Lucene search
+L

778 matches found

Positive Technologies
Positive Technologies
added 2025/09/05 12:0 a.m.8 views

PT-2025-36188

Name of the Vulnerable Software and Affected Versions: Hide Real Download Path versions n/a through 1.6 Description: A Cross-Site Request Forgery CSRF vulnerability exists in Deepak S Hide Real Download Path, which can also lead to Stored Cross-Site Scripting XSS. Recommendations: At the moment,...

7.1CVSS5.2AI score0.00118EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/05 12:0 a.m.4 views

WordPress plugin Hide Real Download Path 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

7.1CVSS5.9AI score0.00118EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/04 8:15 p.m.19 views

CVE-2024-40664

In setupAccessibilityServices of AccessibilityFragment.java , there is a possible way to hide an enabled accessibility service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitati...

6.2CVSS0.00078EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/04 7:28 p.m.4 views

CVE-2024-40664

In setupAccessibilityServices of AccessibilityFragment.java , there is a possible way to hide an enabled accessibility service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitati...

5.6AI score0.00078EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/04 7:28 p.m.39 views

CVE-2024-40664

CVE-2024-40664 describes a logic error in setupAccessibilityServices within AccessibilityFragment.java that may allow hiding an enabled accessibility service, potentially causing local denial of service without extra privileges or user interaction. The vulnerability is documented across multiple ...

6.2CVSS5.6AI score0.00078EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/09/04 6:34 p.m.22 views

CVE-2025-48538

In setApplicationHiddenSettingAsUser of PackageManagerService.java, there is a possible way to hide a system critical package due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitatio...

0.00079EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/09/04 12:0 a.m.9 views

PT-2025-36061

Name of the Vulnerable Software and Affected Versions: PackageManagerService affected versions not specified Description: An issue exists in the setApplicationHiddenSettingAsUser function within PackageManagerService.java due to improper input validation. This could allow an attacker to hide a...

5.5CVSS5.8AI score0.00079EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/09/04 12:0 a.m.11 views

PT-2025-36087

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A logic error in the code within setupAccessibilityServices of AccessibilityFragment.java may allow an attacker to hide an enabled accessibility service. This could result in a local denial...

6.2CVSS6.1AI score0.00078EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/08/16 11:25 a.m.5 views

CVE-2025-49051

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in biscia7 Hide Text Shortcode hide-text-shortcode allows Stored XSS.This issue affects Hide Text Shortcode: from n/a through = 1.1...

6.5CVSS5.9AI score0.0021EPSS
SaveExploits0References1
Debian
Debian
added 2025/08/14 3:26 p.m.11 views

[SECURITY] [DLA 4272-1] aide security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4272-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz August 14, 2025 https://wiki.debian.org/LTS -...

6.2CVSS7.1AI score0.0023EPSS
SaveExploits2
Debian
Debian
added 2025/08/14 2:31 p.m.12 views

[SECURITY] [DSA 5977-1] aide security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5977-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 14, 2025 https://www.debian.org/security/faq -...

6.2CVSS7.1AI score0.0023EPSS
SaveExploits2
NVD
NVD
added 2025/08/14 11:15 a.m.7 views

CVE-2025-49051

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in biscia7 Hide Text Shortcode hide-text-shortcode allows Stored XSS.This issue affects Hide Text Shortcode: from n/a through = 1.1...

6.5CVSS0.0021EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/14 10:34 a.m.1 views

CVE-2025-49051 WordPress Hide Text Shortcode plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in biscia7 Hide Text Shortcode allows Stored XSS. This issue affects Hide Text Shortcode: from n/a through 1.1...

6.5CVSS6.9AI score0.0021EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/14 10:34 a.m.13 views

CVE-2025-49051 WordPress Hide Text Shortcode plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in biscia7 Hide Text Shortcode hide-text-shortcode allows Stored XSS.This issue affects Hide Text Shortcode: from n/a through = 1.1...

6.5CVSS0.0021EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/14 10:34 a.m.14 views

CVE-2025-49051

CVE-2025-49051 (Hide Text Shortcode) affects the WordPress plugin Hide Text Shortcode, version ranges up to and including 1.1. The vulnerability is a stored XSS caused by improper input neutralization during web page generation. Public sources (NVD/Red Hat/patch coverage) corroborate a stored XSS...

6.5CVSS5.9AI score0.0021EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/14 12:0 a.m.6 views

WordPress plugin Hide Text Shortcode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.5CVSS5.7AI score0.0021EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/14 12:0 a.m.8 views

PT-2025-33182 · WordPress · Biscia7 Hide Text Shortcode

Name of the Vulnerable Software and Affected Versions: biscia7 Hide Text Shortcode versions through 1.1 Description: Improper neutralization of input during web page generation allows for stored cross-site scripting XSS. Recommendations: Update biscia7 Hide Text Shortcode to a version later than...

6.5CVSS5.7AI score0.0021EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/14 12:0 a.m.7 views

Debian dsa-5977 : aide - security update

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5977 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5977-1 [email protected]...

6.2CVSS7.6AI score0.0023EPSS
SaveExploits2References7
Patchstack
Patchstack
added 2025/08/13 1:49 p.m.7 views

WordPress Hide Text Shortcode plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin Hide Text Shortcode versions = 1.1...

6.5CVSS5.9AI score0.0021EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/07/30 12:0 a.m.7 views

The Fintech Open Source Foundation GitProxy 安全漏洞

The Fintech Open Source Foundation GitProxy is a The Fintech Open Source Foundation Foundation deployment of custom push protections and policies on top of Git. A security vulnerability exists in The Fintech Open Source Foundation GitProxy 1.19.1 and earlier versions, which stems from the...

7CVSS6.5AI score0.0047EPSS
SaveExploits1References4
Rows per page
Query Builder