Lucene search
+L

1158 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/01/30 4:55 p.m.•8 views

Malicious code in flight_lab_control (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb5d324357d4041717da0277420513760dccbba17821ed9538aa033304d5f073 Any computer that has this package installed or running should be considered...

6.8AI score
SaveExploits0References3
OSV
OSV
•added 2025/01/30 4:55 p.m.•9 views

MAL-2025-659 Malicious code in flight_lab_control (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb5d324357d4041717da0277420513760dccbba17821ed9538aa033304d5f073 Any computer that has this package installed or running should be considered...

7AI score
SaveExploits0References3
NVD
NVD
•added 2025/01/21 1:15 p.m.•24 views

CVE-2024-57946

In the Linux kernel, the following vulnerability has been resolved: virtio-blk: don't keep queue frozen during system suspend Commit 4ce6e2db00de "virtio-blk: Ensure no requests in virtqueues before deleting vqs." replaces queue quiesce with queue freeze in virtio-blk's PM callbacks. And the...

5.5CVSS0.00167EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2025/01/21 12:22 p.m.•31 views

CVE-2024-57946 virtio-blk: don't keep queue frozen during system suspend

In the Linux kernel, the following vulnerability has been resolved: virtio-blk: don't keep queue frozen during system suspend Commit 4ce6e2db00de "virtio-blk: Ensure no requests in virtqueues before deleting vqs." replaces queue quiesce with queue freeze in virtio-blk's PM callbacks. And the...

0.00167EPSS
SaveExploits0References7
NVD
NVD
•added 2025/01/09 4:16 p.m.•14 views

CVE-2025-22824

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lucia.intelisano Live Flight Radar live-flight-radar allows Stored XSS.This issue affects Live Flight Radar: from n/a through = 1.0...

6.5CVSS0.00214EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/09 3:38 p.m.•59 views

CVE-2025-22824

CVE-2025-22824 is documented as a Stored XSS in the Live Flight Radar WordPress plugin. The vulnerability affects Live Flight Radar versions up to 1.0, with the issue described as improper neutralization of input during web page generation. The provided sources do not include version-specific pat...

6.5CVSS7.2AI score0.00214EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/09 3:38 p.m.•4 views

CVE-2025-22824 WordPress Live Flight Radar Plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lucia.intelisano Live Flight Radar live-flight-radar allows Stored XSS.This issue affects Live Flight Radar: from n/a through = 1.0...

6.5CVSS8.6AI score0.00214EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/09 3:38 p.m.•32 views

CVE-2025-22824 WordPress Live Flight Radar Plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lucia.intelisano Live Flight Radar live-flight-radar allows Stored XSS.This issue affects Live Flight Radar: from n/a through = 1.0...

6.5CVSS0.00214EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/09 12:00 a.m.•11 views

PT-2025-4732 · Unknown · Lucia Intelisano Live Flight Radar

Name of the Vulnerable Software and Affected Versions: Lucia Intelisano Live Flight Radar versions prior to 1.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This enables attackers to inject...

6.5CVSS6.7AI score0.00214EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/01/09 12:00 a.m.•10 views

WordPress plugin Live Flight Radar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.6AI score0.00214EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/09 12:00 a.m.•4 views

CVE-2025-22824: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lucia.intelisano Live Flight Radar live-flight-radar allows Stored XSS.This issue affects Live Flight Radar: from n/a through = 1.0...

6.5CVSS5.8AI score0.00214EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/07 9:34 p.m.•10 views

WordPress Live Flight Radar Plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 Patchstack Alliance in WordPress Plugin Live Flight Radar versions = 1.0...

6.5CVSS6.1AI score0.00214EPSS
SaveExploits0Affected Software1
Github Security Blog
Github Security Blog
•added 2024/11/14 6:30 a.m.•26 views

Salt preflight script could be attacker controlled

The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and knows the path to the pre-flight script before it runs they can ensure Salt-SSH runs their script wi...

6.7CVSS6.7AI score0.00187EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2024/11/14 6:30 a.m.•19 views

GHSA-4277-M35Q-7C9W Salt preflight script could be attacker controlled

The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and knows the path to the pre-flight script before it runs they can ensure Salt-SSH runs their script wi...

6.7CVSS6.7AI score0.00187EPSS
SaveExploits0References5
NVD
NVD
•added 2024/11/14 5:15 a.m.•35 views

CVE-2023-34049

The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and knows the path to the pre-flight script before it runs they can ensure Salt-SSH runs their script wi...

6.7CVSS0.00187EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/14 5:15 a.m.•26 views

UBUNTU-CVE-2023-34049

The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and knows the path to the pre-flight script before it runs they can ensure Salt-SSH runs their script wi...

6.7CVSS7.3AI score0.00187EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/11/14 4:13 a.m.•47 views

CVE-2023-34049 Salt security advisory release - 2023-OCT-27

The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and knows the path to the pre-flight script before it runs they can ensure Salt-SSH runs their script wi...

6.7CVSS0.00187EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/14 4:13 a.m.•28 views

CVE-2023-34049 Salt security advisory release - 2023-OCT-27

The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and knows the path to the pre-flight script before it runs they can ensure Salt-SSH runs their script wi...

6.7CVSS6.8AI score0.00187EPSS
SaveExploits0References1
Mend
Mend
•added 2024/11/14 4:13 a.m.•3 views

CVE-2023-34049

The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and knows the path to the pre-flight script before it runs they can ensure Salt-SSH runs their script wi...

6.7CVSS0.00187EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/14 12:00 a.m.•2 views

CVE-2023-34049: Undefined Security Weakness

The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and knows the path to the pre-flight script before it runs they can ensure Salt-SSH runs their script wi...

6.7CVSS6.7AI score0.00187EPSS
SaveExploits0References1
Rows per page
Query Builder