Lucene search
+L

644 matches found

Prion
Prion
added 2023/10/16 9:15 a.m.17 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Kevin Weber Lazy Load for Videos plugin = 2.18.2 versions...

6.8CVSS8.8AI score0.00208EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/16 8:54 a.m.12 views

CVE-2023-45656 WordPress Lazy Load for Videos Plugin <= 2.18.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Kevin Weber Lazy Load for Videos plugin = 2.18.2 versions...

5.4CVSS8.9AI score0.00208EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/16 8:54 a.m.65 views

CVE-2023-45656

CVE-2023-45656 concerns the WordPress plugin Kevin Weber Lazy Load for Videos (versions

8.8CVSS7.1AI score0.00208EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/10/16 12:0 a.m.6 views

WordPress Plugin Lazy Load for Videos Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Lazy Load for Videos suffe...

8.8CVSS6.5AI score0.00208EPSS
SaveExploits0References2
Hacker One
Hacker One
added 2023/10/14 9:22 p.m.17 views

TikTok: Using Branded Hashtag Feature User Partnered with Account Manager Can View Videos Uploaded By A Private TikTok Account If 'item_id' Is Known

The branded hashtag feature on TikTok allowed users partnered with an account manager to view videos uploaded by private accounts if the video ID was known. This vulnerability has been remediated...

6.9AI score
SaveExploits0
Patchstack
Patchstack
added 2023/10/12 12:0 a.m.16 views

WordPress Lazy Load for Videos Plugin <= 2.18.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Lazy Load for Videos Type Plugin Vulnerable versions = 2.18.2 Fixed in 2.18.3 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-45656 Patch priority Low CVSS severity Low 5.4 Developer Kevin Weber PSID 09701a7d072c Credits Mika Required...

8.8CVSS6.6AI score0.00208EPSS
SaveExploits0References2Affected Software1
Wired Threat Level
Wired Threat Level
added 2023/10/09 3:53 p.m.24 views

The Israel-Hamas War Is Drowning X in Disinformation

People who have turned to X for breaking news about the Israel-Hamas conflict are being hit with old videos, fake photos, and video game footage at a level researchers have never seen...

7AI score
SaveExploits0
Fedora
Fedora
added 2023/08/25 1:29 a.m.44 views

[SECURITY] Fedora 38 Update: youtube-dl-2023.08.04.git86e3cf5-1.20230815git86e3cf5.fc38

Small command-line program to download videos from YouTube and other sites...

8.2CVSS7AI score0.01038EPSS
SaveExploits0
Fedora
Fedora
added 2023/08/25 12:43 a.m.39 views

[SECURITY] Fedora 37 Update: youtube-dl-2023.07.30.git2efc8de-1.20230815git2efc8de.fc37

Small command-line program to download videos from YouTube and other sites...

8.2CVSS7AI score0.01038EPSS
SaveExploits0
CNVD
CNVD
added 2023/08/18 12:0 a.m.27 views

Linux Kernel Memory Misreference Vulnerability (CNVD-2023-65164)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux Kernel suffers from a memory misreference vulnerability that originates from a confusion in the instruction responsible for freeing memory in the vmxnet3rqallocrxbuf,...

7.1CVSS6.6AI score0.00245EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/08/16 12:0 a.m.38 views

Hospital Management System SQL Injection Vulnerability (CNVD-2023-64629)

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6.3AI score0.00369EPSS
SaveExploits0References1
WPVulnDB
WPVulnDB
added 2023/08/16 12:0 a.m.14 views

External Videos <= 2.0.1 - Admin+ Stored XSS

Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0
NVD
NVD
added 2023/08/14 3:15 p.m.28 views

CVE-2023-30752

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Silvia Pfeiffer and Andrew Nimmo External Videos plugin = 2.0.1 versions...

5.9CVSS5.4AI score0.00369EPSS
SaveExploits0References1
OSV
OSV
added 2023/08/14 3:15 p.m.5 views

CVE-2023-30752

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Silvia Pfeiffer and Andrew Nimmo External Videos plugin = 2.0.1 versions...

4.8CVSS7.3AI score0.00369EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/08/14 2:45 p.m.31 views

CVE-2023-30752 WordPress External Videos Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Silvia Pfeiffer and Andrew Nimmo External Videos plugin = 2.0.1 versions...

5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/08/14 2:45 p.m.14 views

CVE-2023-30752 WordPress External Videos Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Silvia Pfeiffer and Andrew Nimmo External Videos plugin = 2.0.1 versions...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0References1
CVE
CVE
added 2023/08/14 2:45 p.m.54 views

CVE-2023-30752

The CVE-2023-30752 entry concerns the WordPress External Videos plugin and is documented as an authentication‑required Stored XSS in versions &lt;= 2.0.1. Affected component: External Videos plugin; root cause: insufficient input filtering/escaping that allows stored script execution when an admi...

5.9CVSS4.9AI score0.00369EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/08/14 12:0 a.m.8 views

WordPress plugin External Videos 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6AI score0.00369EPSS
SaveExploits0References2
Schneier on Security
Schneier on Security
added 2023/08/04 11:7 a.m.26 views

Political Milestones for AI

ChatGPT was released just nine months ago, and we are still learning how it will affect our daily lives, our careers, and even our systems of self-governance. But when it comes to how AI may threaten our democracy, much of the public conversation lacks imagination. People talk about the danger of...

6.8AI score
SaveExploits0
Packet Storm
Packet Storm
added 2023/07/27 12:0 a.m.321 views

Buzzy News Viral Lists Polls And Videos 2.5.1 Insecure Settings

====================================================================================================================================== | Title : Buzzy - News Viral Lists Polls and Videos V 2.5.1 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro /...

7.1AI score
SaveExploits0
Rows per page
Query Builder