Lucene search
+L

11221 matches found

RedhatCVE
RedhatCVE
added 2025/05/09 3:25 p.m.16 views

CVE-2025-47455

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks Integration for WooCommerce and Salesforce woo-salesforce-plugin-crm-perks allows Phishing.This issue affects Integration for WooCommerce and Salesforce: from n/a through = 1.7.5...

4.7CVSS7.2AI score0.00309EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/09 3:25 p.m.14 views

CVE-2025-47644

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in formsintegrations Integrations of Zoho CRM with Elementor form integrations-of-zoho-crm-with-elementor-form allows Phishing.This issue affects Integrations of Zoho CRM with Elementor form: from n/a through = 1.0.8...

4.7CVSS7.2AI score0.00309EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/05/09 12:00 a.m.13 views

The vulnerability of software for integrating old and new technologies from IBM EntireX arises from incorrect restrictions on XML references to external objects, allowing attackers to disclose protected information.

The vulnerability of the software for integrating old and new technologies from IBM EntireX is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

7.5CVSS5.4AI score0.00368EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/09 12:00 a.m.12 views

The vulnerability of software for integrating old and new technologies from IBM EntireX, related to a processing error in exception states, allows a perpetrator to trigger a service failure.

The vulnerability of the software for integrating old and new technologies from IBM EntireX is related to an error in handling exceptional states. Exploiting this vulnerability can allow a perpetrator to trigger a service failure...

5.5CVSS5.5AI score0.00141EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/08 2:28 p.m.26 views

Security Bulletin: IBM Integration Bus for z/OS is vulnerable to NULL Pointer Dereference and Out-of-bounds Write due to IBM Java ( CVE-2025-1470 & CVE-2025-1471)

Summary IBM Integration Bus for z/OS runtime is vulnerable to NULL Pointer Dereference and Out-of-bounds Write due to IBM Java. Vulnerability Details CVEID:CVE-2025-1470 DESCRIPTION: In Eclipse OMR, from the initial contribution to version 0.4.0, some OMR internal port library and utilities...

7.8CVSS6.6AI score0.00179EPSS
SaveExploits0Affected Software1
Kitploit
Kitploit
added 2025/05/08 12:30 p.m.961 views

ByeDPIAndroid - App To Bypass Censorship On Android

Android application that runs a local VPN service to bypass DPI Deep Packet Inspection and censorship. This application runs a SOCKS5 proxy ByeDPI and redirects all traffic through it. Installation Or use Obtainium 1. Install Obtainium 2. Add the app by URL:...

7.2AI score
SaveExploits0References9
Packet Storm News
Packet Storm News
added 2025/05/08 12:00 a.m.16 views

Privacy-Preserving Transformers: SwiftKey'S Differential Privacy Implementation

In this paper we train a transformer using differential privacy DP for language modeling in SwiftKey. We run multiple experiments to balance the trade-off between the model size, run-time speed and accuracy. We show that we get small and consistent gains in the next-word-prediction and accuracy...

6.9AI score
SaveExploits0
Rockylinux
Rockylinux
added 2025/05/07 7:11 p.m.9 views

gvfs bug fix update

An update is available for gvfs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GVFS is the GNOME Desktop Virtual File System layer that allows users to easily...

7.1AI score
SaveExploits0
NVD
NVD
added 2025/05/07 3:15 p.m.23 views

CVE-2025-47455

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks Integration for WooCommerce and Salesforce woo-salesforce-plugin-crm-perks allows Phishing.This issue affects Integration for WooCommerce and Salesforce: from n/a through = 1.7.5...

4.7CVSS0.00309EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/07 2:20 p.m.10 views

CVE-2025-47644 WordPress Integrations of Zoho CRM with Elementor form plugin <= 1.0.8 - Open Redirection Vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in formsintegrations Integrations of Zoho CRM with Elementor form integrations-of-zoho-crm-with-elementor-form allows Phishing.This issue affects Integrations of Zoho CRM with Elementor form: from n/a through = 1.0.8...

4.7CVSS8.5AI score0.00309EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/07 2:19 p.m.9 views

CVE-2025-47455 WordPress Integration for WooCommerce and Salesforce <= 1.7.5 - Open Redirection Vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks Integration for WooCommerce and Salesforce allows Phishing. This issue affects Integration for WooCommerce and Salesforce: from n/a through 1.7.5...

4.7CVSS4.8AI score0.00309EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/07 2:19 p.m.64 views

CVE-2025-47455

CVE-2025-47455 describes an Open Redirect vulnerability in the WordPress plugin Integration for WooCommerce and Salesforce (CRM Perks Integrations) affecting versions up to 1.7.5. The issue enables phishing via redirection to untrusted sites. Connected sources confirm the affected software and th...

4.7CVSS7.2AI score0.00309EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/05/07 12:27 p.m.10 views

WordPress Integration for WooCommerce and Salesforce plugin <= 1.7.5 - Open Redirection Vulnerability

Open Redirection Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Integration for WooCommerce and Salesforce versions = 1.7.5...

4.7CVSS8.2AI score0.00309EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/05/07 12:00 a.m.7 views

WordPress plugin Integration for WooCommerce and Salesforce 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation...

4.7CVSS6AI score0.00309EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
added 2025/05/07 12:00 a.m.17 views

Applied Post Quantum Cryptography: a Practical Approach for Generating Certificates in Industrial Environments

The transition to post-quantum cryptography PQC presents significant challenges for certificate-based identity management in industrial environments, where secure onboarding of devices relies on long-lived and interoperable credentials. This work analyzes the integration of PQC into X.509...

6.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/05/07 12:00 a.m.11 views

PT-2025-20140 · WordPress · Contact Form 7 – Paypal & Stripe Add-On

Name of the Vulnerable Software and Affected Versions: Contact Form 7 – PayPal & Stripe Add-on versions through 2.3.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS. This means an...

5.9CVSS6.1AI score0.00264EPSS
SaveExploits0References3
Packet Storm News
Packet Storm News
added 2025/05/07 12:00 a.m.13 views

Safeguard-By-Development: a Privacy-Enhanced Development Paradigm for Multi-Agent Collaboration Systems

Multi-agent collaboration systems MACS, powered by large language models LLMs, solve complex problems efficiently by leveraging each agent's specialization and communication between agents. However, the inherent exchange of information between agents and their interaction with external...

7.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/05/05 12:00 a.m.14 views

The vulnerability of the CI/CD system’s registration data protection mechanism in TeamCity allows unauthorized access by attackers, enabling them to obtain unauthorized access to protected information.

The vulnerability of the CI/CD application integration and delivery system of JetBrains TeamCity is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

4.3CVSS5.5AI score0.00944EPSS
SaveExploits0References2Affected Software1
Citrix
Citrix
added 2025/05/05 12:00 a.m.37 views

NetScaler RDP proxy -14.1- How to configure RDP proxy with RDS server

This article explains how to configure an RDP Proxy Gateway with an RDS server. Key Points to Note: -If you are using an RDS server, you will need an RDP server profile where the RDP IP is set as the RDS server IP. -For the RDP Host, enter the FQDN of the Gateway Virtual Server. This is required...

7AI score
SaveExploits0
Fedora
Fedora
added 2025/05/03 2:09 a.m.31 views

[SECURITY] Fedora 42 Update: nodejs-bash-language-server-5.6.0-2.fc42

Bash language server implementation based on Tree Sitter and its grammar for Bash with explainshell integration...

6.5CVSS7.4AI score0.00221EPSS
SaveExploits1
Rows per page
Query Builder