Lucene search
+L

37 matches found

Snyk
Snyk
•added 2026/03/13 8:03 p.m.•12 views

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the fetchKey function. An attacker can cause the server to make arbitrary HTTP requests to attacker-controlled destinations by crafting a JWT with malicious claim values that are interpolated into th...

9.3CVSS7.1AI score0.00372EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/03/13 8:03 p.m.•12 views

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the fetchKey function. An attacker can cause the server to make arbitrary HTTP requests to attacker-controlled destinations by crafting a JWT with malicious claim values that are interpolated into th...

9.3CVSS7.1AI score0.00372EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/03/13 8:03 p.m.•12 views

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the fetchKey function. An attacker can cause the server to make arbitrary HTTP requests to attacker-controlled destinations by crafting a JWT with malicious claim values that are interpolated into th...

9.3CVSS7.1AI score0.00372EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/03/13 8:03 p.m.•16 views

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the fetchKey function. An attacker can cause the server to make arbitrary HTTP requests to attacker-controlled destinations by crafting a JWT with malicious claim values that are interpolated into th...

9.3CVSS7.1AI score0.00372EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/03/13 8:03 p.m.•9 views

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the fetchKey function. An attacker can cause the server to make arbitrary HTTP requests to attacker-controlled destinations by crafting a JWT with malicious claim values that are interpolated into th...

9.3CVSS7.1AI score0.00372EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2026/01/09 9:17 a.m.•21 views

CVE-2025-23985

Cross-Site Request Forgery CSRF vulnerability in brainvireinfo Dynamic URL SEO dynamic-url-seo allows Cross Site Request Forgery.This issue affects Dynamic URL SEO: from n/a through = 1.0...

5.4CVSS7.2AI score0.00143EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:49 a.m.•15 views

CVE-2025-23984

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brainvireinfo Dynamic URL SEO dynamic-url-seo allows Reflected XSS.This issue affects Dynamic URL SEO: from n/a through = 1.0...

7.1CVSS8.1AI score0.00324EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2025-3583

Malicious code in bioql PyPI...

5.4CVSS9.1AI score0.00143EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2024-46020

Malicious code in bioql PyPI...

7.1CVSS7.9AI score0.00271EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-3582

Malicious code in bioql PyPI...

7.1CVSS7.9AI score0.00324EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 12:12 p.m.•22 views

CVE-2024-52470

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brainvireinfo Dynamic URL SEO dynamic-url-seo allows Reflected XSS.This issue affects Dynamic URL SEO: from n/a through = 1.0...

7.1CVSS7.2AI score0.00271EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/03 3:15 p.m.•12 views

CVE-2025-23984

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brainvireinfo Dynamic URL SEO dynamic-url-seo allows Reflected XSS.This issue affects Dynamic URL SEO: from n/a through = 1.0...

7.1CVSS0.00324EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/03 2:23 p.m.•13 views

CVE-2025-23984 WordPress Dynamic URL SEO plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brainvireinfo Dynamic URL SEO dynamic-url-seo allows Reflected XSS.This issue affects Dynamic URL SEO: from n/a through = 1.0...

7.1CVSS7.2AI score0.00324EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/03 2:23 p.m.•72 views

CVE-2025-23984

CVE-2025-23984 is a confirmed reflected XSS in the WordPress plugin “Dynamic URL SEO” (versions up to 1.0). The vulnerability arises from improper input neutralization during dynamic page generation, enabling reflected XSS. Affected software is the Dynamic URL SEO plugin

7.1CVSS7.2AI score0.00324EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/03 2:23 p.m.•35 views

CVE-2025-23984 WordPress Dynamic URL SEO plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brainvireinfo Dynamic URL SEO dynamic-url-seo allows Reflected XSS.This issue affects Dynamic URL SEO: from n/a through = 1.0...

7.1CVSS0.00324EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/02/03 12:00 a.m.•13 views

WordPress Dynamic URL SEO plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin Dynamic URL SEO versions = 1.0...

7.1CVSS6.1AI score0.00324EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/02/03 12:00 a.m.•4 views

PT-2025-5245

Name of the Vulnerable Software and Affected Versions Brainvireinfo Dynamic URL SEO versions n/a through 1.0 Description The issue is related to improper neutralization of input during web page generation, which allows for Cross-site Scripting XSS attacks, specifically Reflected XSS...

7.1CVSS0.00324EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/02/03 12:00 a.m.•16 views

WordPress plugin Dynamic URL SEO cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

7.1CVSS8.3AI score0.00324EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/03 12:00 a.m.•7 views

CVE-2025-23984: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brainvireinfo Dynamic URL SEO dynamic-url-seo allows Reflected XSS.This issue affects Dynamic URL SEO: from n/a through = 1.0...

7.1CVSS5.8AI score0.00324EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/31 9:15 a.m.•17 views

CVE-2025-23985

Cross-Site Request Forgery CSRF vulnerability in brainvireinfo Dynamic URL SEO dynamic-url-seo allows Cross Site Request Forgery.This issue affects Dynamic URL SEO: from n/a through = 1.0...

5.4CVSS0.00143EPSS
SaveExploits0References1
Rows per page
Query Builder