Lucene search
+L

1853 matches found

Kitploit
Kitploit
added 2023/03/22 11:30 a.m.54 views

PortexAnalyzerGUI - Graphical Interface For PortEx, A Portable Executable And Malware Analysis Library

Graphical interface for PortEx, a Portable Executable and Malware Analysis Library Download Releases page Features Header information from: MSDOS Header, Rich Header, COFF File Header, Optional Header, Section Table PE Structures: Import Section, Resource Section, Export Section, Debug Section...

7AI score
SaveExploits0References4
CNNVD
CNNVD
added 2023/03/06 12:00 a.m.8 views

SketchSVG 代码注入漏洞

eBay SketchSVG is eBay's tool for extracting icons from Sketch files and compressing them into SVGs. A security vulnerability exists in SketchSVG that stems from vulnerability to arbitrary code injection when shell.exec is called...

7.8CVSS7.6AI score0.00405EPSS
SaveExploits1References4
OSV
OSV
added 2023/03/02 6:15 p.m.4 views

CVE-2023-1155

The Cost Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ndccmetaboxccpriceicon parameter in versions up to, and including, 1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-lev...

5.4CVSS6.8AI score0.00476EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/03/02 12:00 a.m.9 views

PT-2023-20663 · Unknown · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 6.2-milestone-1 through 14.8 XWiki Platform versions 14.4 through 14.4.5 XWiki Platform versions 13.10 through 13.10.9 Description: XWiki Platform is a generic wiki platform where, starting in version 6.2-milestone-1,...

9.9CVSS8.6AI score0.01107EPSS
SaveExploits1References10
OSV
OSV
added 2023/02/28 3:15 p.m.11 views

CVE-2023-23983

Cross-Site Request Forgery CSRF vulnerability in wpdevart Responsive Vertical Icon Menu plugin = 1.5.8 can lead to theme deletion...

5.4CVSS6.1AI score0.00228EPSS
SaveExploits0References1
NVD
NVD
added 2023/02/28 3:15 p.m.23 views

CVE-2023-23983

Cross-Site Request Forgery CSRF vulnerability in wpdevart Responsive Vertical Icon Menu plugin = 1.5.8 can lead to theme deletion...

5.4CVSS5.5AI score0.00228EPSS
SaveExploits0References1
Prion
Prion
added 2023/02/28 3:15 p.m.29 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in wpdevart Responsive Vertical Icon Menu plugin = 1.5.8 can lead to theme deletion...

5.8CVSS5.6AI score0.00228EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/02/28 2:36 p.m.68 views

CVE-2023-23983

The CVE-2023-23983 entry describes a Cross-Site Request Forgery (CSRF) in the WordPress plugin wpdevart Responsive Vertical Icon Menu (

5.4CVSS5.5AI score0.00228EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/02/28 12:00 a.m.12 views

WordPress plugin Responsive Vertical Icon Menu 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in WordPress plugin...

5.4CVSS5.5AI score0.00228EPSS
SaveExploits0References2
Fedora
Fedora
added 2023/02/25 3:47 a.m.20 views

[SECURITY] Fedora 37 Update: plasma-sdk-5.27.1-1.fc37

Plasma SDK contains the following tools for Plasma-related development: - CuttleFish - icon theme browser - EngineExplorer - tool to browse and interact with data engines - PlasmoidViewer - an isolated Plasma environment for testing applets - ThemeExplorer - shows all components of a widget theme...

2.1AI score
SaveExploits0
wpexploit
wpexploit
added 2023/02/20 12:00 a.m.388 views

FluentSMTP < 2.2.3 - Stored XSS via Email Logs

The plugin does not sanitize or escape email content, making it vulnerable to stored cross-site scripting attacks XSS when an administrator views the email logs. This exploit requires other plugins to enable users to send emails with unfiltered HTML. XSS Payload : Steps to reproduce: 1. Install...

5.4CVSS5.7AI score0.00507EPSS
SaveExploits2
SUSE CVE
SUSE CVE
added 2023/02/15 6:20 a.m.6 views

SUSE CVE-2004-0761

Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote attackers to use certain redirect sequences to spoof the security lock icon that makes a web page appear to be encrypted...

5CVSS6.7AI score0.01572EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
added 2023/02/15 6:20 a.m.7 views

SUSE CVE-2004-0788

Integer overflow in the ICO image decoder for 1 gdk-pixbuf before 0.22 and 2 gtk2 before 2.2.4 allows remote attackers to cause a denial of service application crash via a crafted ICO file...

5CVSS7AI score0.05917EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 6:19 a.m.11 views

SUSE CVE-2005-0143

Firefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads a binary file from a trusted site, which could facilitate phishing attacks...

2.6CVSS6.8AI score0.01006EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 6:19 a.m.7 views

SUSE CVE-2005-0144

Firefox before 1.0 and Mozilla before 1.7.5 display the secure site lock icon when a view-source: URL references a secure SSL site while an insecure page is being loaded, which could facilitate phishing attacks...

2.6CVSS6.6AI score0.01006EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 6:18 a.m.7 views

SUSE CVE-2005-0593

Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote attackers to spoof the SSL "secure site" lock icon via 1 a web site that does not finish loading, which shows the lock of the previous site, 2 a non-HTTP server that uses SSL, which causes the lock to be displayed when the SSL handshake ...

2.6CVSS6.5AI score0.01662EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 6:11 a.m.7 views

SUSE CVE-2007-3126

Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service crash via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237...

5CVSS6.8AI score0.02852EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:07 a.m.8 views

SUSE CVE-2008-4198

Opera before 9.52, when rendering an http page that has loaded an https page into a frame, displays a padlock icon and offers a security information dialog reporting a secure connection, which might allow remote attackers to trick a user into performing unsafe actions on the http page...

5CVSS6.8AI score0.02842EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:58 a.m.9 views

SUSE CVE-2010-2713

The vtesequencehandlerwindowmanipulation function in vteseq.c in libvte aka libvte9 in VTE 0.25.1 and earlier, as used in gnome-terminal, does not properly handle escape sequences, which allows remote attackers to execute arbitrary commands or obtain potentially sensitive information via a 1 wind...

6.8CVSS7.5AI score0.03343EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:57 a.m.6 views

SUSE CVE-2010-3077

Cross-site scripting XSS vulnerability in util/iconbrowser.php in the Horde Application Framework before 3.3.9 allows remote attackers to inject arbitrary web script or HTML via the subdir parameter...

4.3CVSS5.8AI score0.03893EPSS
SaveExploits2References3
Rows per page
Query Builder