Lucene search
+L

5235 matches found

OSV
OSV
added 2025/09/05 5:10 p.m.12 views

MAL-2025-43338 Malicious code in @zalastax/nolb-lion-lib-b (npm)

The package @zalastax/nolb-lion-lib-b was found to contain malicious code...

7AI score
SaveExploits0
CNVD
CNVD
added 2025/08/31 12:00 a.m.9 views

WordPress Plugin B Slider Access Control Break Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control disruption vulnerability exists in WordPress plugin B Slider, which stems from a lack ...

5.8CVSS6.7AI score0.00218EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/30 6:19 p.m.9 views

CVE-2025-54734

Missing Authorization vulnerability in bPlugins B Slider b-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects B Slider: from n/a through = 1.1.30...

5.8CVSS5.9AI score0.00218EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/28 1:16 p.m.6 views

CVE-2025-54734

Missing Authorization vulnerability in bPlugins B Slider b-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects B Slider: from n/a through = 1.1.30...

5.8CVSS0.00218EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/28 12:37 p.m.13 views

CVE-2025-54734 WordPress B Slider Plugin <= 1.1.30 - Broken Access Control Vulnerability

Missing Authorization vulnerability in bPlugins B Slider b-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects B Slider: from n/a through = 1.1.30...

5.8CVSS0.00218EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/28 12:37 p.m.4 views

CVE-2025-54734 WordPress B Slider Plugin <= 1.1.30 - Broken Access Control Vulnerability

Missing Authorization vulnerability in bPlugins B Slider allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects B Slider: from n/a through 1.1.30...

5.8CVSS6.5AI score0.00218EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/28 12:37 p.m.24 views

CVE-2025-54734

CVE-2025-54734 describes a Missing Authorization vulnerability in the WordPress plugin B Slider (bPlugins) affecting versions up to and including 1.1.30 . The issue arises from incorrect access control, enabling exploitation of misconfigured security levels. According to multiple sources, the CVE...

5.8CVSS5.9AI score0.00218EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/28 12:00 a.m.8 views

WordPress plugin B Slider 安全漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control disruption vulnerability exists in WordPress plugin B Slider, which stems from a lack ...

5.8CVSS6.6AI score0.00218EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/28 12:00 a.m.13 views

PT-2025-35076

Name of the Vulnerable Software and Affected Versions: bPlugins B Slider versions through 1.1.30 Description: The software contains a missing authorization issue that allows exploiting incorrectly configured access control security levels. Recommendations: At the moment, there is no information...

5.8CVSS6.1AI score0.00218EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2025/08/26 1:40 p.m.7 views

WordPress B Slider Plugin <= 1.1.30 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Denver Jackson in WordPress Plugin B Slider versions = 1.1.30...

5.8CVSS6.6AI score0.00218EPSS
SaveExploits0Affected Software1
SUSE Linux
SUSE Linux
added 2025/08/25 6:22 a.m.15 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-36028: mm/hugetlb: fix DEBUGLOCKSWARNON1 when dissolvefreehugetlbfolio bsc1225707. CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357:...

8.7CVSS9AI score0.03133EPSS
SaveExploits12References1018
OSV
OSV
added 2025/08/23 2:52 p.m.4 views

MAL-2025-41322 Malicious code in rush-b (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 94450add30af54a15bf43058886e06c741fa6040846b8b23301194b2f412d6a1 The OpenSSF Package Analysis project identified 'rush-b' @ 99.0.9 npm...

7.3AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/23 2:52 p.m.5 views

Malicious code in rush-b (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 94450add30af54a15bf43058886e06c741fa6040846b8b23301194b2f412d6a1 The OpenSSF Package Analysis project identified 'rush-b' @ 99.0.9 npm...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/23 2:37 p.m.5 views

Malicious code in other-pkg-b (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ab79e006d7046832f724293ad8a66618e70b615bb6e223169ac1bda1cae5d4df The OpenSSF Package Analysis project identified 'other-pkg-b' @ 99.0....

7.1AI score
SaveExploits0
OSV
OSV
added 2025/08/23 2:37 p.m.5 views

MAL-2025-41314 Malicious code in other-pkg-b (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ab79e006d7046832f724293ad8a66618e70b615bb6e223169ac1bda1cae5d4df The OpenSSF Package Analysis project identified 'other-pkg-b' @ 99.0....

7.3AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/08/23 12:23 a.m.14 views

CVE-2025-50860

SQL Injection in the listdomains function in Easy Hosting Control Panel EHCP 20.04.1.b allows authenticated attackers to access or manipulate database contents via the arananalan POST parameter...

6.5CVSS8.3AI score0.00229EPSS
SaveExploits2References1
NVD
NVD
added 2025/08/22 7:15 p.m.12 views

CVE-2025-50859

Reflected Cross-Site Scripting in the Change Template function in Easy Hosting Control Panel EHCP 20.04.1.b allows authenticated attackers to execute arbitrary JavaScript via the template parameter...

6.1CVSS0.00292EPSS
SaveExploits3References2
Cvelist
Cvelist
added 2025/08/22 12:00 a.m.20 views

CVE-2025-50858

Reflected Cross-Site Scripting in the List MySQL Databases function in Easy Hosting Control Panel EHCP 20.04.1.b allows authenticated attackers to execute arbitrary JavaScript via the action parameter...

0.0024EPSS
SaveExploits3References2
CNNVD
CNNVD
added 2025/08/22 12:00 a.m.10 views

EHCP Easy Hosting Control Panel 安全漏洞

EHCP Easy Hosting Control Panel is an open source web hosting control panel from EHCP. A security vulnerability exists in EHCP Easy Hosting Control Panel version 20.04.1.b. The vulnerability stems from a reflective cross-site scripting vulnerability in the action parameter of the List MySQL...

6.1CVSS6AI score0.0024EPSS
SaveExploits3References4
Positive Technologies
Positive Technologies
added 2025/08/22 12:00 a.m.9 views

PT-2025-34486 · Unknown · Easy Hosting Control Panel

Name of the Vulnerable Software and Affected Versions: Easy Hosting Control Panel EHCP version 20.04.1.b Description: The Change Template function in Easy Hosting Control Panel EHCP is susceptible to a reflected cross-site scripting issue. Authenticated attackers can execute arbitrary JavaScript...

6.1CVSS7.1AI score0.00292EPSS
SaveExploits3References6
Rows per page
Query Builder