Lucene search
+L

11792 matches found

EUVD
EUVD
•added 2026/03/21 6:30 a.m.•19 views

EUVD-2026-14007

The Add Google Social Profiles to Knowledge Graph Box plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to...

4.3CVSS5.7AI score0.0014EPSS
SaveExploits0References4
NVD
NVD
•added 2026/03/21 4:16 a.m.•10 views

CVE-2026-1393

The Add Google Social Profiles to Knowledge Graph Box plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to...

4.3CVSS0.0014EPSS
SaveExploits0References3
CVE
CVE
•added 2026/03/21 3:26 a.m.•28 views

CVE-2026-1393

The CVE-2026-1393 entry documents a CSRF vulnerability in the WordPress plugin “Add Google Social Profiles to Knowledge Graph Box” (versions up to 1.0). The root cause is missing nonce validation on the settings update functionality, allowing unauthenticated attackers to update the plugin’s Knowl...

4.3CVSS5.7AI score0.0014EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/03/21 3:26 a.m.•48 views

CVE-2026-1393 Add Google Social Profiles to Knowledge Graph Box <= 1.0 - Cross-Site Request Forgery to Settings Update

The Add Google Social Profiles to Knowledge Graph Box plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to...

4.3CVSS0.0014EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/03/21 3:26 a.m.•5 views

CVE-2026-1393

The Add Google Social Profiles to Knowledge Graph Box plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to...

4.3CVSS5.7AI score0.0014EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/03/21 3:26 a.m.•7 views

CVE-2026-1393 Add Google Social Profiles to Knowledge Graph Box <= 1.0 - Cross-Site Request Forgery to Settings Update

The Add Google Social Profiles to Knowledge Graph Box plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to...

4.3CVSS5.7AI score0.0014EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/03/21 12:00 a.m.•22 views

WordPress plugin Add Google Social Profiles to Knowledge Graph Box 跨站请求伪造漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.3CVSS5.7AI score0.0014EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/03/21 12:00 a.m.•19 views

PT-2026-26809

The Add Google Social Profiles to Knowledge Graph Box plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to...

4.3CVSS5.7AI score0.0014EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/21 12:00 a.m.•1 views

CVE-2026-1393: Cross-Site Request Forgery (CSRF)

The Add Google Social Profiles to Knowledge Graph Box plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to...

4.3CVSS5.5AI score0.0014EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2026/03/20 12:00 a.m.•22 views

Memory Poisoning and Secure Multi-Agent Systems

Memory poisoning attacks for Agentic AI and multi-agent systems MAS have recently caught attention. It is partially due to the fact that Large Language Models LLMs facilitate the construction and deployment of agents. Different memory systems are being used nowadays in this context, including...

5.9AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2026/03/18 5:44 a.m.•14 views

Security Bulletin: Multiple Vulnerabilities in Java affecting IBM Knowledge Catalog and IBM Master Data Management On Cloud Pak for Data

Summary Lineage, an internal component of IBM Knowledge Catalog, and the IBM Master Data Management formerly known as IBM Match 360 component within IBM Cloud Pak for Data are impacted by vulnerabilities in Java. These vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-2194...

7.5CVSS6.3AI score0.0097EPSS
SaveExploits1Affected Software1
Circl
Circl
•added 2026/03/17 3:00 a.m.•16 views

CVE-2026-4276

creationtimestamp| type| source ---|---|--- 2026-03-17 03:00:09+00:00| seen| https://kb.cert.org/vuls/id/624941 2026-03-18 23:07:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhem37zmxp25...

7.5CVSS5.7AI score0.00487EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2026/03/16 3:39 p.m.•203 views

Wa3r-OffSec-Kit-

Waer's Cybersecurity Knowledge Base 50+ documents · 2...

6AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2026/03/14 7:47 p.m.•208 views

Wa3r-OffSec-Kit

Waer's Cybersecurity Knowledge Base 50+ documents · 2...

6AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2026/03/13 4:10 p.m.•19 views

SM9 Infinity-Point Ciphertext Forgery Vulnerability

Overview The current SM9 decryption implementation contains an infinity-point ciphertext forgery vulnerability. The root cause is that, during decryption, the elliptic-curve point C1 in the ciphertext is only deserialized and checked to be on the curve, but the implementation does not explicitly...

7.5CVSS5.9AI score0.0023EPSS
SaveExploits0References5Affected Software1
Circl
Circl
•added 2026/03/13 3:00 a.m.•9 views

CVE-2025-65587

creationtimestamp| type| source ---|---|--- 2026-03-13 03:00:07+00:00| seen| https://kb.cert.org/vuls/id/907705...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/13 12:00 a.m.•15 views

PT-2026-25156

In Forgejo through 13.0.3, the attachment component allows a denial of service by uploading a multi-gigabyte file attachment e.g., to be associated with an issue or a release...

5.7AI score0.00471EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
•added 2026/03/11 7:05 p.m.•22 views

Security Bulletin: Multiple Security vulnerabilities affecting IBM Knowledge Catalog Premium Cartridge

Summary Multiple security vulnerabilities impacting IBM Knowledge Catalog Premium Cartridge. These vulnerabilities had been addressed and customers should update to the recommended version of the product at the earliest opportunity. Vulnerability Details CVEID:CVE-2024-38816 DESCRIPTION:...

9.8CVSS6.7AI score0.5604EPSS
SaveExploits14Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/11 12:00 a.m.•0 views

CVE-2026-32110: Server-Side Request Forgery (SSRF)

SiYuan is a personal knowledge management system. Prior to 3.6.0, the /api/network/forwardProxy endpoint allows authenticated users to make arbitrary HTTP requests from the server. The endpoint accepts a user-controlled URL and makes HTTP requests to it, returning the full response body and...

8.3CVSS6AI score0.00386EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/03/11 12:00 a.m.•31 views

PT-2026-41201

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.0 Description An authorization bypass allows any authenticated user to permanently delete files owned by other users. This occurs when a target file is referenced in any shared chat, as the has access to file...

9CVSS5.8AI score0.00393EPSS
SaveExploits1References16
Rows per page
Query Builder