Lucene search
K

155 matches found

Cvelist
Cvelist
added yesterday12 views

CVE-2019-25739 GigToDo Freelance Marketplace Script 1.3 Persistent XSS

GigToDo 1.3 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript and HTML code through the proposal description field. Attackers can craft XSS payloads in the createproposal endpoint that execute when administrators or other...

6.4CVSS
Exploits0References4
Nuclei
Nuclei
added yesterday24 views

WordPress Plugin MF Gig Calendar 0.9.2 - Cross-Site Scripting

A cross-site scripting vulnerability in the MF Gig Calendar plugin 0.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the query string to the calendar page. id: CVE-2012-4242 info: name: WordPress Plugin MF Gig Calendar 0.9.2 - Cross-Site Scripting author:...

4.3CVSS5.8AI score0.06071EPSS
Exploits3References4
Vulnrichment
Vulnrichment
added 2026/04/30 2:30 a.m.2 views

CVE-2026-7470 Tenda 4G300 SafeMacFilter sub_427C3C stack-based overflow

A flaw has been found in Tenda 4G300 US4G300V1.0MtV1.01.42CNTDC01. Affected is the function sub427C3C of the file /goform/SafeMacFilter. This manipulation of the argument page causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may...

9CVSS7.7AI score0.00091EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:0 a.m.1 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013360)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013360 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/mm/identmap: Use gbpages only where full GB page should be mapped. When identpudinit uses onl...

5.5CVSS6.7AI score0.00027EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/03/09 12:0 a.m.1 views

Oracle Linux 8 : osbuild-composer (ELSA-2026-3898)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-3898 advisory. 101.4-4.0.1 - Support using repository definitons with OCI variables JIRA: OLDIS-38657 - Update repositories to contain OCI variables - Remove image...

10CVSS5.9AI score0.00045EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2026/01/09 8:59 a.m.3 views

CVE-2023-50842

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Matthew Fries MF Gig Calendar.This issue affects MF Gig Calendar: from n/a through 1.2.1...

8.8CVSS8.8AI score0.00308EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/19 7:33 a.m.1 views

CVE-2025-58934

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes The Gig thegig allows PHP Local File Inclusion.This issue affects The Gig: from n/a through = 1.18.0...

8.1CVSS7.1AI score0.0011EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/18 9:30 a.m.1 views

EUVD-2025-204161

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes The Gig thegig allows PHP Local File Inclusion.This issue affects The Gig: from n/a through = 1.18.0...

8.1CVSS6.6AI score0.0011EPSS
Exploits0References2
NVD
NVD
added 2025/12/18 8:16 a.m.1 views

CVE-2025-58934

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes The Gig thegig allows PHP Local File Inclusion.This issue affects The Gig: from n/a through = 1.18.0...

8.1CVSS0.0011EPSS
Exploits0References1
OSV
OSV
added 2025/12/18 8:16 a.m.0 views

CVE-2025-58934

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes The Gig thegig allows PHP Local File Inclusion.This issue affects The Gig: from n/a through = 1.18.0...

8.1CVSS5.8AI score
Exploits0References1
CVE
CVE
added 2025/12/18 7:21 a.m.8 views

CVE-2025-58934

CVE-2025-58934 describes an improper filename control vulnerability in the WordPress plugin/theme combination involving The Gig WordPress theme (The Gig) versions up to and including 1.18.0. The issue is described as a PHP Local File Inclusion caused by insufficient validation in Include/Require ...

8.1CVSS6.7AI score0.0011EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/12/18 7:21 a.m.17 views

CVE-2025-58934 WordPress The Gig theme <= 1.18.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes The Gig thegig allows PHP Local File Inclusion.This issue affects The Gig: from n/a through = 1.18.0...

8.1CVSS0.0011EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/18 7:21 a.m.2 views

CVE-2025-58934 WordPress The Gig theme <= 1.18.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes The Gig thegig allows PHP Local File Inclusion.This issue affects The Gig: from n/a through = 1.18.0...

8.1CVSS6.7AI score0.0011EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.1 views

PT-2025-52085

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes The Gig thegig allows PHP Local File Inclusion.This issue affects The Gig: from n/a through = 1.18.0...

7.1AI score0.0011EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.1 views

WordPress plugin The Gig 安全漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

8.1CVSS6.6AI score0.0011EPSS
Exploits0References1
Wired Threat Level
Wired Threat Level
added 2025/12/01 2:0 p.m.2 views

Flock Uses Overseas Gig Workers to Build Its Surveillance AI

An accidental leak revealed that Flock, which has cameras in thousands of US communities, is using workers in the Philippines to review and classify footage...

7AI score
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2012-4186

Malware in sbrugna...

4.3CVSS6.1AI score0.06071EPSS
Exploits3References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-6366

Malware in sbrugna...

8.8CVSS8.7AI score0.00376EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2017-4474

Malware in sbrugna...

6.5CVSS6.4AI score0.04372EPSS
Exploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-6369

Malware in sbrugna...

8.8CVSS8.6AI score0.00376EPSS
Exploits1References3
Rows per page
Query Builder