Lucene search
+L

228 matches found

Openbugbounty
Openbugbounty
added 2024/01/13 10:41 a.m.8 views

fatek.com Cross Site Scripting vulnerability OBB-3834038

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
NVD
NVD
added 2023/10/16 10:15 a.m.37 views

CVE-2023-45642

Cross-Site Request Forgery CSRF vulnerability in Hassan Ali Snap Pixel plugin = 1.5.7 versions...

8.8CVSS6.5AI score0.00204EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/16 10:15 a.m.24 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Hassan Ali Snap Pixel plugin = 1.5.7 versions...

6.8CVSS8.8AI score0.00204EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/16 9:48 a.m.39 views

CVE-2023-45642 WordPress Snap Pixel Plugin <= 1.5.7 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Hassan Ali Snap Pixel plugin = 1.5.7 versions...

5.4CVSS9AI score0.00204EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/16 9:48 a.m.46 views

CVE-2023-45642

CVE-2023-45642 affects the WordPress Snap Pixel plugin (&lt;= 1.5.7). The vulnerability is Cross-Site Request Forgery (CSRF) with unauthenticated attacker privileges, as documented by Patchstack and Red Hat/Redemption feeds, and reflected in CVSS metrics (NVD: 8.8, HIGH; Patchstack: 5.4, MEDIUM d...

8.8CVSS7AI score0.00204EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/10/16 12:00 a.m.13 views

PT-2023-29619 · Unknown · Hassan Ali Snap Pixel Plugin

Name of the Vulnerable Software and Affected Versions: Hassan Ali Snap Pixel plugin versions = 1.5.7 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

8.8CVSS8.8AI score0.00204EPSS
SaveExploits0References3
NVD
NVD
added 2023/09/27 3:19 p.m.30 views

CVE-2023-41242

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Hassan Ali Snap Pixel plugin = 1.5.7 versions...

5.9CVSS5.4AI score0.00392EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/09/27 12:36 p.m.15 views

CVE-2023-41242 WordPress Snap Pixel Plugin <= 1.5.7 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Hassan Ali Snap Pixel plugin = 1.5.7 versions...

5.9CVSS5.6AI score0.00392EPSS
SaveExploits0References1
CVE
CVE
added 2023/09/27 12:36 p.m.60 views

CVE-2023-41242

CVE-2023-41242 refers to the WordPress Snap Pixel plugin and is a Stored Cross-Site Scripting (XSS) vulnerability affecting versions

5.9CVSS5.1AI score0.00392EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/09/27 12:00 a.m.22 views

PT-2023-27865 · Unknown · Hassan Ali Snap Pixel

Name of the Vulnerable Software and Affected Versions: Hassan Ali Snap Pixel plugin versions 1.5.7 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the Hassan Ali Snap Pixel plugin. This vulnerability requires authentication with admin+...

5.9CVSS5.3AI score0.00392EPSS
SaveExploits0References5
Packet Storm
Packet Storm
added 2023/07/17 12:00 a.m.255 views

WordPress Force Images Download 1.8 CSRF / SSRF

Exploit Author : Etharus Vulnerability : Cross Site Request Forgery to Server Side Request Forgery Impact : internal ip disclosure , file extension bypass, internal port scan. Product Vendor : Nazakat Ali Version Tested : 1.8 Date : 14/07/2023 Fofa Dork :...

7.1AI score
SaveExploits0
NVD
NVD
added 2023/06/13 3:15 p.m.37 views

CVE-2022-42880

Cross-Site Request Forgery CSRF vulnerability in Ali Irani Auto Upload Images plugin = 3.3 versions allows Stored Cross-Site Scripting XSS...

6.1CVSS6.2AI score0.00216EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/13 3:15 p.m.21 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Ali Irani Auto Upload Images plugin = 3.3 versions allows Stored Cross-Site Scripting XSS...

5.8CVSS6.1AI score0.00216EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/06/13 1:50 p.m.26 views

CVE-2022-42880 WordPress Auto Upload Images Plugin <= 3.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Ali Irani Auto Upload Images plugin = 3.3 versions allows Stored Cross-Site Scripting XSS...

6.1CVSS6.4AI score
SaveExploits0References4
CVE
CVE
added 2023/06/13 1:50 p.m.56 views

CVE-2022-42880

The CVE-2022-42880 entry concerns the WordPress plugin Ali Irani Auto Upload Images (versions ≤ 3.3). The vulnerability is a CSRF weakness that can lead to Stored XSS, reported across multiple sources. The underlying issue is a cross-site request forgery that enables an attacker to inject script ...

6.1CVSS6.1AI score0.00216EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/06/13 12:00 a.m.18 views

WordPress Plugin Ali Irani Auto Upload Images 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

6.1CVSS6.2AI score0.00216EPSS
SaveExploits0References2
OSV
OSV
added 2022/10/14 8:15 p.m.8 views

CVE-2022-41623

Sensitive Data Exposure in Villatheme ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin = 1.1.0 on WordPress...

7.5CVSS5.8AI score0.00767EPSS
SaveExploits0References2
HackRead
HackRead
added 2022/10/10 2:04 p.m.21 views

Iran State-Run TV’s Live Transmission Hacked by Edalate Ali Hackers

By Waqas As seen by Hackread.com, the Iranian broadcaster was hacked while airing a news bulletin on Saturday night. This is a post from HackRead.com Read the original post: Iran State-Run TVs Live Transmission Hacked by Edalate Ali Hackers...

2.3AI score
SaveExploits0
NVD
NVD
added 2022/09/09 3:15 p.m.37 views

CVE-2022-40191

Authenticated subscriber+ Stored Cross-Site Scripting XSS vulnerability in Ali Khallad's Contact Form By Mega Forms plugin = 1.2.4 at WordPress...

5.4CVSS0.00539EPSS
SaveExploits0References2
OSV
OSV
added 2022/09/09 3:15 p.m.11 views

CVE-2022-40191

Authenticated subscriber+ Stored Cross-Site Scripting XSS vulnerability in Ali Khallad's Contact Form By Mega Forms plugin = 1.2.4 at WordPress...

5.4CVSS5.8AI score0.00539EPSS
SaveExploits0References2
Rows per page
Query Builder