Lucene search
+L

5257 matches found

Kitploit
Kitploit
added 2024/04/24 2:23 a.m.212 views

C2-Tracker - Live Feed Of C2 Servers, Tools, And Botnets

Free to use IOC feed for various tools/malware. It started out for just C2 tools but has morphed into tracking infostealers and botnets as well. It uses shodan.io/"Shodan searches to collect the IPs. The most recent collection is always stored in data; the IPs are broken down by tool and there is...

7.1AI score
SaveExploits0References13
WPVulnDB
WPVulnDB
added 2024/04/24 12:00 a.m.22 views

Product Feed PRO for WooCommerce by AdTribes – WooCommerce Product Feeds for Google, Facebook/Meta, Bing, & More < 13.3.2 - Sensitive Information Exposure via Log Files

Description The Product Feed PRO for WooCommerce by AdTribes – WooCommerce Product Feeds for Google, Facebook/Meta, Bing, & More plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 13.3.1 via log files. This makes it possible for...

5.3CVSS6.6AI score0.00443EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/04/22 7:47 a.m.87 views

CVE-2024-32690

CVE-2024-32690 affects the WordPress RSS Feed Widget by Fahad Mahmood. The issue is a Stored XSS vulnerability in input handling during web page generation, as described in the initial document and echoed by Red Hat/ENISA entries. Affected versions are the plugin from unknown start through 2.9.7....

5.9CVSS5.2AI score0.00338EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/22 7:47 a.m.35 views

CVE-2024-32690 WordPress RSS Feed Widget plugin <= 2.9.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fahad Mahmood RSS Feed Widget allows Stored XSS.This issue affects RSS Feed Widget: from n/a through 2.9.7...

5.9CVSS5.2AI score0.00338EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/04/22 12:00 a.m.13 views

PT-2024-24777 · Unknown · Fahad Mahmood Rss Feed Widget

Name of the Vulnerable Software and Affected Versions: Fahad Mahmood RSS Feed Widget versions 2.9.7 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can injec...

5.9CVSS6.1AI score0.00338EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/04/22 12:00 a.m.11 views

WordPress plugin RSS Feed Widget 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.9CVSS6.4AI score0.00338EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/04/19 1:39 p.m.12 views

WordPress RSS Feed Widget plugin <= 2.9.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin RSS Feed Widget versions = 2.9.7...

5.9CVSS6.1AI score0.00338EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/04/19 12:00 a.m.22 views

WordPress RSS Feed Widget Plugin <= 2.9.7 is vulnerable to Cross Site Scripting (XSS)

Software RSS Feed Widget Type Plugin Vulnerable versions = 2.9.7 Fixed in 2.9.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32690 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 730c04b1b99e Credits Joshua Chan Required privilege...

5.9CVSS6.6AI score0.00338EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/04/17 12:51 p.m.8 views

WordPress Easy Social Feed plugin < 6.5.6 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Easy Social Feed versions 6.5.6...

5.3CVSS7.6AI score0.00303EPSS
SaveExploits2References1Affected Software1
NVD
NVD
added 2024/04/17 8:15 a.m.31 views

CVE-2024-32519

Missing Authorization vulnerability in GutenGeek GG Woo Feed for WooCommerce.This issue affects GG Woo Feed for WooCommerce: from n/a through 1.2.6...

4.3CVSS4.7AI score0.00337EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/17 8:15 a.m.23 views

CVE-2024-32513

Insertion of Sensitive Information into Log File vulnerability in AdTribes.Io Product Feed PRO for WooCommerce.This issue affects Product Feed PRO for WooCommerce: from n/a through 13.3.1...

5.3CVSS5.3AI score0.00443EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/17 8:03 a.m.106 views

CVE-2024-32513

CVE-2024-32513 affects Product Feed PRO for WooCommerce (AdTribes) and corresponds to an Information Exposure via log files vulnerability. Public details show affected versions up to 13.3.1 (n/a to 13.3.1) with Patch Status as Patched; CVSS v3.1 base score 5.3 (Medium). Connected sources indicate...

5.3CVSS5.2AI score0.00443EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/17 8:03 a.m.28 views

CVE-2024-32513 WordPress Product Feed PRO for WooCommerce plugin <= 13.3.1 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information into Log File vulnerability in AdTribes.Io Product Feed PRO for WooCommerce.This issue affects Product Feed PRO for WooCommerce: from n/a through 13.3.1...

5.3CVSS5.2AI score0.00443EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/17 7:34 a.m.30 views

CVE-2024-32519 WordPress GG Woo Feed for WooCommerce plugin <= 1.2.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in GutenGeek GG Woo Feed for WooCommerce.This issue affects GG Woo Feed for WooCommerce: from n/a through 1.2.6...

4.3CVSS5AI score0.00337EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/17 7:34 a.m.18 views

CVE-2024-32519 WordPress GG Woo Feed for WooCommerce plugin <= 1.2.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in GutenGeek GG Woo Feed for WooCommerce.This issue affects GG Woo Feed for WooCommerce: from n/a through 1.2.6...

4.3CVSS7AI score0.00337EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/17 5:15 a.m.11 views

CVE-2024-1219

The Easy Social Feed WordPress plugin before 6.5.6 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

5.3CVSS5.8AI score0.00303EPSS
SaveExploits2References1
NVD
NVD
added 2024/04/17 5:15 a.m.13 views

CVE-2024-1219

The Easy Social Feed WordPress plugin before 6.5.6 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

5.3CVSS5.6AI score0.00303EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2024/04/17 5:00 a.m.21 views

CVE-2024-1219 Easy Social Feed < 6.5.6 - Contributor+ Stored XSS

The Easy Social Feed WordPress plugin before 6.5.6 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

5.8AI score0.00303EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2024/04/17 5:00 a.m.12 views

CVE-2024-1219 Easy Social Feed < 6.5.6 - Contributor+ Stored XSS

The Easy Social Feed WordPress plugin before 6.5.6 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

5.2AI score0.00303EPSS
SaveExploits2References1
CVE
CVE
added 2024/04/17 5:00 a.m.86 views

CVE-2024-1219

CVE-2024-1219 affects the WordPress plugin Easy Social Feed (pre-6.5.6). The issue is that some shortcode attributes are not validated or escaped before being output, enabling Stored XSS by a user with as little as a contributor to potentially affect admin users. Public references in the connecte...

5.3CVSS7.9AI score0.00303EPSS
SaveExploits2References1Affected Software1
Rows per page
Query Builder