display of specific posts in different locations such as the home page, category pages, and search results pages. WordPress WP Post Hide suffers from a cross-site request forgery vulnerability, which...

4.3CVSS6.7AI score0.00128EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/21 9:4 a.m.14 views

SUSE-SU-2025:02428-1 Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059174 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow bsc1234854. - CVE-2022-49465: blk-throttle: Set BIOTHROTTLED when bio has been throttled bsc1238920. - CVE-2024-53214:...

9.1CVSS6.6AI score0.00544EPSS
SaveExploits0References17
Packet Storm News
Packet Storm News
added 2025/07/20 12:0 a.m.12 views

Data-Plane Telemetry to Mitigate Long-Distance BGP Hijacks

Poor security of Internet routing enables adversaries to divert user data through unintended infrastructures hijack. Of particular concern -- and the focus of this paper -- are cases where attackers reroute domestic traffic through foreign countries, exposing it to surveillance, bypassing legal...

6.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/07/18 10:59 a.m.10 views

CVE-2025-54042

Cross-Site Request Forgery CSRF vulnerability in Xfinitysoft WP Post Hide wp-post-hide allows Cross Site Request Forgery.This issue affects WP Post Hide: from n/a through = 1.0.9...

4.3CVSS5.9AI score0.00128EPSS
SaveExploits0References1
NVD
NVD
added 2025/07/16 11:15 a.m.20 views

CVE-2025-54042

Cross-Site Request Forgery CSRF vulnerability in Xfinitysoft WP Post Hide wp-post-hide allows Cross Site Request Forgery.This issue affects WP Post Hide: from n/a through = 1.0.9...

4.3CVSS0.00128EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/07/16 10:36 a.m.18 views

CVE-2025-54042 WordPress WP Post Hide plugin <= 1.0.9 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Xfinitysoft WP Post Hide wp-post-hide allows Cross Site Request Forgery.This issue affects WP Post Hide: from n/a through = 1.0.9...

4.3CVSS0.00128EPSS
SaveExploits0References1
CVE
CVE
added 2025/07/16 10:36 a.m.25 views

CVE-2025-54042

CVE-2025-54042 concerns a Cross-Site Request Forgery in the WordPress plugin WP Post Hide (xfinitysoft). The disclosure states the vulnerability affects WP Post Hide versions n/a through 1.0.9 and is exploitable via CSRF on authenticated users. CVSS metrics in the Initial document indicate a Medi...

4.3CVSS5.9AI score0.00128EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/07/16 12:0 a.m.7 views

PT-2025-29763 · WordPress · Wp Hide Post

Name of the Vulnerable Software and Affected Versions: xfinitysoft WP Post Hide versions n/a through 1.0.9 Description: A Cross-Site Request Forgery CSRF issue exists in xfinitysoft WP Post Hide, allowing attackers to perform actions on behalf of an authenticated user. Recommendations: Update...

4.3CVSS6.4AI score0.00128EPSS
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/07/15 7:54 a.m.8 views

Malicious code in paypal-invoicing (npm)

Malicious package. Collects system info, exfiltrates data to hardcoded IP, runs code during preinstall, and attempts to hide activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd66aabb4b40f49dc7ef8bda42a33f705beb6def65601b8fd3025c7e055bc2e6 Any computer that...

7.1AI score
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/06/29 2:26 p.m.6 views

CVE-2025-53267

Cross-Site Request Forgery CSRF vulnerability in Aftab Husain Hide Admin Bar From Front End hide-admin-bar-from-front-end allows Cross Site Request Forgery.This issue affects Hide Admin Bar From Front End: from n/a through = 1.0.0...

4.3CVSS5.9AI score0.00132EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/27 2:15 p.m.12 views

CVE-2025-53267

Cross-Site Request Forgery CSRF vulnerability in Aftab Husain Hide Admin Bar From Front End hide-admin-bar-from-front-end allows Cross Site Request Forgery.This issue affects Hide Admin Bar From Front End: from n/a through = 1.0.0...

4.3CVSS0.00132EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/27 12:0 a.m.22 views

WordPress plugin Hide Admin Bar From Front End 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in WordPress...

4.3CVSS6.4AI score0.00132EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/27 12:0 a.m.22 views

WordPress plugin Contact Form 7 Hide Success Message security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.3CVSS5.8AI score0.00257EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
added 2025/06/23 12:0 a.m.8 views

Stegano 2.0.0

Stegano is a basic Python Steganography module. Stegano implements two methods of hiding: using the red portion of a pixel to hide ASCII messages, and using the Least Significant Bit LSB technique. It is possible to use a more advanced LSB method based on integers sets. The sets Sieve of...

6.9AI score
SaveExploits0
Rows per page
Query Builder