Lucene search
+L

11388 matches found

Cvelist
Cvelist
added 2026/03/21 3:26 a.m.34 views

CVE-2026-1393 Add Google Social Profiles to Knowledge Graph Box <= 1.0 - Cross-Site Request Forgery to Settings Update

The Add Google Social Profiles to Knowledge Graph Box plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to...

4.3CVSS0.0014EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/03/21 3:26 a.m.3 views

CVE-2026-1393

The Add Google Social Profiles to Knowledge Graph Box plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to...

4.3CVSS5.7AI score0.0014EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/03/21 3:26 a.m.4 views

CVE-2026-1393 Add Google Social Profiles to Knowledge Graph Box <= 1.0 - Cross-Site Request Forgery to Settings Update

The Add Google Social Profiles to Knowledge Graph Box plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to...

4.3CVSS5.7AI score0.0014EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/03/21 12:0 a.m.15 views

WordPress plugin Add Google Social Profiles to Knowledge Graph Box 跨站请求伪造漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.3CVSS5.7AI score0.0014EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/03/21 12:0 a.m.14 views

PT-2026-26809

The Add Google Social Profiles to Knowledge Graph Box plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to...

4.3CVSS5.7AI score0.0014EPSS
SaveExploits0References4
Packet Storm News
Packet Storm News
added 2026/03/20 12:0 a.m.17 views

Memory Poisoning and Secure Multi-Agent Systems

Memory poisoning attacks for Agentic AI and multi-agent systems MAS have recently caught attention. It is partially due to the fact that Large Language Models LLMs facilitate the construction and deployment of agents. Different memory systems are being used nowadays in this context, including...

5.9AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2026/03/18 5:44 a.m.9 views

Security Bulletin: Multiple Vulnerabilities in Java affecting IBM Knowledge Catalog and IBM Master Data Management On Cloud Pak for Data

Summary Lineage, an internal component of IBM Knowledge Catalog, and the IBM Master Data Management formerly known as IBM Match 360 component within IBM Cloud Pak for Data are impacted by vulnerabilities in Java. These vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-2194...

7.5CVSS6.3AI score0.00864EPSS
SaveExploits1Affected Software1
Circl
Circl
added 2026/03/17 3:0 a.m.8 views

CVE-2026-4276

creationtimestamp| type| source ---|---|--- 2026-03-17 03:00:09+00:00| seen| https://kb.cert.org/vuls/id/624941 2026-03-18 23:07:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhem37zmxp25...

7.5CVSS5.7AI score0.00277EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/03/16 3:39 p.m.196 views

Wa3r-OffSec-Kit-

Waer's Cybersecurity Knowledge Base 50+ documents · 2...

6AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/03/14 7:47 p.m.197 views

Wa3r-OffSec-Kit

Waer's Cybersecurity Knowledge Base 50+ documents · 2...

6AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2026/03/13 4:10 p.m.7 views

SM9 Infinity-Point Ciphertext Forgery Vulnerability

Overview The current SM9 decryption implementation contains an infinity-point ciphertext forgery vulnerability. The root cause is that, during decryption, the elliptic-curve point C1 in the ciphertext is only deserialized and checked to be on the curve, but the implementation does not explicitly...

7.5CVSS5.9AI score0.00211EPSS
SaveExploits0References5Affected Software1
Circl
Circl
added 2026/03/13 3:0 a.m.4 views

CVE-2025-65587

creationtimestamp| type| source ---|---|--- 2026-03-13 03:00:07+00:00| seen| https://kb.cert.org/vuls/id/907705...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/13 12:0 a.m.10 views

PT-2026-25156

In Forgejo through 13.0.3, the attachment component allows a denial of service by uploading a multi-gigabyte file attachment e.g., to be associated with an issue or a release...

5.7AI score0.00471EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2026/03/11 7:5 p.m.14 views

Security Bulletin: Multiple Security vulnerabilities affecting IBM Knowledge Catalog Premium Cartridge

Summary Multiple security vulnerabilities impacting IBM Knowledge Catalog Premium Cartridge. These vulnerabilities had been addressed and customers should update to the recommended version of the product at the earliest opportunity. Vulnerability Details CVEID:CVE-2024-38816 DESCRIPTION:...

9.8CVSS6.7AI score0.54862EPSS
SaveExploits14Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/11 12:0 a.m.23 views

PT-2026-41201

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.0 Description An authorization bypass allows any authenticated user to permanently delete files owned by other users. This occurs when a target file is referenced in any shared chat, as the has access to file...

9CVSS5.8AI score0.0027EPSS
SaveExploits1References16
OSV
OSV
added 2026/03/10 6:28 p.m.8 views

GO-2026-4640 WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora...

5.3CVSS5.8AI score0.00222EPSS
SaveExploits1References1
Microsoft Security Update
Microsoft Security Update
added 2026/03/10 5:0 p.m.15 views

2026-03 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5078752)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

5.8AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2026/03/10 5:0 p.m.678 views

2026-03 .NET 8.0.25 Security Update for x64 Client (KB5081277)

2026-03 .NET 8.0.25 Security Update for x64 Client KB5081277...

5.8AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2026/03/10 5:0 p.m.87 views

2026-03 .NET 10.0.4 Security Update for x64 Client (KB5081276)

2026-03 .NET 10.0.4 Security Update for x64 Client KB5081276...

5.8AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2026/03/10 5:0 p.m.29 views

2026-03 Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5078885)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

5.8AI score
SaveExploits0
Rows per page
Query Builder