Lucene search
+L

1124 matches found

Vulnrichment
Vulnrichment
added 2026/02/03 12:55 a.m.6 views

CVE-2025-61652 Action API discussiontoolspageinfo does not check for authorizeRead for the page

Vulnerability in Wikimedia Foundation DiscussionTools.This issue affects DiscussionTools: from before 1.43.4, 1.44.1...

6.9CVSS5.3AI score0.00253EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/03 12:55 a.m.35 views

CVE-2025-61652

CVE-2025-61652 affects Wikimedia Foundation DiscussionTools; vulnerable in DiscussionsTools prior to 1.43.4 and 1.44.1. Connected advisories corroborate affected versions across Debian/Ubuntu and OSV records. The Debian security advisory notes fixes inMediaWiki packages: for the stable/trixie rel...

6.9CVSS5.2AI score0.00253EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/02/01 6:38 a.m.12 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the improper versification of user identify in comment posting feature. An attacker can exploit this vulnerability by impersonating a registered user, potentially leading to unauthoriz...

6.9CVSS5.5AI score
SaveExploits0References3
Packet Storm News
Packet Storm News
added 2026/01/27 12:00 a.m.9 views

Who Said CVE? How Vulnerability Identifiers Are Mentioned by Humans, Bots, and Agents in Pull Requests

Vulnerability identifiers such as CVE, CWE, and GHSA are standardised references to known software security issues, yet their use in practice is not well understood. This paper compares vulnerability ID use in GitHub pull requests authored by autonomous agents, bots, and human developers. Using t...

5.9AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/01/26 5:05 a.m.321 views

Exploit for CVE-2026-24061

Youtubehttps://youtu.be...

9.8CVSS5.4AI score0.97878EPSS
SaveExploits67
GithubExploit
GithubExploit
added 2026/01/24 8:42 a.m.202 views

Exploit for CVE-2025-67303

exploit...

7.5CVSS5.4AI score0.01393EPSS
SaveExploits3
GithubExploit
GithubExploit
added 2026/01/13 1:31 p.m.178 views

odfs_rce_poc

Online Discussion Forum Site 1.0 - Remote Code Execution PoC...

7.5AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/09 11:10 a.m.12 views

CVE-2016-10969

The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title...

6.1CVSS5.9AI score0.01046EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:48 a.m.13 views

CVE-2022-31296

Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/viewpost.php...

9.8CVSS8.3AI score0.02424EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:48 a.m.10 views

CVE-2022-31911

Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=deleteteam...

7.2CVSS8.1AI score0.00929EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:48 a.m.10 views

CVE-2022-31294

An issue in the saveusers function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts...

6.5CVSS7AI score0.00836EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:46 a.m.10 views

CVE-2022-31295

An issue in the deletepost function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts...

7.5CVSS7AI score0.01374EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:14 a.m.17 views

CVE-2022-23546

In version 2.9.0.beta14 of Discourse, an open-source discussion platform, maliciously embedded urls can leak an admin's digest of recent topics, possibly exposing private information. A patch is available for version 2.9.0.beta15. There are no known workarounds for this issue...

5.5CVSS7AI score0.0028EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:14 a.m.10 views

CVE-2024-2690

A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0. It has been classified as critical. Affected is an unknown function of the file /uupdate.php. The manipulation of the argument ima leads to unrestricted upload. It is possible to launch the attack remotely. The exploit...

9.8CVSS7AI score0.01046EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:09 a.m.18 views

CVE-2024-2360

parisneo/lollms-webui is vulnerable to path traversal attacks that can lead to remote code execution due to insufficient sanitization of user-supplied input in the 'Database path' and 'PDF LaTeX path' settings. An attacker can exploit this vulnerability by manipulating these settings to execute...

9.8CVSS8.2AI score0.01869EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/12/31 11:06 a.m.12 views

CVE-2025-69023

Missing Authorization vulnerability in Marketing Fire Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Discussion Board: from n/a through = 2.5.7...

4.3CVSS7AI score0.00177EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/30 12:30 p.m.10 views

EUVD-2025-205721

Missing Authorization vulnerability in Marketing Fire Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Discussion Board: from n/a through = 2.5.7...

6.5AI score0.00177EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/30 11:16 a.m.9 views

CVE-2025-69023

Missing Authorization vulnerability in Marketing Fire Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Discussion Board: from n/a through = 2.5.7...

4.3CVSS0.00177EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/30 10:47 a.m.6 views

CVE-2025-69023 WordPress Discussion Board plugin <= 2.5.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Marketing Fire Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Discussion Board: from n/a through = 2.5.7...

4.3CVSS6.6AI score0.00177EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/30 10:47 a.m.21 views

CVE-2025-69023

Technical details about CVE-2025-69023 are not provided in the supplied documents. No affected product version, impact, or remediation specifics are disclosed here; monitor for updates in the referenced sources.

4.3CVSS6.6AI score0.00177EPSS
SaveExploits0References1
Rows per page
Query Builder