Lucene search
+L

2450 matches found

NVD
NVD
added 2025/01/14 11:15 p.m.19 views

CVE-2024-54142

Discourse AI is a Discourse plugin which provides a number of AI features. When sharing Discourse AI Bot conversations into posts, if the conversation had HTML entities those could leak into the Discourse application when a user visited a post with a onebox to said conversation. This issue has be...

9CVSS0.00421EPSS
SaveExploits0References2
NVD
NVD
added 2025/01/09 4:16 p.m.13 views

CVE-2025-22542

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ofek Nakar Virtual Bot virtual-bot allows Blind SQL Injection.This issue affects Virtual Bot: from n/a through = 1.0.0...

9.3CVSS0.00391EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/09 3:39 p.m.28 views

CVE-2025-22542 WordPress Virtual Bot Plugin <= 1.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ofek Nakar Virtual Bot virtual-bot allows Blind SQL Injection.This issue affects Virtual Bot: from n/a through = 1.0.0...

9.3CVSS0.00391EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/09 3:39 p.m.7 views

CVE-2025-22542 WordPress Virtual Bot Plugin <= 1.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ofek Nakar Virtual Bot allows Blind SQL Injection.This issue affects Virtual Bot: from n/a through 1.0.0...

9.3CVSS7.7AI score0.00391EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/09 3:39 p.m.49 views

CVE-2025-22542

CVE-2025-22542 describes an SQL Injection in the WordPress plugin/feature named Virtual Bot . The entry notes an improper neutralization of input elements that can enable unauthenticated, blind SQL injection against the Virtual Bot component, affecting versions from initial n/a up through 1.0.0. ...

9.3CVSS7.3AI score0.00391EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.5 views

WordPress plugin Virtual Bot SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

9.3CVSS9AI score0.00391EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/07 4:15 p.m.7 views

CVE-2025-22538

Cross-Site Request Forgery CSRF vulnerability in Ofek Nakar Virtual Bot virtual-bot allows Stored XSS.This issue affects Virtual Bot: from n/a through = 1.0.0...

7.1CVSS0.00191EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/07 2:57 p.m.26 views

CVE-2025-22538 WordPress Virtual Bot Plugin <= 1.0.0 - CSRF Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ofek Nakar Virtual Bot virtual-bot allows Stored XSS.This issue affects Virtual Bot: from n/a through = 1.0.0...

7.1CVSS0.00191EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/07 2:57 p.m.7 views

CVE-2025-22538 WordPress Virtual Bot Plugin <= 1.0.0 - CSRF Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ofek Nakar Virtual Bot allows Stored XSS.This issue affects Virtual Bot: from n/a through 1.0.0...

7.1CVSS6.8AI score0.00191EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/01/07 12:54 p.m.8 views

WordPress Virtual Bot Plugin <= 1.0.0 - CSRF Cross Site Scripting (XSS) vulnerability

CSRF Cross Site Scripting XSS vulnerability discovered by Caesar Evan Santoso Patchstack Alliance in WordPress Plugin Virtual Bot versions = 1.0.0...

7.1CVSS6.1AI score0.00191EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/01/07 12:47 p.m.8 views

WordPress Virtual Bot Plugin <= 1.0.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Caesar Evan Santoso Patchstack Alliance in WordPress Plugin Virtual Bot versions = 1.0.0...

9.3CVSS8.1AI score0.00391EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/01/07 12:0 a.m.8 views

WordPress plugin Virtual Bot 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.1CVSS8.3AI score0.00191EPSS
SaveExploits0References2
NVD
NVD
added 2025/01/02 12:15 p.m.31 views

CVE-2024-38789

Cross-Site Request Forgery CSRF vulnerability in Marco Milesi Telegram Bot & Channel telegram-bot allows Cross Site Request Forgery.This issue affects Telegram Bot & Channel: from n/a through = 3.8.2...

5.4CVSS0.00178EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/02 12:1 p.m.55 views

CVE-2024-38789

CVE-2024-38789 corresponds to a CSRF vulnerability in the WordPress Telegram Bot & Channel plugin, affecting versions n/a through 3.8.2. The vulnerability allows unauthorized actions via CSRF; exploitation details are not provided in the documents. A remediation is mentioned: update to a version ...

5.4CVSS5.9AI score0.00178EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/02 12:1 p.m.12 views

CVE-2024-38789 WordPress Telegram Bot & Channel plugin <= 3.8.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Marco Milesi Telegram Bot & Channel allows Cross Site Request Forgery.This issue affects Telegram Bot & Channel: from n/a through 3.8.2...

5.4CVSS5.5AI score0.00178EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/02 12:1 p.m.33 views

CVE-2024-38789 WordPress Telegram Bot & Channel plugin <= 3.8.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Marco Milesi Telegram Bot & Channel telegram-bot allows Cross Site Request Forgery.This issue affects Telegram Bot & Channel: from n/a through = 3.8.2...

5.4CVSS0.00178EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/02 12:0 a.m.9 views

WordPress plugin Telegram Bot & Channel 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

5.4CVSS6.6AI score0.00178EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/02 12:0 a.m.11 views

PT-2025-2530 · Unknown · Marco Milesi Telegram Bot & Channel

Name of the Vulnerable Software and Affected Versions: Marco Milesi Telegram Bot & Channel versions n/a through 3.8.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. This means an attacker can trick a user into performing...

5.4CVSS6.5AI score0.00178EPSS
SaveExploits0References3
OSV
OSV
added 2024/12/27 2:15 p.m.3 views

DEBIAN-CVE-2024-53212

In the Linux kernel, the following vulnerability has been resolved: netlink: fix false positive warning in extack during dumps Commit under fixes extended extack reporting to dumps. It works under normal conditions, because extack errors are usually reported during -start or the first -dump, it's...

5.5CVSS5.7AI score0.00213EPSS
SaveExploits0References1
Imperva Blog
Imperva Blog
added 2024/12/20 12:27 a.m.13 views

Navigating the New Era of AI Traffic: How to Identify and Block AI Scrapers

In the not-so-distant past, webmasters faced challenges from bots like Google's search spiders, which diligently scanned websites to index content and provide the best search results for users. Fast forward to today, and we are witnessing a new breed of bot: Large Language Models LLMs like ChatGP...

7.2AI score
SaveExploits0
Rows per page
Query Builder