Lucene search
+L

568 matches found

RedhatCVE
RedhatCVE
•added 2025/08/22 8:31 a.m.•17 views

CVE-2025-28977

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThimPress WP Pipes allows Reflected XSS. This issue affects WP Pipes: from n/a through 1.4.3...

7.1CVSS5.2AI score0.00237EPSS
SaveExploits0References1
Fedora
Fedora
•added 2025/08/22 2:12 a.m.•18 views

[SECURITY] Fedora 41 Update: socat-1.8.0.3-1.fc41

Socat is a relay for bidirectional data transfer between two independent data channels. Each of these data channels may be a file, pipe, device serial line etc. or a pseudo terminal, a socket UNIX, IP4, IP6 - raw, UDP, TCP, an SSL socket, proxy CONNECT connection, a file descriptor stdin etc., th...

9.8CVSS7AI score0.00795EPSS
SaveExploits0
Fedora
Fedora
•added 2025/08/22 2:09 a.m.•17 views

[SECURITY] Fedora 42 Update: socat-1.8.0.3-1.fc42

Socat is a relay for bidirectional data transfer between two independent data channels. Each of these data channels may be a file, pipe, device serial line etc. or a pseudo terminal, a socket UNIX, IP4, IP6 - raw, UDP, TCP, an SSL socket, proxy CONNECT connection, a file descriptor stdin etc., th...

9.8CVSS7AI score0.00795EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/08/21 12:00 a.m.•13 views

SUSE SLES15 Security Update : libarchive (SUSE-SU-2025:02718-2)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02718-2 advisory. - CVE-2025-5914: Fixed double free due to an integer overflow in the archivereadformatrarseekdata function bsc1244272 -...

7.8CVSS6.3AI score0.00444EPSS
SaveExploits3References16
OSV
OSV
•added 2025/08/20 8:15 a.m.•16 views

CVE-2025-28977

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThimPress WP Pipes allows Reflected XSS. This issue affects WP Pipes: from n/a through 1.4.3...

6.1CVSS5.8AI score0.00237EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/20 8:15 a.m.•17 views

CVE-2025-28977

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThimPress WP Pipes allows Reflected XSS. This issue affects WP Pipes: from n/a through 1.4.3...

7.1CVSS0.00237EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/20 8:03 a.m.•40 views

CVE-2025-28977

CVE-2025-28977 : Affects WordPress WP Pipes

7.1CVSS5.2AI score0.00237EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/08/20 8:03 a.m.•30 views

CVE-2025-28977 WordPress WP Pipes Plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThimPress WP Pipes allows Reflected XSS. This issue affects WP Pipes: from n/a through 1.4.3...

7.1CVSS0.00237EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/20 8:03 a.m.•10 views

CVE-2025-28977 WordPress WP Pipes Plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThimPress WP Pipes allows Reflected XSS. This issue affects WP Pipes: from n/a through 1.4.3...

7.1CVSS7.2AI score0.00237EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•18 views

WordPress plugin WP Pipes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.1CVSS5.9AI score0.00237EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•19 views

PT-2025-33907

Name of the Vulnerable Software and Affected Versions: ThimPress WP Pipes versions through 1.4.3 Description: This issue involves improper neutralization of input during web page generation, leading to a Reflected Cross-site Scripting XSS condition in ThimPress WP Pipes. Recommendations: Update...

7.1CVSS5.7AI score0.00237EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•6 views

CVE-2025-28977: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThimPress WP Pipes allows Reflected XSS. This issue affects WP Pipes: from n/a through 1.4.3...

7.1CVSS5.8AI score0.00237EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•7 views

Malicious code in @malware-test-ruana-story-pipes-tigon/test-mlw3-ruana-story-pipes-tigon (npm)

The package @malware-test-ruana-story-pipes-tigon/test-mlw3-ruana-story-pipes-tigon was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•4 views

MAL-2025-8892 Malicious code in @malware-test-ruana-story-pipes-tigon/test-mlw3-ruana-story-pipes-tigon (npm)

The package @malware-test-ruana-story-pipes-tigon/test-mlw3-ruana-story-pipes-tigon was found to contain malicious code...

7.2AI score
SaveExploits0
Patchstack
Patchstack
•added 2025/08/14 11:49 a.m.•16 views

WordPress WP Pipes Plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by LVT-tholv2k in WordPress Plugin WP Pipes versions = 1.4.3...

7.1CVSS6AI score0.00237EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2025/08/14 11:15 a.m.•14 views

CVE-2025-28979

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThimPress WP Pipes allows PHP Local File Inclusion. This issue affects WP Pipes: from n/a through 1.4.3...

9.8CVSS5.8AI score0.00474EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/14 11:15 a.m.•12 views

CVE-2025-28979

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThimPress WP Pipes allows PHP Local File Inclusion. This issue affects WP Pipes: from n/a through 1.4.3...

9.8CVSS0.00474EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/14 10:34 a.m.•13 views

CVE-2025-28979 WordPress WP Pipes <= 1.4.3 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThimPress WP Pipes allows PHP Local File Inclusion. This issue affects WP Pipes: from n/a through 1.4.3...

8.1CVSS7.4AI score0.00474EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/14 10:34 a.m.•25 views

CVE-2025-28979 WordPress WP Pipes <= 1.4.3 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThimPress WP Pipes allows PHP Local File Inclusion. This issue affects WP Pipes: from n/a through 1.4.3...

8.1CVSS0.00474EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/14 10:34 a.m.•42 views

CVE-2025-28979

CVE-2025-28979 concerns the WordPress plugin WP Pipes (version &lt;= 1.4.3). The flaw is an improper control of the filename for include/require statements, enabling Local File Inclusion (LFI). Multiple sources (NVD, Red Hat advisory, CVE lists, Patchstack) confirm WP Pipes

9.8CVSS5.3AI score0.00474EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder