Lucene search
+L

6 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-31209

Malicious code in bioql PyPI...

5.3CVSS6.5AI score0.00367EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/09/27 3:47 a.m.•26 views

CVE-2025-10745

The Banhammer – Monitor Site Traffic, Block Bad Users and Bots plugin for WordPress is vulnerable to Blocking Bypass in all versions up to, and including, 3.4.8. This is due to a site-wide “secret key” being deterministically generated from a constant character set using md5 and base64encode and...

5.3CVSS5.9AI score0.00367EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/26 3:25 a.m.•25 views

CVE-2025-10745 Banhammer – Monitor Site Traffic, Block Bad Users and Bots <= 3.4.8 - Unauthenticated Protection Mechanism Bypass

The Banhammer – Monitor Site Traffic, Block Bad Users and Bots plugin for WordPress is vulnerable to Blocking Bypass in all versions up to, and including, 3.4.8. This is due to a site-wide “secret key” being deterministically generated from a constant character set using md5 and base64encode and...

5.3CVSS0.00367EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/26 12:00 a.m.•2 views

CVE-2025-10745: Use of Insufficiently Random Values

The Banhammer – Monitor Site Traffic, Block Bad Users and Bots plugin for WordPress is vulnerable to Blocking Bypass in all versions up to, and including, 3.4.8. This is due to a site-wide “secret key” being deterministically generated from a constant character set using md5 and base64encode and...

5.3CVSS5.7AI score0.00367EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2023/02/15 4:16 a.m.•8 views

SUSE CVE-2019-5885

Matrix Synapse before 0.34.0.1, when the macaroonsecretkey authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers to impersonate users...

7.5CVSS7.8AI score0.02438EPSS
SaveExploits0References3
OSV
OSV
•added 2019/03/21 4:01 p.m.•9 views

DEBIAN-CVE-2019-5885

Matrix Synapse before 0.34.0.1, when the macaroonsecretkey authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers to impersonate users...

7.5CVSS7.1AI score0.02438EPSS
SaveExploits0References1
Rows per page
Query Builder