Lucene search
+L

11723 matches found

OSV
OSV
added 2020/05/29 12:15 a.m.5 views

CVE-2020-13693

An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Registration is enabled...

9.8CVSS7.3AI score0.43879EPSS
SaveExploits7References4
NVD
NVD
added 2020/05/29 12:15 a.m.30 views

CVE-2020-13693

An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Registration is enabled...

9.8CVSS9.5AI score0.43879EPSS
SaveExploits7References4
Prion
Prion
added 2020/05/29 12:15 a.m.33 views

Privilege escalation

An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Registration is enabled...

7.5CVSS9.4AI score0.43879EPSS
SaveExploits7References4Affected Software1
CVE
CVE
added 2020/05/28 11:54 p.m.234 views

CVE-2020-13693

The CVE-2020-13693 entry concerns the WordPress bbPress plugin before 2.6.5, where an unauthenticated privilege-escalation vulnerability exists when New User Registration is enabled. The issue stems from a privilege escalation path in bbPress that allows attackers without authentication to gain h...

9.8CVSS9.4AI score0.43879EPSS
SaveExploits7References4Affected Software1
Cvelist
Cvelist
added 2020/05/28 11:54 p.m.45 views

CVE-2020-13693

An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Registration is enabled...

9.6AI score0.43879EPSS
SaveExploits7References4
WPVulnDB
WPVulnDB
added 2020/05/28 12:00 a.m.33 views

bbPress < 2.6.5 - Unauthenticated Privilege Escalation when New User Registration enabled

Raphael Karger discovered an unauthenticated privilege escalation issue when new user registration is enabled...

7.5CVSS3.4AI score0.43879EPSS
SaveExploits7References2Affected Software1
zdt
zdt
added 2020/05/27 12:00 a.m.42 views

Online Marriage Registration System 1.0 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Online Marriage Registration System 1.0 - Persistent Cross-Site Scripting Exploit Author: that faceless coderInveteck Global Vendor Homepage: https://phpgurukul.com/ Software Link:...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2020/05/27 12:00 a.m.223 views

Online Marriage Registration System 1.0 Cross Site Scripting

Exploit Title: Online Marriage Registration System 1.0 - Persistent Cross-Site Scripting Google Dork: N/A Date: 2020-05-26 Exploit Author: that faceless coderInveteck Global Vendor Homepage: https://phpgurukul.com/ Software Link:...

0.2AI score
SaveExploits0
Exploit DB
Exploit DB
added 2020/05/27 12:00 a.m.556 views

Online Marriage Registration System 1.0 - Persistent Cross-Site Scripting

Exploit Title: Online Marriage Registration System 1.0 - Persistent Cross-Site Scripting Google Dork: N/A Date: 2020-05-26 Exploit Author: that faceless coderInveteck Global Vendor Homepage: https://phpgurukul.com/ Software Link:...

5.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/05/26 12:00 a.m.12 views

The vulnerability of the Red Hat Quay container registry, related to insufficient protection of registration data, allows a violator to circumvent the container protection.

The vulnerability of the Red Hat Quay container registry relates to insufficient protection for registration data. Exploiting this vulnerability could allow a attacker to circumvent the container protection mechanisms...

6.4CVSS6.3AI score0.00271EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/19 12:00 a.m.9 views

The vulnerability of the Ansible configuration management system lies in the ability to disclose information through registration files, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Ansible configuration management system is related to the exposure of information through registration files. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.5AI score0.00513EPSS
SaveExploits0References21Affected Software11
OSV
OSV
added 2020/05/17 1:15 a.m.9 views

CVE-2020-13125

An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13126. Unauthenticated attackers can create users with the Subscriber role even if registration is disabled...

6.5CVSS6.9AI score0.02307EPSS
SaveExploits0References2
CVE
CVE
added 2020/05/17 12:39 a.m.191 views

CVE-2020-13125

The CVE-2020-13125 entry concerns the Ultimate Addons for Elementor WordPress plugin (

7.2CVSS7.7AI score0.02307EPSS
SaveExploits0References2Affected Software1
Hacker One
Hacker One
added 2020/05/15 12:10 p.m.10 views

U.S. Dept Of Defense: Register with non accepted email types on https://███████

Summary Hello, this is a new report from 874457. Thank you @agent-l8 for your advice, really appreciate it. This report is about register with non-accepted email types on https://███████ Steps to Reproduce 1. Register With Not Accepted Email Types 2. Go to https://█████████ 3. Fill all the field...

0.8AI score
SaveExploits0
Carbon Black Blog
Carbon Black Blog
added 2020/05/12 2:00 p.m.35 views

Kicking off Developer Day 2020

Developer Day 2020 kicks off today with seven on-demand sessions for more than 2,600 registrants. This is the first time Developer Day has been held in a virtual setting and the VMware Carbon Black team is excited to welcome the largest group of developers we have ever had in attendance. With eig...

0.4AI score
SaveExploits0
Veracode
Veracode
added 2020/05/12 2:55 a.m.12 views

Regular Expression Denial Of Service (ReDoS)

hubot-help is vulnerable to regular expression denial of service ReDoS. The attack is possible due to lack of properly handling of user inputs for command name registration and regex with wildcard characters, triggering a backtracking behavior against the current set of commands registered and...

3.9AI score
SaveExploits0
Veracode
Veracode
added 2020/05/08 2:08 a.m.36 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A memory leak in sitinitnet in net/ipv6/sit.c when registernetdev fails to register sitn-fbtunneldev allows an attacker to crash the system...

4.7CVSS4.4AI score0.00454EPSS
SaveExploits1References7Affected Software2
CNVD
CNVD
added 2020/05/08 12:00 a.m.7 views

SQL Injection Vulnerability in the Frontend Registration Module of 120 Emergency Command Center Web Service System

120 Emergency Command Center Web Service System is a set of web application services for 120 Emergency Command Center, including internal training, learning and assessment functions. A SQL injection vulnerability exists in the frontend registration module of the 120 Emergency Command Center Web...

7.7AI score
SaveExploits0
OSV
OSV
added 2020/05/07 5:15 p.m.14 views

CVE-2020-5748

Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting XSS attacks via the self-registration feature...

6.1CVSS5.9AI score
SaveExploits0References1
OSV
OSV
added 2020/05/07 5:15 p.m.16 views

CVE-2020-5750

Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting XSS attacks via the self-registration feature...

6.1CVSS5.9AI score
SaveExploits0References1
Rows per page
Query Builder