Lucene search
+L

2890 matches found

CNNVD
CNNVD
added 2025/04/04 12:00 a.m.11 views

WordPress plugin Simple Banner 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

4.4CVSS5.8AI score0.00233EPSS
SaveExploits0References2
Exploit DB
Exploit DB
added 2025/04/04 12:00 a.m.325 views

Microchip TimeProvider 4100 Grandmaster (Banner Config Modules) 2.4.6 - Stored Cross-Site Scripting (XSS)

Exploit Title: Microchip TimeProvider 4100 Grandmaster Banner Config Modules 2.4.6 - Stored Cross-Site Scripting XSS Exploit Author: Armando Huesca Prida Discovered By: Armando Huesca Prida, Marco Negro, Antonio Carriero, Vito Pistillo, Davide Renna, Manuel Leone, Massimiliano Brolli Date of...

7.7CVSS5.2AI score0.00786EPSS
SaveExploits3
OpenVAS
OpenVAS
added 2025/04/04 12:00 a.m.33 views

Unraid OS < 7.0.1 Multiple Vulnerabilities

Unraid OS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:unraid:unraid"; if description...

9.8CVSS7.4AI score0.72059EPSS
SaveExploits17References2
RedhatCVE
RedhatCVE
added 2025/03/27 6:20 a.m.32 views

CVE-2024-12769

The Simple Banner WordPress plugin before 3.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

3.5CVSS5.7AI score0.00257EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/03/26 2:24 p.m.8 views

CVE-2025-30565

Cross-Site Request Forgery CSRF vulnerability in karrikas banner-manager banner-manager allows Stored XSS.This issue affects banner-manager: from n/a through = 16.04.19...

7.1CVSS7.2AI score0.00186EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2025/03/26 12:00 a.m.13 views

D-Link DIR-618 Multiple Vulnerabilities (2025)

D-Link DIR-618 devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.8CVSS5.3AI score0.10763EPSS
SaveExploits8References10
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/03/25 8:48 a.m.6 views

Malicious code in miro-terms-banner-s3-uploader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03f414cb9ba131f7c282fb402bda0fd181018874345ee729525f90005f100e4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Patchstack
Patchstack
added 2025/03/25 6:57 a.m.13 views

WordPress Simple Banner plugin < 3.0.4 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Simple Banner versions 3.0.4...

3.5CVSS6.1AI score0.00257EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2025/03/25 6:15 a.m.42 views

CVE-2024-12769

The Simple Banner WordPress plugin before 3.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

3.5CVSS0.00257EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/03/25 6:00 a.m.9 views

CVE-2024-12769 Simple Banner < 3.0.4 - Admin+ Stored XSS

The Simple Banner WordPress plugin before 3.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.8AI score0.00257EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/03/25 6:00 a.m.48 views

CVE-2024-12769 Simple Banner < 3.0.4 - Admin+ Stored XSS

The Simple Banner WordPress plugin before 3.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

0.00257EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/03/25 12:00 a.m.10 views

WordPress plugin Simple Banner 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

3.5CVSS6AI score0.00257EPSS
SaveExploits1References3
NVD
NVD
added 2025/03/24 2:15 p.m.7 views

CVE-2025-30565

Cross-Site Request Forgery CSRF vulnerability in karrikas banner-manager banner-manager allows Stored XSS.This issue affects banner-manager: from n/a through = 16.04.19...

7.1CVSS0.00186EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/24 1:47 p.m.59 views

CVE-2025-30565

CVE-2025-30565 (banner-manager) : CSRF to Stored XSS in the banner-manager plugin, affecting versions up to 16.04.19. The initial description confirms CSRF abuse enabling stored XSS, but does not specify root cause details or a patched version. Connected docs do not add technical fixes or exploit...

7.1CVSS7.2AI score0.00186EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/24 1:47 p.m.3 views

CVE-2025-30565 WordPress banner-manager plugin <= 16.04.19 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in karrikas banner-manager allows Stored XSS. This issue affects banner-manager: from n/a through 16.04.19...

7.1CVSS7AI score0.00186EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/24 1:47 p.m.28 views

CVE-2025-30565 WordPress banner-manager plugin <= 16.04.19 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in karrikas banner-manager banner-manager allows Stored XSS.This issue affects banner-manager: from n/a through = 16.04.19...

7.1CVSS0.00186EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/03/24 1:30 p.m.9 views

WordPress banner-manager plugin <= 16.04.19 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin banner-manager versions = 16.04.19...

7.1CVSS6.2AI score0.00186EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/03/24 12:00 a.m.6 views

WordPress plugin banner-manager 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.1CVSS8.2AI score0.00186EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2025/03/21 12:00 a.m.7 views

Apache Wicket Detection Consolidation

Consolidation of Apache Wicket detections. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; if description...

7.3AI score
SaveExploits0References1
Packet Storm News
Packet Storm News
added 2025/03/20 12:00 a.m.10 views

How to Create a Scan in Perl to Identify Vulnerable FTP Servers

This whitepaper covers how to create a perl script to identify vulnerable versions of FTP servers via their banners. Mitigations are also provided. Written in Portuguese...

6.9AI score
SaveExploits0
Rows per page
Query Builder