CVE-2014-4123

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:31:43+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971603 2025-02-23 02:10:06+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2026-02-02...

CVE-2017-0222

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:26:43+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971265 2025-02-23 02:10:13+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2026-02-02...

CVE-2019-1297

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 11:55:23+00:00| seen| https://t.me/arpsyndicate/1197 2024-12-24 20:28:02+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971352 2025-02-23 02:10:23+00:00|...

CVE-2017-12237

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:27:35+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971322 2025-02-23 02:10:14+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2026-02-02...

CVE-2019-1385

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 16:24:36+00:00| seen| https://t.me/arpsyndicate/1249 2024-02-11 15:06:53+00:00| seen| https://t.me/ctinow/182809 2024-03-15 08:58:02+00:00| seen| https://t.me/ptsoft/2...

CVE-2019-1130

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-03-15 08:58:02+00:00| seen| https://t.me/ptsoft/243 2024-05-03 09:04:40+00:00| published-proof-of-concept| https://t.me/ptsoft/270 2024-12-24 20:30:58+00:00| seen|...

DokuWiki 跨站脚本漏洞

DokuWiki is an easy-to-use and versatile open source Wiki software. A security vulnerability exists in versions of DokuWiki prior to 2023-04-04a, which originated from allowing XSS via RSS feeds...

CVE-2023-34362

creationtimestamp| type| source ---|---|--- 2023-06-02 18:37:26+00:00| exploited| https://t.me/cibsecurity/64889 2023-06-03 20:36:45+00:00| seen| MISP/4a0ea337-6c2a-4806-ba26-4521609b1d06 2023-06-04 09:13:30+00:00| seen| Telegram/RSCktmF4Nxh0hg6x76OzqUoGI-OFLYF1t3wy8YJnDHLKc 2023-06-04...

WordPress Custom Twitter Feeds (Tweets Widget) Plugin < 2.0 CSRF Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:smashballoon:customtwitterfeeds"; if description...

CVE-2023-24604

OX App Suite before backend 7.10.6-rev37 does not check HTTP header lengths when downloading, e.g., potentially allowing a crafted iCal feed to provide an unlimited amount of header data...

CVE-2022-33974

Cross-Site Request Forgery CSRF vulnerability in Smash Balloon Custom Twitter Feeds Tweets Widget plugin = 1.8.4 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Smash Balloon Custom Twitter Feeds Tweets Widget plugin = 1.8.4 versions...

CVE-2022-33974 WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Smash Balloon Custom Twitter Feeds Tweets Widget plugin = 1.8.4 versions...

CVE-2022-33974

The CVE-2022-33974 entry concerns the WordPress plugin Smash Balloon Custom Twitter Feeds (Tweets Widget) with versions

CVE-2022-33974 WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Smash Balloon Custom Twitter Feeds Tweets Widget plugin = 1.8.4 versions...

WordPress Plugin Custom Twitter Feeds 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

PT-2023-19705 · Open Xchange · Ox App Suite

Name of the Vulnerable Software and Affected Versions: OX App Suite versions prior to 7.10.6-rev37 Description: The issue concerns a lack of size limit checks when downloading data, potentially allowing a crafted iCal feed to provide an unlimited amount of data. This could be exploited, for...

PT-2023-13331 · WordPress · Smash Balloon Custom Twitter Feeds

Name of the Vulnerable Software and Affected Versions: Smash Balloon Custom Twitter Feeds Tweets Widget plugin versions = 1.8.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

PT-2023-19706 · Open Xchange · Ox App Suite

Name of the Vulnerable Software and Affected Versions: OX App Suite versions prior to 7.10.6-rev37 Description: The issue concerns the lack of HTTP header length checks when downloading data, such as iCal feeds. This could potentially allow a crafted feed to provide an excessive amount of header...

CVE-2022-33974: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Smash Balloon Custom Twitter Feeds Tweets Widget plugin = 1.8.4 versions...