Lucene search
+L

587 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/02/22 9:50 p.m.12 views

Malicious code in en-thrift-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f945d24e348a2afdfccd5c12b3b3a25280087db3e659a2de6002fb29347ce6ec The package en-thrift-internal was found to contain malicious code. Source: ghsa-malware...

5.5AI score
SaveExploits0References1
OSV
OSV
added 2026/02/22 9:50 p.m.11 views

MAL-2026-986 Malicious code in en-thrift-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f945d24e348a2afdfccd5c12b3b3a25280087db3e659a2de6002fb29347ce6ec The package en-thrift-internal was found to contain malicious code. Source: ghsa-malware...

5.6AI score
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/02/11 12:00 a.m.8 views

CVE-2026-2361

PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a temporary view based on a function containing malicious code. When the anon.gettablesampleratio function is then called, the malicious code is executed with superuser privileges. This...

8CVSS5.9AI score0.00277EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/02/04 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-23041

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix NULL pointer crash in bnxtptpenable during error cleanup When bnxtinitone fails...

5.3AI score0.00145EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/01/28 10:25 p.m.193 views

VoltaireExploit

VoltaireExploit 🔓 ⚠️ AVERTISSEMENT: Ce projet est uniquemen...

5.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/01/22 12:00 a.m.5 views

Azure Linux 3.0 Security Update: kernel (CVE-2025-37911)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37911 advisory. - In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix out-of-bound memcpy during...

7.8CVSS7.2AI score0.00198EPSS
SaveExploits0References2
CVE
CVE
added 2026/01/13 3:28 p.m.38 views

CVE-2025-68770

CVE-2025-68770 affects the bnxt_en driver in the Linux kernel. The issue occurs in the XDP_TX path: in bnxt_rx_xdp(), the event flags can be cleared too early when the XDP_TX action is taken again, potentially while the TX ring has no room. This can cause the TX producer to advance without the dr...

7.5CVSS6.1AI score0.00443EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/01/13 3:28 p.m.14 views

CVE-2025-68770

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix XDPTX path For XDPTX action in bnxtrxxdp, clearing of the event flags is not correct. bnxtpollwork - bnxtrxpkt - bnxtrxxdp may be looping within NAPI and some event flags may be set in earlier iterations. In particula...

7.5CVSS5.2AI score0.00443EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/01/13 12:00 a.m.8 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper handling of event flags in the XDPTX path in the bnxten driver, which could result in the TX doorbe...

6.1AI score0.00443EPSS
SaveExploits0References3
Redos
Redos
added 2026/01/13 12:00 a.m.10 views

ROS-20260113-7391

A vulnerability in the bnxtsetrxrxskbmode function of the bnxten component of the Linux kernel is related to pointer dereferencing errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

9.8CVSS6.5AI score0.0062EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/09 8:46 a.m.19 views

CVE-2025-23707

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matamko En Masse en-masse-wp allows Reflected XSS.This issue affects En Masse: from n/a through = 1.0...

7.1CVSS7.2AI score0.00174EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/31 9:30 p.m.8 views

EUVD-2025-206067

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matamko En Masse allows Reflected XSS.This issue affects En Masse: from n/a through 1.0...

7.1CVSS5.9AI score0.00174EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/31 8:15 p.m.8 views

CVE-2025-23707

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matamko En Masse en-masse-wp allows Reflected XSS.This issue affects En Masse: from n/a through = 1.0...

7.1CVSS0.00174EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/12/31 7:56 p.m.6 views

CVE-2025-23707

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matamko En Masse en-masse-wp allows Reflected XSS.This issue affects En Masse: from n/a through = 1.0...

7.1CVSS7.2AI score0.00174EPSS
SaveExploits0References4
CVE
CVE
added 2025/12/31 7:56 p.m.32 views

CVE-2025-23707

CVE-2025-23707 is a reflected Cross‑Site Scripting (XSS) vulnerability in the WordPress plugin En Masse . Public details show the flaw affects the plugin version range “from n/a through 1.0” and stem from improper input neutralization during web page generation. Multiple sources (NVD, Red Hat CVE...

7.1CVSS7.2AI score0.00174EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/31 7:56 p.m.9 views

CVE-2025-23707 WordPress En Masse plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matamko En Masse allows Reflected XSS.This issue affects En Masse: from n/a through 1.0...

7.1CVSS6AI score0.00174EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/31 7:56 p.m.41 views

CVE-2025-23707 WordPress En Masse plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matamko En Masse en-masse-wp allows Reflected XSS.This issue affects En Masse: from n/a through = 1.0...

7.1CVSS0.00174EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.14 views

PT-2025-54440

Name of the Vulnerable Software and Affected Versions Matamko En Masse versions through 1.0 Description The software contains a flaw related to improper input handling during web page generation, which allows for Reflected Cross-site Scripting XSS. This allows an attacker to inject malicious...

7.1CVSS6.5AI score0.00174EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:00 a.m.6 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993077)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993077 advisory. In the Linux kernel, the following vulnerability has been resolved: bnxten: Avoid order-5 memory allocation for TPA data The driver needs to keep track of all the...

5.5CVSS6.2AI score0.00176EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.10 views

WordPress plugin En Masse 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

7.1CVSS7.1AI score0.00174EPSS
SaveExploits0References1
Rows per page
Query Builder