Lucene search
+L

15 matches found

RedhatCVE
RedhatCVE
•added 2025/03/26 2:31 p.m.•20 views

CVE-2025-30577

Cross-Site Request Forgery CSRF vulnerability in mendibass Browser Address Bar Color browser-address-bar-color allows Stored XSS.This issue affects Browser Address Bar Color: from n/a through = 3.3...

7.1CVSS7.2AI score0.00182EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/24 2:15 p.m.•15 views

CVE-2025-30577

Cross-Site Request Forgery CSRF vulnerability in mendibass Browser Address Bar Color browser-address-bar-color allows Stored XSS.This issue affects Browser Address Bar Color: from n/a through = 3.3...

7.1CVSS0.00182EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/24 1:47 p.m.•10 views

CVE-2025-30577 WordPress Browser Address Bar Color plugin <= 3.3 - Cross Site Request Forgery (CSRF) to Stored XSS Vulnerability

Cross-Site Request Forgery CSRF vulnerability in mendibass Browser Address Bar Color browser-address-bar-color allows Stored XSS.This issue affects Browser Address Bar Color: from n/a through = 3.3...

7.1CVSS7.3AI score0.00182EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/24 1:47 p.m.•34 views

CVE-2025-30577 WordPress Browser Address Bar Color plugin <= 3.3 - Cross Site Request Forgery (CSRF) to Stored XSS Vulnerability

Cross-Site Request Forgery CSRF vulnerability in mendibass Browser Address Bar Color browser-address-bar-color allows Stored XSS.This issue affects Browser Address Bar Color: from n/a through = 3.3...

7.1CVSS0.00182EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/24 1:32 p.m.•17 views

WordPress Browser Address Bar Color plugin <= 3.3 - Cross Site Request Forgery (CSRF) to Stored XSS Vulnerability

Cross Site Request Forgery CSRF to Stored XSS Vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin Browser Address Bar Color versions = 3.3...

7.1CVSS6.1AI score0.00182EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/03/24 12:00 a.m.•4 views

PT-2025-12622

Name of the Vulnerable Software and Affected Versions mendibass Browser Address Bar Color versions n/a through 3.3 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker could potentially trick a user into performing...

7.1CVSS0.00182EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/03/24 12:00 a.m.•15 views

WordPress plugin Browser Address Bar Color 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

7.1CVSS7.9AI score0.00182EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/24 12:00 a.m.•2 views

CVE-2025-30577: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in mendibass Browser Address Bar Color browser-address-bar-color allows Stored XSS.This issue affects Browser Address Bar Color: from n/a through = 3.3...

7.1CVSS5.8AI score0.00182EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/08/03 12:00 a.m.•17 views

NVIDIA Omniverse Workstation Launcher Security Vulnerability

NVIDIA Omniverse Launcher is an easily extensible open platform from NVIDIA. Built for virtual collaboration and real-time physically accurate simulations. A security vulnerability exists in the NVIDIA Omniverse Workstation Launcher, which stems from a security issue in the authentication process...

5.3CVSS6.9AI score0.00356EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/07/20 12:00 a.m.•32 views

Google Chrome URL Component Data Compromise

The vulnerability of the Google Chrome browser’s URL component is related to insufficient data validation during formatting. Exploiting this vulnerability can allow an attacker to compromise the integrity of data...

4.3CVSS6.6AI score0.01451EPSS
SaveExploits0References11Affected Software5
attackerkb
attackerkb
•added 2020/10/20 1:00 p.m.•11 views

CVE-2020-7363

User Interface UI Misrepresentation of Critical Information vulnerability in the address bar of UCWeb's UC Browser allows an attacker to obfuscate the true source of data as presented in the browser. This issue affects UCWeb's UC Browser version 13.0.8 and prior versions...

4.3CVSS5AI score0.00742EPSS
SaveExploits1References3Affected Software1
The Hacker News
The Hacker News
•added 2013/07/15 5:15 p.m.•10 views

Beware of Fraudulent Sites, phishing for Twitter accounts

There's a scam spreading through Twitter Direct messages DMs and fake emails, appealing users to visit a fake twitter phishing site i.e "twittler.com". Scam uses a hijacked Twitter account to send out direct messages that appear completely legitimate. Security blogger, Janne Ahlberg blogged about...

6.8AI score
SaveExploits0
myhack58
myhack58
•added 2007/02/11 12:00 a.m.•29 views

With ASP Trojan FTP and decompression-vulnerability warning-the black bar safety net

In broilers placed on the website,the most troublesome is probably the update and upload a lot of files, Terminal Services broad daylight easy to be found,open your own ftp and not assured. Your own online in a circle is found by combining the non-component upload asp Trojan can be easily achieve...

7.5AI score
SaveExploits0
myhack58
myhack58
•added 2006/01/02 12:00 a.m.•34 views

Bypass the invitation to join the Windows Live™ Mail-vulnerability warning-the black bar safety net

First, log into your MSN or HOTMAIL modify personal information Language - English Country - United States State - Florida. 2. Put the following address copy into your browser, just IE address bar, enter. http://by101fd.bay101.hotmail.msn.com/cgi-bin/BetaOptIn?page=option&curmbox=0 0 0 0 0 0 0...

0.5AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2005/01/25 12:00 a.m.•29 views

IEurlflaw.txt

All, The following very simple! code calls a URL in the browser window but fails to update the address bar in IE. Looks like the form submission is suspended with the interrupt of the 'window.alert' call. IE then fails to correctly handle. Might be helpful in facilitating phishing style attacks...

7.4AI score
SaveExploits0
Rows per page
Query Builder