Lucene search
+L

1574 matches found

Patchstack
Patchstack
added 2026/01/08 1:16 p.m.11 views

WordPress Image&Video FullScreen Background plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Image&Video FullScreen Background versions = 1.6.7...

6.1CVSS6.1AI score0.00263EPSS
SaveExploits0Affected Software1
Redos
Redos
added 2025/12/16 12:0 a.m.10 views

ROS-20251216-7370

A vulnerability in the Fullscreen UI component of Google Chrome and Microsoft Edge browsers is related to information presentation errors in the user interface. Exploitation of the vulnerability could allow an attacker acting remotely to spoof the user interface using a specially crafted HTML pag...

4.2CVSS6.2AI score0.00177EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2025/12/15 6:39 a.m.5 views

CVE-2025-14020

LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct phishing attacks by...

5.4CVSS6.2AI score0.00174EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/15 6:39 a.m.33 views

CVE-2025-14020

LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct phishing attacks by...

5.4CVSS0.00174EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/10 3:13 p.m.8 views

CVE-2025-62093

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Image FullScreen Background lbgfullscreenfullwidthslider allows SQL Injection.This issue affects Image FullScreen Background: from n/a through = 1.6.7...

8.5CVSS7.7AI score0.00305EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/09 6:30 p.m.9 views

EUVD-2025-202035

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Image&Video FullScreen Background lbgfullscreenfullwidthslider allows SQL Injection.This issue affects Image&Video FullScreen Background: from n/a through = 1.6.7...

7.1AI score0.00305EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/09 4:18 p.m.5 views

CVE-2025-62093

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Image&Video FullScreen Background lbgfullscreenfullwidthslider allows SQL Injection.This issue affects Image&Video FullScreen Background: from n/a through = 1.6.7...

8.5CVSS0.00305EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/09 2:52 p.m.13 views

CVE-2025-62093

The CVE-2025-62093 entry concerns the WordPress plugin Image&Video FullScreen Background (lbg_fullscreen_fullwidth_slider) with a SQL Injection vulnerability due to improper neutralization of special elements in SQL commands. Affected versions are 1.6.7 and earlier; the issue is present in the pl...

8.5CVSS7.3AI score0.00305EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 2:52 p.m.1 views

CVE-2025-62093 WordPress Image&Video FullScreen Background plugin <= 1.6.7 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Image&Video FullScreen Background lbgfullscreenfullwidthslider allows SQL Injection.This issue affects Image&Video FullScreen Background: from n/a through = 1.6.7...

8.5CVSS7.3AI score0.00305EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/09 2:52 p.m.30 views

CVE-2025-62093 WordPress Image&Video FullScreen Background plugin <= 1.6.7 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Image&Video FullScreen Background lbgfullscreenfullwidthslider allows SQL Injection.This issue affects Image&Video FullScreen Background: from n/a through = 1.6.7...

8.5CVSS0.00305EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.6 views

WordPress plugin Image&Video FullScreen Background SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin...

8.5CVSS7.6AI score0.00305EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.9 views

PT-2025-49994

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Image&Video FullScreen Background lbg fullscreen fullwidth slider allows SQL Injection.This issue affects Image&Video FullScreen Background: from n/a through = 1.6.7...

7.7AI score0.00305EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/12/03 12:0 a.m.7 views

Fedora 43 : cef (2025-604e02ca72)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-604e02ca72 advisory. Update to 142.0.7444.162 High CVE-2025-12725: Out of bounds write in WebGPU High CVE-2025-12726: Inappropriate implementation in Views High...

8.8CVSS6.9AI score0.06679EPSS
SaveExploits2References26
Redos
Redos
added 2025/12/02 12:0 a.m.10 views

ROS-20251202-09

A vulnerability in the Fullscreen component of the Google Chrome browser is related to presentation errors in the user interface in the user interface. Exploitation of the vulnerability could allow an attacker acting remotely, spoof the user interface using a specially crafted HTML page...

4.3CVSS6.6AI score0.00203EPSS
SaveExploits1
NVD
NVD
added 2025/11/21 6:15 p.m.12 views

CVE-2025-13132

This vulnerability allowed a site to enter fullscreen, after a user click, without a full-screen notification toast appearing. Without this notification, users could potentially be misled about what site they were on if a malicious site renders a fake UI like a fake address bar...

7.4CVSS0.00239EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/11/21 5:55 p.m.12 views

CVE-2025-13132 Dia: Increased Spoof Risk; Missing full screen toast

This vulnerability allowed a site to enter fullscreen, after a user click, without a full-screen notification toast appearing. Without this notification, users could potentially be misled about what site they were on if a malicious site renders a fake UI like a fake address bar...

7.4CVSS6.3AI score0.00239EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/11/21 5:55 p.m.18 views

CVE-2025-13132 Dia: Increased Spoof Risk; Missing full screen toast

This vulnerability allowed a site to enter fullscreen, after a user click, without a full-screen notification toast appearing. Without this notification, users could potentially be misled about what site they were on if a malicious site renders a fake UI like a fake address bar...

7.4CVSS0.00239EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/21 5:55 p.m.22 views

CVE-2025-13132

CVE-2025-13132 affects the "dia" browser (Red Hat/Dia references) where a flaw allows entering fullscreen after a user click without showing the fullscreen notification toast. This could let a malicious site spoof the UI (e.g., fake address bar). Root cause: lack of fullscreen notification. Impac...

7.4CVSS6.3AI score0.00239EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/21 12:0 a.m.20 views

PT-2025-47790

This vulnerability allowed a site to enter fullscreen, after a user click, without a full-screen notification toast appearing. Without this notification, users could potentially be misled about what site they were on if a malicious site renders a fake UI like a fake address bar...

7.4CVSS6.7AI score0.00239EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/11/20 12:0 a.m.5 views

TencentOS Server 3: thunderbird (TSSA-2023:0054)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0054 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

8.8CVSS7.7AI score0.01185EPSS
SaveExploits0References12
Rows per page
Query Builder