Lucene search
+L

6 matches found

Kitploit
Kitploit
added 2026/09/02 10:41 a.m.5 views

CVE-2023-32961

CVE-2023-32961 이 저장소는 Wordpress Zotpress 플러그인의 XSS 취약점에 관한 것입니다. 구성 요소 세부 정보 구성 요소 이름 Zotpress 취약한 버전 ≤ 7.3.3 구성 요소 슬러그 zotpress 구성 요소 링크 https://wordpress.org/plugins/zotpress/ 사전 요구 사항 인증되지 않음 취약점 세부 정보 짧은 설명 zotpress/lib/admin/admin.accounts.oauth.php의 getrequesttoken 함수는 XSS 공격에 취약합니다. 재현 방법...

7.1CVSS7.1AI score0.0103EPSS
SaveExploits1
SUSE CVE
SUSE CVE
added 2026/08/18 4:54 p.m.9 views

SUSE CVE-2026-72887

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken. Passing a callback to the constructor selects OAuth 1.0a. getrequesttoken then revokes that choice when the request token response omits...

9.8CVSS5.4AI score0.0055EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/08/16 1:50 p.m.7 views

CVE-2026-72887 Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken. Passing a callback to the constructor selects OAuth 1.0a. getrequesttoken then revokes that choice when the request token response omits...

5.3AI score0.0055EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/16 1:50 p.m.48 views

CVE-2026-72887 Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken. Passing a callback to the constructor selects OAuth 1.0a. getrequesttoken then revokes that choice when the request token response omits...

0.0055EPSS
SaveExploits0References5
CVE
CVE
added 2026/08/16 1:50 p.m.56 views

CVE-2026-72887

Net::OAuth::Client (Perl, before 0.32) silently downgrades OAuth 1.0a to OAuth 1.0 in get_request_token when the provider omits oauth_callback_confirmed, dropping oauth_verifier with no warning. This exposes affected applications to OAuth 1.0 session fixation: an attacker obtains a request token,...

9.8CVSS5.4AI score0.0055EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/16 1:50 p.m.18 views

CVE-2026-72887 Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken. Passing a callback to the constructor selects OAuth 1.0a. getrequesttoken then revokes that choice when the request token response omits...

9.8CVSS5.5AI score
SaveExploits0References10
Rows per page
Query Builder