Lucene search
+L

2923 matches found

OSV
OSV
•added 2025/03/14 1:30 a.m.•10 views

MAL-2025-2427 Malicious code in tsl-select-trigger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 072755e39bd14b6660b02fdc071fceedf4d4cf76f4f27561b12b19a8fa70f135 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/03/14 1:30 a.m.•8 views

Malicious code in tsl-select-trigger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 072755e39bd14b6660b02fdc071fceedf4d4cf76f4f27561b12b19a8fa70f135 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
Patchstack
Patchstack
•added 2025/03/11 9:44 p.m.•14 views

WordPress Contact Form 7 Select Box Editor Button plugin <= 0.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Contact Form 7 Select Box Editor Button versions = 0.6...

4.3CVSS8.9AI score0.00168EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/03/11 9:15 p.m.•10 views

CVE-2025-28902

Cross-Site Request Forgery CSRF vulnerability in Benjamin Pick Contact Form 7 Select Box Editor Button contact-form-7-select-box-editor-button allows Cross Site Request Forgery.This issue affects Contact Form 7 Select Box Editor Button: from n/a through = 0.6...

4.3CVSS0.00168EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/11 9:00 p.m.•57 views

CVE-2025-28902

CVE-2025-28902 is a CSRF vulnerability in the WordPress plugin Contact Form 7 Select Box Editor Button , affecting versions up to 0.6. The connected details confirm a cross-site request forgery flaw in this plugin; no exploitation details or patch/remediation are provided in the sources. The entr...

4.3CVSS7.2AI score0.00168EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/11 9:00 p.m.•24 views

CVE-2025-28902 WordPress Contact Form 7 Select Box Editor Button plugin <= 0.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Benjamin Pick Contact Form 7 Select Box Editor Button contact-form-7-select-box-editor-button allows Cross Site Request Forgery.This issue affects Contact Form 7 Select Box Editor Button: from n/a through = 0.6...

4.3CVSS0.00168EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/11 9:00 p.m.•5 views

CVE-2025-28902 WordPress Contact Form 7 Select Box Editor Button plugin <= 0.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Benjamin Pick Contact Form 7 Select Box Editor Button contact-form-7-select-box-editor-button allows Cross Site Request Forgery.This issue affects Contact Form 7 Select Box Editor Button: from n/a through = 0.6...

4.3CVSS8.6AI score0.00168EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/11 12:00 a.m.•9 views

WordPress plugin Contact Form 7 Select Box Editor Button 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...

4.3CVSS8.6AI score0.00168EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/11 12:00 a.m.•2 views

CVE-2025-28902: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Benjamin Pick Contact Form 7 Select Box Editor Button contact-form-7-select-box-editor-button allows Cross Site Request Forgery.This issue affects Contact Form 7 Select Box Editor Button: from n/a through = 0.6...

4.3CVSS5.8AI score0.00168EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/05 12:00 a.m.•19 views

Google Chrome 安全漏洞

Google Chrome is a WEB browser developed by Google Inc. Google Chrome suffers from a security bypass vulnerability, which is caused due to improper implementation in Select. An attacker can exploit the vulnerability to bypass security restrictions...

4.3CVSS6.6AI score0.00288EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
•added 2025/03/04 2:15 p.m.•23 views

CVE-2025-1940

A select option could partially obscure the confirmation prompt shown before launching external apps. This could be used to trick a user in to launching an external app unexpectedly. This issue only affects Android versions of Firefox. This vulnerability affects Firefox 136...

7.1CVSS6AI score0.00247EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/03/03 12:00 a.m.•21 views

The vulnerability of the select-menu.php web system for the online reservation Multi Restaurant Table Reservation System allows a perpetrator to execute arbitrary code.

The vulnerability of the select-menu.php web system for the online reservation system of the Multi Restaurant Table Reservation System is related to the lack of measures taken to protect the SQL query structure when processing the table parameter. Exploiting this vulnerability allows an attacker ...

6.5CVSS7.1AI score0.00379EPSS
SaveExploits0References4Affected Software1
SUSE CVE
SUSE CVE
•added 2025/02/17 3:47 a.m.•10 views

SUSE CVE-2025-24898

rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions ssl::selectnextproto can return a slice pointing into the server argument's buffer but with a lifetime bound to the client argument. In situations where the sever buffer's lifetime is shorter than th...

4.8CVSS6.4AI score0.0068EPSS
SaveExploits0References11
OSV
OSV
•added 2025/02/12 9:15 p.m.•12 views

CVE-2025-1227

A vulnerability was found in ywoa up to 2024.07.03. It has been rated as critical. This issue affects the function selectList of the file com/cloudweb/oa/mapper/xml/AddressDao.xml. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...

8.8CVSS5.6AI score0.00526EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/02/12 11:00 a.m.•34 views

CVE-2025-1192 SourceCodester Multi Restaurant Table Reservation System select-menu.php sql injection

A vulnerability was found in SourceCodester Multi Restaurant Table Reservation System 1.0. It has been classified as critical. Affected is an unknown function of the file select-menu.php. The manipulation of the argument table leads to sql injection. It is possible to launch the attack remotely...

6.5CVSS6.8AI score0.00379EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/02/12 11:00 a.m.•58 views

CVE-2025-1192 SourceCodester Multi Restaurant Table Reservation System select-menu.php sql injection

A vulnerability was found in SourceCodester Multi Restaurant Table Reservation System 1.0. It has been classified as critical. Affected is an unknown function of the file select-menu.php. The manipulation of the argument table leads to sql injection. It is possible to launch the attack remotely...

6.5CVSS0.00379EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/02/12 12:00 a.m.•15 views

SourceCodester Multi Restaurant Table Reservation System 注入漏洞

SourceCodester Multi Restaurant Table Reservation System is a multi-restaurant table reservation system from SourceCodester, Inc. An injection vulnerability exists in version 1.0 of the SourceCodester Multi Restaurant Table Reservation System, which stems from an SQL injection vulnerability...

8.8CVSS7AI score0.00379EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/12 12:00 a.m.•5 views

CVE-2025-1192: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Multi Restaurant Table Reservation System 1.0. It has been classified as critical. Affected is an unknown function of the file select-menu.php. The manipulation of the argument table leads to sql injection. It is possible to launch the attack remotely...

8.8CVSS5.5AI score0.00379EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/02/12 12:00 a.m.•20 views

The vulnerability of the bpf_sk_select_reuse_port() function in the net/core/filter.c module of Linux kernel allows a hacker to cause a service failure.

The vulnerability of the bpfskselectreuseport function in the net/core/filter.c module of Linux kernel systems is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00224EPSS
SaveExploits0References23Affected Software6
AstraLinux
AstraLinux
•added 2025/02/11 7:35 a.m.•2 views

Astra Linux – Vulnerability in Firefox, Thunderbird

An attacker could cause a select dropdown menu to be displayed over another tab; this could lead to user confusion and potential spoofing attacks. This vulnerability affects Firefox 133, Firefox ESR 128.5, Thunderbird 133, and Thunderbird 128.5...

4.3CVSS6.6AI score0.00463EPSS
SaveExploits0References3
Rows per page
Query Builder