Lucene search
+L

1958 matches found

CNVD
CNVD
•added 2021/05/26 12:00 a.m.•8 views

Sichuan YiPoShiJie Intelligent Technology Co., Ltd. building system there are logical flaws vulnerability

Ltd. is a company whose business covers the fields of ETC intelligent parking solutions, ETC non-stop payment, parking lot operation and management services. Ltd. building system has a logic flaw vulnerability, attackers can use the vulnerability to obtain sensitive information...

6.8AI score
SaveExploits0
attackerkb
attackerkb
•added 2021/05/19 11:15 a.m.•7 views

CVE-2021-20589

Buffer access with incorrect length value vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.38.000, GT25 model communication driver versions 01.19.000 through 01.38.000, GT23 model communication driver versions 01.19.000 through 01.38.000 and GT21 model...

7.5CVSS7.3AI score0.01476EPSS
SaveExploits0References3
Exploit DB
Exploit DB
•added 2021/05/19 12:00 a.m.•801 views

WordPress Plugin Stop Spammers 2021.8 - 'log' Reflected Cross-site Scripting (XSS)

Exploit Title: WordPress Plugin Stop Spammers 2021.8 - 'log' Reflected Cross-site Scripting XSS Date: 04/08/2021 Exploit Author: Hosein Vita Vendor Homepage: https://wordpress.org/plugins/stop-spammer-registrations-plugin/ Software Link:...

6.1CVSS6.2AI score0.05721EPSS
SaveExploits5
zdt
zdt
•added 2021/05/19 12:00 a.m.•73 views

WordPress Stop Spammers 2021.8 Plugin - (log) Reflected Cross-site Scripting Vulnerability

Exploit Title: WordPress Plugin Stop Spammers 2021.8 - 'log' Reflected Cross-site Scripting XSS Exploit Author: Hosein Vita Vendor Homepage: https://wordpress.org/plugins/stop-spammer-registrations-plugin/ Software Link: https://downloads.wordpress.org/plugin/stop-spammer-registrations-plugin.zip...

6.1CVSS0.3AI score0.05721EPSS
SaveExploits5
Packet Storm
Packet Storm
•added 2021/05/19 12:00 a.m.•387 views

WordPress Stop Spammers 2021.8 Cross Site Scripting

Exploit Title: WordPress Plugin Stop Spammers 2021.8 - 'log' Reflected Cross-site Scripting XSS Date: 04/08/2021 Exploit Author: Hosein Vita Vendor Homepage: https://wordpress.org/plugins/stop-spammer-registrations-plugin/ Software Link:...

4.3CVSS6.3AI score0.05721EPSS
SaveExploits5
Positive Technologies
Positive Technologies
•added 2021/05/14 12:00 a.m.•15 views

PT-2024-11096 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the powerpc/64s architecture in the Linux kernel, where crashes can occur when toggling the entry flush barrier. The entry flush mitigation can be enabled or...

7.8CVSS6.5AI score0.08722EPSS
SaveExploits10References1142
OSV
OSV
•added 2021/05/06 1:15 p.m.•14 views

CVE-2021-24245

The Stop Spammers WordPress plugin before 2021.9 did not escape user input when blocking requests such as matching a spam word, outputting it in an attribute after sanitising it to remove HTML tags, which is not sufficient and lead to a reflected Cross-Site Scripting issue...

6.1CVSS5.8AI score0.05721EPSS
SaveExploits5References2
NVD
NVD
•added 2021/05/06 1:15 p.m.•22 views

CVE-2021-24245

The Stop Spammers WordPress plugin before 2021.9 did not escape user input when blocking requests such as matching a spam word, outputting it in an attribute after sanitising it to remove HTML tags, which is not sufficient and lead to a reflected Cross-Site Scripting issue...

6.1CVSS0.05721EPSS
SaveExploits5References2
Prion
Prion
•added 2021/05/06 1:15 p.m.•21 views

Cross site scripting

The Stop Spammers WordPress plugin before 2021.9 did not escape user input when blocking requests such as matching a spam word, outputting it in an attribute after sanitising it to remove HTML tags, which is not sufficient and lead to a reflected Cross-Site Scripting issue...

