Lucene search
+L

11773 matches found

Packet Storm
Packet Storm
added 2023/08/29 12:00 a.m.312 views

i-Gallery 3.4 Database Disclosure

==================================================================================================================================== | Title : i-Gallery v3.4 Database Disclosure Exploit | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 108.032-bit | |...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2023/08/29 12:00 a.m.107 views

WordPress InPost Gallery Plugin <= 2.1.4.1 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pluginus:inpostgallery"; ifdescription...

5.4CVSS5.6AI score0.00441EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2023/08/18 7:15 p.m.7 views

CVE-2023-38911

A Cross-Site Scripting XSS vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Gallery parameter in the YouTube URL fields...

5.4CVSS6.4AI score0.00495EPSS
SaveExploits4References4
OSV
OSV
added 2023/08/18 7:15 p.m.7 views

CVE-2023-38911

A Cross-Site Scripting XSS vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Gallery parameter in the YouTube URL fields...

5.4CVSS6.1AI score0.00495EPSS
SaveExploits4References1
Prion
Prion
added 2023/08/18 7:15 p.m.16 views

Cross site scripting

A Cross-Site Scripting XSS vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Gallery parameter in the YouTube URL fields...

4.9CVSS5.4AI score0.00495EPSS
SaveExploits4References1Affected Software1
OSV
OSV
added 2023/08/18 2:15 p.m.7 views

CVE-2023-32107

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Photo Gallery Team Photo Gallery by Ays – Responsive Image Gallery plugin = 5.1.3 versions...

6.1CVSS5.8AI score0.00399EPSS
SaveExploits0References1
NVD
NVD
added 2023/08/18 2:15 p.m.25 views

CVE-2023-32107

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Photo Gallery Team Photo Gallery by Ays – Responsive Image Gallery plugin = 5.1.3 versions...

7.1CVSS6.2AI score0.00399EPSS
SaveExploits0References1
Prion
Prion
added 2023/08/18 2:15 p.m.24 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Photo Gallery Team Photo Gallery by Ays – Responsive Image Gallery plugin = 5.1.3 versions...

5.8CVSS6AI score0.00399EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/08/18 2:00 p.m.62 views

CVE-2023-32107

CVE-2023-32107 affects WordPress Photo Gallery by Ays – Responsive Image Gallery,

7.1CVSS6AI score0.00399EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/08/18 2:00 p.m.32 views

CVE-2023-32107 WordPress Photo Gallery by Ays Plugin <= 5.1.3 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Photo Gallery Team Photo Gallery by Ays – Responsive Image Gallery plugin = 5.1.3 versions...

7.1CVSS6.3AI score0.00399EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/08/18 2:00 p.m.19 views

CVE-2023-32107 WordPress Photo Gallery by Ays Plugin <= 5.1.3 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Photo Gallery Team Photo Gallery by Ays – Responsive Image Gallery plugin = 5.1.3 versions...

7.1CVSS5.8AI score0.00399EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/08/18 12:00 a.m.10 views

PT-2023-36386 · Undefined · Undefined

🚨 CVE-2023-38911 A Cross-Site Scripting XSS vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Gallery parameter in the YouTube URL fields. 🎖@cveNotify...

5.4CVSS5.2AI score0.00495EPSS
SaveExploits4References2
CNNVD
CNNVD
added 2023/08/18 12:00 a.m.10 views

WordPress plugin Photo Gallery by Ays 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6.9AI score0.00399EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/08/18 12:00 a.m.13 views

PT-2023-23617 · Ays · Photo Gallery Team Photo Gallery

Name of the Vulnerable Software and Affected Versions: Photo Gallery Team Photo Gallery by Ays – Responsive Image Gallery plugin versions = 5.1.3 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker could potentially inject...

7.1CVSS6.1AI score0.00399EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/08/18 12:00 a.m.8 views

CSZ CMS 跨站脚本漏洞

CSZ CMS is an open source PHP-based content management system CMS. A security vulnerability exists in CSZ CMS version 1.3.0, which stems from a vulnerability that allows an attacker to execute arbitrary code via the Gallery parameter in the YouTube URL field using a carefully crafted payload...

5.4CVSS6.2AI score0.00495EPSS
SaveExploits4References5
The Hacker News
The Hacker News
added 2023/08/16 11:56 a.m.57 views

Experts Uncover Weaknesses in PowerShell Gallery Enabling Supply Chain Attacks

Active flaws in the PowerShell Gallery could be weaponized by threat actors to pull off supply chain attacks against the registry's users. "These flaws make typosquatting attacks inevitable in this registry, while also making it extremely difficult for users to identify the true owner of a...

6.7AI score
SaveExploits0
Patchstack
Patchstack
added 2023/08/16 12:00 a.m.16 views

WordPress Video Gallery & Management Plugin <= 3.3.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Video Gallery & Management Type Plugin Vulnerable versions = 3.3.5 Fixed in 3.3.6 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-40558 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 30ecd3f7993c Credits thiennv...

8.8CVSS6.6AI score0.00246EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/08/16 12:00 a.m.10 views

WordPress Video gallery and Player Plugin <= 2.6.5 is vulnerable to Broken Access Control

Software Video gallery and Player Type Plugin Vulnerable versions = 2.6.5 Fixed in 2.6.6 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40200 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 27dbac5e56cd Credits Abdi Pranata Require...

5.8AI score0.00236EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/08/16 12:00 a.m.16 views

WordPress Album and Image Gallery plus Lightbox Plugin <= 1.7 is vulnerable to Broken Access Control

Software Album and Image Gallery plus Lightbox Type Plugin Vulnerable versions = 1.7 Fixed in 1.7.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40200 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 0921c0a66b1c Credits Abdi...

5.8AI score0.00236EPSS
SaveExploits0References2Affected Software1
Openbugbounty
Openbugbounty
added 2023/08/15 2:28 a.m.6 views

collection.bendigoartgallery.com.au Cross Site Scripting vulnerability OBB-3583798

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Rows per page
Query Builder