Lucene search
+L

6 matches found

Kitploit
Kitploit
added 2026/09/02 10:41 a.m.5 views

CVE-2023-32961

CVE-2023-32961 Este repositorio trata sobre una vulnerabilidad de XSS en el plugin Zotpress de WordPress. Detalles del componente Nombre del componente Zotpress Versión vulnerable ≤ 7.3.3 Slug del componente zotpress Enlace del componente https://wordpress.org/plugins/zotpress/ Requisito previo S...

7.1CVSS7AI score0.0103EPSS
SaveExploits1
SUSE CVE
SUSE CVE
added 2026/08/18 4:54 p.m.9 views

SUSE CVE-2026-72887

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken. Passing a callback to the constructor selects OAuth 1.0a. getrequesttoken then revokes that choice when the request token response omits...

9.8CVSS5.4AI score0.0055EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/08/16 1:50 p.m.7 views

CVE-2026-72887 Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken. Passing a callback to the constructor selects OAuth 1.0a. getrequesttoken then revokes that choice when the request token response omits...

5.3AI score0.0055EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/16 1:50 p.m.48 views

CVE-2026-72887 Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken. Passing a callback to the constructor selects OAuth 1.0a. getrequesttoken then revokes that choice when the request token response omits...

0.0055EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/16 1:50 p.m.18 views

CVE-2026-72887 Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken. Passing a callback to the constructor selects OAuth 1.0a. getrequesttoken then revokes that choice when the request token response omits...

9.8CVSS5.5AI score
SaveExploits0References10
CVE
CVE
added 2026/08/16 1:50 p.m.56 views

CVE-2026-72887

Net::OAuth::Client (Perl, before 0.32) silently downgrades OAuth 1.0a to OAuth 1.0 in get_request_token when the provider omits oauth_callback_confirmed, dropping oauth_verifier with no warning. This exposes affected applications to OAuth 1.0 session fixation: an attacker obtains a request token,...

9.8CVSS5.4AI score0.0055EPSS
SaveExploits0References6
Rows per page
Query Builder