Lucene search
+L

15972 matches found

Cvelist
Cvelist
•added 2025/01/16 8:07 p.m.•30 views

CVE-2025-23791 WordPress Horizontal Line Shortcode Plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mikakaltoft Horizontal Line Shortcode horizontal-line-shortcode allows Stored XSS.This issue affects Horizontal Line Shortcode: from n/a through = 1.0...

6.5CVSS0.00383EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/16 6:42 p.m.•13 views

WordPress Horizontal Line Shortcode Plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Horizontal Line Shortcode versions = 1.0...

6.5CVSS8.4AI score0.00383EPSS
SaveExploits0Affected Software1
osv_clsa
osv_clsa
•added 2025/01/16 10:56 a.m.•25 views

CLSA-2025-1737024983 vim: Fix of CVE-2023-0288

CVE-2023-0288: prevent the cursor from moving to line zero to fix invalid memory access with folding and using "L"...

7.8CVSS7.3AI score0.00495EPSS
SaveExploits1References1
GithubExploit
GithubExploit
•added 2025/01/16 6:07 a.m.•415 views

Exploit for Double Free in Openbsd Openssh

OpenSSH Vulnerability Testing Tool for CVE-2023-25136 This re...

6.5CVSS7.3AI score0.89792EPSS
SaveExploits10
GithubExploit
GithubExploit
•added 2025/01/16 12:14 a.m.•352 views

Exploit for Server-Side Request Forgery in Microsoft

SSRF Exploit Script This repository contains a script designe...

8.8CVSS8.9AI score0.28064EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2025/01/16 12:00 a.m.•25 views

Juniper Networks Junos OS Command Line DoS

The vulnerability of the command line interface of Juniper Networks Junos OS models SRX1500, SRX4100, and SRX4200 is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to trigger service failures remotely...

5.5CVSS6.8AI score0.00154EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/16 12:00 a.m.•4 views

CVE-2025-23791: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mikakaltoft Horizontal Line Shortcode horizontal-line-shortcode allows Stored XSS.This issue affects Horizontal Line Shortcode: from n/a through = 1.0...

6.5CVSS8.5AI score0.00383EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/16 12:00 a.m.•13 views

WordPress plugin Horizontal Line Shortcode Cross-site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.5CVSS8.1AI score0.00383EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/16 12:00 a.m.•4 views

PT-2025-5091

Name of the Vulnerable Software and Affected Versions RocaPress Horizontal Line Shortcode versions n/a through 1.0 Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means an attacker can inject...

6.5CVSS8.1AI score0.00383EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/01/15 12:00 a.m.•31 views

Red Hat FreeIPA security vulnerabilities

Red Hat FreeIPA is a suite of integrated security information management solutions from Red Hat USA. The product provides identity management, policy management, and audit management IPA capabilities for Linux and Unix computer networks. A security vulnerability exists in Red Hat FreeIPA that...

5.5CVSS5.9AI score0.00231EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2025/01/14 8:15 p.m.•14 views

DEBIAN-CVE-2024-53263

Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the git-credential1 command without checking for embedded line-ending control characters, and then sends any credentials it receives back fr...

8.5CVSS7.3AI score0.01063EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2025/01/14 8:15 p.m.•24 views

AZL-55644 CVE-2024-53263 affecting package git-lfs for versions less than 3.5.1-4

Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the git-credential1 command without checking for embedded line-ending control characters, and then sends any credentials it receives back fr...

8.5CVSS7.3AI score0.01063EPSS
SaveExploits0References1
osv_usn
osv_usn
•added 2025/01/14 7:55 p.m.•30 views

USN-7207-1 git vulnerabilities

It was discovered that Git incorrectly handled certain URLs when asking for credentials. An attacker could possibly use this issue to mislead the user into typing passwords for trusted sites that would then be sent to untrusted sites instead. CVE-2024-50349 It was discovered that git incorrectly...

7.5CVSS6.6AI score0.01035EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/01/14 7:33 p.m.•15 views

CVE-2024-53263 Git LFS permits exfiltration of credentials via crafted HTTP URLs

Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the git-credential1 command without checking for embedded line-ending control characters, and then sends any credentials it receives back fr...

8.5CVSS7.3AI score0.01063EPSS
SaveExploits0References3
Mend
Mend
•added 2025/01/14 7:33 p.m.•9 views

CVE-2024-53263

Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the "git-credential1" command without checking for embedded line-ending control characters, and then sends any credentials it receives back...

8.5CVSS7.3AI score0.01063EPSS
SaveExploits0References9
osv_bit
osv_bit
•added 2025/01/14 7:19 p.m.•76 views

BIT-PHP-MIN-2024-4577 Argument Injection in PHP-CGI

In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may...

9.8CVSS8.1AI score0.99987EPSS
SaveExploits77References24
osv_cve
osv_cve
•added 2025/01/14 6:15 p.m.•13 views

CVE-2025-21224

Windows Line Printer Daemon LPD Service Remote Code Execution Vulnerability...

8.1CVSS8.2AI score0.01936EPSS
SaveExploits0References3
NVD
NVD
•added 2025/01/14 6:15 p.m.•24 views

CVE-2025-21224

Windows Line Printer Daemon LPD Service Remote Code Execution Vulnerability...

8.1CVSS0.01936EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/01/14 6:04 p.m.•55 views

CVE-2025-21224 Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability

...

8.1CVSS0.01936EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/14 6:04 p.m.•143 views

CVE-2025-21224

CVE-2025-21224 refers to a Windows Line Printer Daemon (LPD) Service remote code execution vulnerability. The primary connected sources indicate an attacker could exploit a network remote vector to achieve code execution with no user interaction, with a CVSSv3.1 base score of 8.1 (AV:N/AC:H/PR:N/...

8.1CVSS8.2AI score0.01936EPSS
SaveExploits0References3Affected Software8
Rows per page
Query Builder