Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:8 p.m.2 views

CVE-2026-2430

The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the lazy-loading image processing in all versions up to, and including, 3.1.14. This is due to the use of an overly permissive regular expression in the addlazyload function that replaces all occurrences of \ssr...

6.4CVSS6AI score0.00048EPSS
Exploits0References1
OSV
OSV
added 2026/03/21 12:16 a.m.3 views

CVE-2026-2430

The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the lazy-loading image processing in all versions up to, and including, 3.1.14. This is due to the use of an overly permissive regular expression in the addlazyload function that replaces all occurrences of \ssr...

6.4CVSS6AI score
Exploits0References5
Cvelist
Cvelist
added 2026/03/20 11:25 p.m.21 views

CVE-2026-2430 Autoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy-loaded Image Attributes

The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the lazy-loading image processing in all versions up to, and including, 3.1.14. This is due to the use of an overly permissive regular expression in the addlazyload function that replaces all occurrences of \ssr...

6.4CVSS0.00048EPSS
Exploits0References5
GithubExploit
GithubExploit
added 2025/12/04 1:40 a.m.125 views

Exploit for CVE-2025-55182

CVE-2025-55182 Raw HTTP Requests to exploit the insecure lazy...

10CVSS7.4AI score0.82011EPSS
Exploits358
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2014-9818

Malware in sbrugna...

7.5CVSS6.3AI score0.00132EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/09/05 9:16 a.m.2 views

CVE-2014-125127

The mikecao/flight PHP framework in versions prior to v1.2 is vulnerable to Denial of Service DoS attacks due to eager loading of request bodies in the Request class constructor. The framework automatically reads the entire request body on every HTTP request, regardless of whether the application...

7.5CVSS7AI score0.00132EPSS
Exploits1References1
NVD
NVD
added 2025/09/03 9:15 a.m.2 views

CVE-2014-125127

The mikecao/flight PHP framework in versions prior to v1.2 is vulnerable to Denial of Service DoS attacks due to eager loading of request bodies in the Request class constructor. The framework automatically reads the entire request body on every HTTP request, regardless of whether the application...

7.5CVSS0.00132EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/09/03 8:35 a.m.4 views

CVE-2014-125127 Denial of Service (DoS) vulnerability in mikecao/flight

The mikecao/flight PHP framework in versions prior to v1.2 is vulnerable to Denial of Service DoS attacks due to eager loading of request bodies in the Request class constructor. The framework automatically reads the entire request body on every HTTP request, regardless of whether the application...

7.5CVSS0.00132EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/09/03 12:0 a.m.1 views

PT-2025-35706

Name of the Vulnerable Software and Affected Versions: mikecao/flight versions prior to v1.2 Description: The mikecao/flight PHP framework is susceptible to Denial of Service DoS attacks. This is due to the eager loading of request bodies within the Request class constructor. The framework...

7.5CVSS6.4AI score0.00132EPSS
Exploits1References6
OSV
OSV
added 2025/02/03 9:1 a.m.4 views

MAL-2025-1141 Malicious code in lazy-loading-router-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e86c543eb73f7bba257e00eb5c1e644a38195948dacb89094dc45204e6d8d8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/02/03 9:1 a.m.2 views

Malicious code in lazy-loading-router-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e86c543eb73f7bba257e00eb5c1e644a38195948dacb89094dc45204e6d8d8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2024/10/16 12:22 p.m.3 views

MAL-2024-9464 Malicious code in @frontend-performance/image-lazy-loading (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/16 12:22 p.m.2 views

Malicious code in @frontend-performance/image-lazy-loading (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
Microsoft KB
Microsoft KB
added 2022/11/08 8:0 a.m.97 views

Description of the security update for SharePoint Server 2019: September 13, 2022 (KB5002258)

Description of the security update for SharePoint Server 2019: September 13, 2022 KB5002258 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability and Microsoft SharePoint remote code execution vulnerability. To learn more about the vulnerabilities...

8.8CVSS8.1AI score0.38418EPSS
Exploits0
Jake Archibald's Blog
Jake Archibald's Blog
added 2020/07/29 1:0 a.m.34 views

Different versions of your site can be running at the same time

It's pretty easy for a user to be running an old version of your site. Not only that, but a user could be running many different versions of your site at the same time, in different tabs, and that's kinda terrifying. For instance: 1. A user opens your site. 2. You deploy an update. 3. The user...

6.6AI score
Exploits0
Rows per page
Query Builder