Lucene search
+L

3462 matches found

Microsoft KB
Microsoft KB
added 2025/11/11 12:0 a.m.37 views

.NET 9.0 Update - November 11, 2025 (KB5071067)

None None...

6.1AI score
SaveExploits0
Snyk
Snyk
added 2025/11/10 5:52 a.m.4 views

Malicious Package

Overview web-vitals-help is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/10 5:52 a.m.13 views

Malicious code in web-vitals-help (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204b3a82026288b65a149e983d855812d21ccc8c61952dcb037c926c2b3a3452 The package web-vitals-help was found to contain malicious code. Source: ghsa-malware 93e30ad20be59206c5d91e0d2bff19f6c6969c69dc3ebc477ae0c980cc3d242...

6.9AI score
SaveExploits0References1
EUVD
EUVD
added 2025/11/10 5:52 a.m.6 views

EUVD-2025-44031

Malicious code in web-vitals-help npm...

6.6AI score
SaveExploits0References1
OSV
OSV
added 2025/11/10 5:52 a.m.4 views

MAL-2025-55021 Malicious code in web-vitals-help (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204b3a82026288b65a149e983d855812d21ccc8c61952dcb037c926c2b3a3452 The package web-vitals-help was found to contain malicious code. Source: ghsa-malware 93e30ad20be59206c5d91e0d2bff19f6c6969c69dc3ebc477ae0c980cc3d242...

6.8AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/11/05 5:8 a.m.13 views

CVE-2025-12410

The SH Contextual Help plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.1. This is due to missing or incorrect nonce validation in the shcontextualhelpdashboardwidget function. This makes it possible for unauthenticated attackers to update...

6.1CVSS5.3AI score0.00145EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/04 5:16 a.m.21 views

CVE-2025-12410

The SH Contextual Help plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.1. This is due to missing or incorrect nonce validation in the shcontextualhelpdashboardwidget function. This makes it possible for unauthenticated attackers to update...

6.1CVSS0.00145EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2025/11/04 5:4 a.m.13 views

WordPress SH Contextual Help plugin <= 3.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin SH Contextual Help versions = 3.2.1...

6.1CVSS5.7AI score0.00145EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2025/11/04 4:27 a.m.26 views

CVE-2025-12410

CVE-2025-12410 affects the WordPress plugin SH Contextual Help (WordPress SH Contextual Help) up to version 3.2.1. The vulnerability is a CSRF flaw caused by missing or incorrect nonce validation in the function sh_contextual_help_dashboard_widget(), allowing unauthenticated attackers to forge re...

6.1CVSS5AI score0.00145EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/11/04 4:27 a.m.5 views

CVE-2025-12410 SH Contextual Help <= 3.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The SH Contextual Help plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.1. This is due to missing or incorrect nonce validation in the shcontextualhelpdashboardwidget function. This makes it possible for unauthenticated attackers to update...

6.1CVSS5AI score0.00145EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/11/04 12:0 a.m.7 views

WordPress plugin SH Contextual Help 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

6.1CVSS6.4AI score0.00145EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/11/04 12:0 a.m.77 views

PT-2025-44956

The SH Contextual Help plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.1. This is due to missing or incorrect nonce validation in the sh contextual help dashboard widget function. This makes it possible for unauthenticated attackers to...

6.1CVSS5.4AI score0.00145EPSS
SaveExploits0References5
Snyk
Snyk
added 2025/10/16 7:51 a.m.4 views

Malicious Package

Overview redux-saga-help is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2009-0939

Malware in sbrugna...

6.8CVSS6.1AI score0.04193EPSS
SaveExploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2016-10082

Malware in sbrugna...

5.4CVSS5.6AI score0.00521EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2006-6513

Malware in sbrugna...

7.5CVSS6.4AI score0.01117EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2018-9248

Malware in sbrugna...

8.4CVSS8.2AI score0.00384EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2012-0224

Malware in sbrugna...

4.3CVSS6.4AI score0.01584EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2012-2153

Malware in sbrugna...

5.8CVSS8.9AI score0.01843EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2013-5289

Malware in sbrugna...

4.3CVSS6.4AI score0.01148EPSS
SaveExploits0References4
Rows per page
Query Builder