Lucene search
+L

3314 matches found

Tenable Nessus
Tenable Nessus
added 2023/10/17 12:0 a.m.24 views

LG LED Assistant Detection

Binary data lgledassistantdetect.nbin...

7.3AI score
SaveExploits0References1
CNNVD
CNNVD
added 2023/10/17 12:0 a.m.12 views

WordPress Plugin Media Library Assistant Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.9CVSS5.9AI score0.00339EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/10/17 12:0 a.m.27 views

LG LED Assistant Path Traversal (CVE-2023-4613)

Binary data lgledassistantcve-2023-4613.nbin...

9.8CVSS9.7AI score0.02182EPSS
SaveExploits0References2
NVD
NVD
added 2023/10/12 1:15 p.m.21 views

CVE-2023-45063

Cross-Site Request Forgery CSRF vulnerability in ReCorp AI Content Writing Assistant Content Writer, GPT 3 & 4, ChatGPT, Image Generator All in One plugin = 1.1.5 versions...

8.8CVSS5.8AI score0.00214EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/12 1:15 p.m.9 views

CVE-2023-45063

Cross-Site Request Forgery CSRF vulnerability in ReCorp AI Content Writing Assistant Content Writer, GPT 3 & 4, ChatGPT, Image Generator All in One plugin = 1.1.5 versions...

8.8CVSS7.3AI score0.00214EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/12 1:15 p.m.27 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in ReCorp AI Content Writing Assistant Content Writer, GPT 3 & 4, ChatGPT, Image Generator All in One plugin = 1.1.5 versions...

6.8CVSS8.8AI score0.00214EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/12 12:41 p.m.11 views

CVE-2023-45063 WordPress AI Content Writing Assistant (Content Writer, ChatGPT, Image Generator) All in One Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ReCorp AI Content Writing Assistant Content Writer, GPT 3 & 4, ChatGPT, Image Generator All in One plugin = 1.1.5 versions...

4.3CVSS7.1AI score0.00214EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/12 12:41 p.m.29 views

CVE-2023-45063 WordPress AI Content Writing Assistant (Content Writer, ChatGPT, Image Generator) All in One Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ReCorp AI Content Writing Assistant Content Writer, GPT 3 & 4, ChatGPT, Image Generator All in One plugin = 1.1.5 versions...

4.3CVSS9AI score0.00214EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/12 12:41 p.m.72 views

CVE-2023-45063

CVE-2023-45063 is a Cross-Site Request Forgery (CSRF) vulnerability in the ReCorp AI Content Writing Assistant (Content Writer, GPT 3 & 4, ChatGPT, Image Generator) All in One WordPress plugin. Affected versions are ≤ 1.1.5 (per CVE/NVD entry). Patch guidance across connected docs varies: Patchst...

8.8CVSS6.5AI score0.00214EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/10/12 12:0 a.m.9 views

WordPress plugin AI Content Writing Assistant All in One Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists i...

8.8CVSS6.6AI score0.00214EPSS
SaveExploits0References2
OSV
OSV
added 2023/10/09 4:15 a.m.7 views

CVE-2023-45351

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.1, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.42.1, and 4000 Manager V10 R0 allow Authenticated Command Injection via AShbr. This is also known as OSFOURK-24039...

8.8CVSS5.8AI score0.01265EPSS
SaveExploits0References2
CVE
CVE
added 2023/10/09 12:0 a.m.65 views

CVE-2023-45351

The connected PT-2023-29526 entry confirms an authenticated command injection vulnerability in Atos Unify OpenScape 4000 components: Assistant and Manager, specifically versions V10 R0 through V10 R1 before R1.42.1, with the issue arising from the AShbr component. The root cause is an insecure ha...

8.8CVSS8.9AI score0.01265EPSS
SaveExploits0References2Affected Software2
zdt
zdt
added 2023/10/09 12:0 a.m.194 views

Kibana Prototype Pollution / Remote Code Execution Exploit

Kibana versions prior to 7.6.3 suffer from a prototype pollution bug within the Upgrade Assistant. By setting a new constructor.prototype.sourceURL value you can execute arbitrary code. Code execution is possible through two different ways. Either by sending data directly to Elastic, or using...

8.1AI score
SaveExploits0
CVE
CVE
added 2023/10/09 12:0 a.m.57 views

CVE-2023-45349

Atos Unify OpenScape 4000 components are affected: Assistant and Manager, version lines V10 R1 prior to R1.34.7, V10 R1.42.0, and V10 R0. Also R1 for Manager. The issue exposes sensitive information that may allow lateral movement to the backup system via AShbr. Root cause details are not explici...

7.5CVSS7.3AI score0.00473EPSS
SaveExploits0References2Affected Software2
Positive Technologies
Positive Technologies
added 2023/10/08 12:0 a.m.6 views

PT-2023-29526 · Atos · Atos Unify Openscape 4000 Assistant +1

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape 4000 Assistant versions V10 R0 through V10 R1 before V10 R1.42.1 Atos Unify OpenScape 4000 Manager versions V10 R0 through V10 R1 before V10 R1.42.1 Description: The issue allows Authenticated Command Injection via AShbr...

8.8CVSS8.8AI score0.01265EPSS
SaveExploits0References8
Circl
Circl
added 2023/10/06 9:55 p.m.5 views

CVE-2020-7012

creationtimestamp| type| source ---|---|--- 2023-10-06 21:55:04+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/kibanaupgradeassistanttelemetryrce.rb 2025-10-23 21:12:59+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7...

8.8CVSS8.6AI score0.18211EPSS
SaveExploits1References1
NVD
NVD
added 2023/10/04 4:15 a.m.41 views

CVE-2023-30736

Improper authorization in PushMsgReceiver of Samsung Assistant prior to version 8.7.00.1 allows attacker to execute javascript interface. To trigger this vulnerability, user interaction is required...

5.4CVSS5.1AI score0.0024EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/04 4:15 a.m.6 views

CVE-2023-30736

Improper authorization in PushMsgReceiver of Samsung Assistant prior to version 8.7.00.1 allows attacker to execute javascript interface. To trigger this vulnerability, user interaction is required...

5.4CVSS5.9AI score0.0024EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/04 4:15 a.m.15 views

Authorization

Improper authorization in PushMsgReceiver of Samsung Assistant prior to version 8.7.00.1 allows attacker to execute javascript interface. To trigger this vulnerability, user interaction is required...

5.8CVSS5.7AI score0.0024EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/04 3:2 a.m.31 views

CVE-2023-30736

Improper authorization in PushMsgReceiver of Samsung Assistant prior to version 8.7.00.1 allows attacker to execute javascript interface. To trigger this vulnerability, user interaction is required...

4.4CVSS5.9AI score0.0024EPSS
SaveExploits0References1
Rows per page
Query Builder