4.3CVSS5.9AI score0.05721EPSS
SaveExploits5References2Affected Software1
attackerkb
attackerkb
•added 2021/05/06 1:15 p.m.•6 views

CVE-2021-24245

The Stop Spammers WordPress plugin before 2021.9 did not escape user input when blocking requests such as matching a spam word, outputting it in an attribute after sanitising it to remove HTML tags, which is not sufficient and lead to a reflected Cross-Site Scripting issue...

6.1CVSS5.8AI score0.05721EPSS
SaveExploits5References4Affected Software1
CNNVD
CNNVD
•added 2021/05/06 12:00 a.m.•15 views

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the WordPress plugin Stop Spammers in versions prior to 2021.9 th...

6.1CVSS5.8AI score0.05721EPSS
SaveExploits5References4
Cvelist
Cvelist
•added 2021/05/05 6:39 p.m.•30 views

CVE-2021-24245 Stop Spammers < 2021.9 - Reflected Cross-Site Scripting (XSS)

The Stop Spammers WordPress plugin before 2021.9 did not escape user input when blocking requests such as matching a spam word, outputting it in an attribute after sanitising it to remove HTML tags, which is not sufficient and lead to a reflected Cross-Site Scripting issue...

6.2AI score0.05721EPSS
SaveExploits5References2
CVE
CVE
•added 2021/05/05 6:39 p.m.•140 views

CVE-2021-24245

The CVE-2021-24245 entry pertains to the WordPress Stop Spammers plugin (pre-2021.9). A reflected XSS exists because the plugin does not properly escape user input when blocking requests, outputting the input in an attribute after filtering HTML tags. This leads to potential script injection in p...

6.1CVSS5.9AI score0.05721EPSS
SaveExploits5References2Affected Software1
OSV
OSV
•added 2021/04/13 3:20 p.m.•13 views

GHSA-7H8X-WMQ2-7MFF Command injection in launchpad

All versions of package launchpad are vulnerable to Command Injection via stop...

9.8CVSS5.9AI score0.05247EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2021/04/13 3:20 p.m.•52 views

Command injection in launchpad

All versions of package launchpad are vulnerable to Command Injection via stop...

9.8CVSS5.7AI score0.05247EPSS
SaveExploits1References5Affected Software1
WPVulnDB
WPVulnDB
•added 2021/04/08 12:00 a.m.•22 views

Stop Spammers < 2021.9 - Reflected Cross-Site Scripting (XSS)

The plugin did not escape user input when blocking requests such as matching a spam word, outputting it in an attribute after sanitising it to remove HTML tags, which is not sufficient and lead to a reflected Cross-Site Scripting issue. PoC From an IP not in the Allow List...

4.3CVSS0.1AI score0.05721EPSS
SaveExploits5References1Affected Software1
Patchstack
Patchstack
•added 2021/04/08 12:00 a.m.•31 views

WordPress Stop Spammers plugin <= 2021.8 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Hoseinvita in WordPress Stop Spammers plugin versions = 2021.8. Solution Update the WordPress Stop Spammers plugin to the latest available version at least 2021.9...

6.1CVSS1.9AI score0.05721EPSS
SaveExploits5References3Affected Software1
OpenVAS
OpenVAS
•added 2021/03/18 12:00 a.m.•52 views

Apache Tomcat <= 5.5.25 CSRF Vulnerability - Linux

Apache Tomcat is prone to a cross-site request forgery CSRF vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

6.8CVSS7.6AI score0.02467EPSS
SaveExploits7References2
Veracode
Veracode
•added 2021/02/02 2:05 a.m.•19 views

Remote Code Execution (RCE)

launchpad is vulnerable to remote code execution RCE. The vulnerability exists through execcommand in the stop function...

9.8CVSS3AI score0.05247EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2021/02/01 3:15 p.m.•13 views

CVE-2021-23330

All versions of package launchpad are vulnerable to Command Injection via stop...

9.8CVSS7.2AI score
SaveExploits0References3
Rows per page
Query Builder