Lucene search
+L

884 matches found

The Hacker News
The Hacker News
•added 2025/10/22 12:56 p.m.•24 views

Chinese Threat Actors Exploit ToolShell SharePoint Flaw Weeks After Microsoft's July Patch

Threat actors with ties to China exploited the ToolShell security vulnerability in Microsoft SharePoint to breach a telecommunications company in the Middle East after it was publicly disclosed and patched in July 2025. Also targeted were government departments in an African country, as well as...

9.8CVSS7.1AI score0.99999EPSS
SaveExploits46
The Hacker News
The Hacker News
•added 2025/10/22 8:58 a.m.•21 views

Researchers Identify PassiveNeuron APT Using Neursite and NeuralExecutor Malware

Government, financial, and industrial organizations located in Asia, Africa, and Latin America are the target of a new campaign dubbed PassiveNeuron , according to findings from Kaspersky. The cyber espionage activity was first flagged by the Russian cybersecurity vendor in November 2024, when it...

8.3AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•18 views

WordPress plugin Simple Finance Calculator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS5.6AI score0.00243EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/22 12:00 a.m.•5 views

PT-2025-43329

Name of the Vulnerable Software and Affected Versions weissmike Simple Finance Calculator versions through 1.0 Description The Simple Finance Calculator software contains a flaw related to improper input handling during web page generation, which allows for Reflected Cross-site Scripting XSS. Thi...

7.1CVSS5.8AI score0.00243EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•5 views

CVE-2025-60246: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weissmike Simple Finance Calculator simple-finance-calculator allows Reflected XSS.This issue affects Simple Finance Calculator: from n/a through = 1.0...

7.1CVSS5.8AI score0.00243EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/21 8:20 p.m.•34 views

CVE-2025-61762

Vulnerability in the PeopleSoft Enterprise FIN Payables product of Oracle PeopleSoft component: Payables. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Payables...

6.3CVSS0.002EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/21 8:20 p.m.•13 views

CVE-2025-61758

Vulnerability in the PeopleSoft Enterprise FIN IT Asset Management product of Oracle PeopleSoft component: IT Asset Management. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

6.5CVSS0.00333EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2025/10/18 6:51 a.m.•12 views

Silver Fox Expands Winos 4.0 Attacks to Japan and Malaysia via HoldingHands RAT

The threat actors behind a malware family known as Winos 4.0 aka ValleyRAT have expanded their targeting footprint from China and Taiwan to target Japan and Malaysia with another remote access trojan RAT tracked as HoldingHands RAT aka Gh0stBins. "The campaign relied on phishing emails with PDFs...

6.4AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2025/10/18 6:51 a.m.•53 views

Silver Fox Expands Winos 4.0 Attacks to Japan and Malaysia via HoldingHands RAT

The threat actors behind a malware family known as Winos 4.0 aka ValleyRAT have expanded their targeting footprint from China and Taiwan to target Japan and Malaysia with another remote access trojan RAT tracked as HoldingHands RAT aka Gh0stBins. "The campaign relied on phishing emails with PDFs...

8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/10/15 12:00 a.m.•20 views

The vulnerability of the eProcurement component of the SAP S/4HANA Finance software allows a attacker to execute XSS attacks.

The vulnerability of the eProcurement component of the SAP S/4HANA Finance financial management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

6.4CVSS5.8AI score0.00256EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2025/10/08 1:25 p.m.•19 views

WordPress Simple Finance Calculator plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Simple Finance Calculator versions = 1.0...

7.1CVSS5.8AI score0.00243EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2021-15139

Malware in sbrugna...

6.1CVSS6.2AI score0.01323EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•9 views

EUVD-2019-11346

Malware in sbrugna...

7.5CVSS7.3AI score0.00882EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2021-26361

Malware in sbrugna...

7.5CVSS7.3AI score0.01276EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-27824

Malicious code in bioql PyPI...

8.8CVSS8.5AI score0.00568EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2023-28885

Malicious code in bioql PyPI...

5.4CVSS6.6AI score0.0068EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2022-26810

Malicious code in bioql PyPI...

6.4CVSS7.2AI score0.00566EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2023-40738

Malicious code in bioql PyPI...

7.6CVSS6.6AI score0.00761EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•26 views

EUVD-2022-26698

Malicious code in bioql PyPI...

5.9CVSS6.6AI score0.00634EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2023-26286

Malicious code in bioql PyPI...

5.9CVSS6AI score0.00372EPSS
SaveExploits0References1
Rows per page
Query Builder