Lucene search
+L

119 matches found

CVE
CVE
added 2018/10/22 1:00 a.m.57 views

CVE-2018-18553

Leanote 2.6.1 is affected by a cross-site scripting (XSS) vulnerability in the Blog Basic Setting title field, exploitable via rendering of the  Likes page. The issue stems from mishandling the title field during page rendering, allowing injected scripts/HTML to execute in affected contexts. Pub...

6.1CVSS6AI score0.00865EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2018/10/22 1:00 a.m.26 views

CVE-2018-18553

Leanote 2.6.1 has XSS via the Blog Basic Setting title field, which is mishandled during rendering of the "likes" page...

6.1AI score0.00865EPSS
SaveExploits1References1
ThreatPost
ThreatPost
added 2018/10/05 4:16 p.m.16 views

Virus Bulletin 2018: Exposing the Social Media Fraud Ecosystem

MONTREAL — While troll farms, influence campaigns and Twitter bots that spread disinformation have all become high-profile and negative aspects of the social-media universe, new research shows that there is actually a rich and complex supply chain behind these efforts. “Social-media fraud is...

7.4AI score
SaveExploits0References3
OSV
OSV
added 2018/02/17 7:29 a.m.9 views

CVE-2018-5987

SQL Injection exists in the Pinterest Clone Social Pinboard 2.0 component for Joomla! via the pinid or userid parameter in a task=getlikeinfo action, the ends parameter in a view=gift action, the category parameter in a view=home action, the uid parameter in a view=pindisplay action, the searchVa...

9.8CVSS5.8AI score0.02652EPSS
SaveExploits5References1
CNVD
CNVD
added 2018/01/17 12:00 a.m.13 views

WordPress Jetpack plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site. Jetpack is one of the plugin package contains a variety of features such as social sharing, social login and social...

6.1CVSS5.9AI score0.00952EPSS
SaveExploits0References1
Prion
Prion
added 2018/01/12 7:29 p.m.21 views

Design/Logic Flaw

The Jetpack plugin before 4.0.4 for WordPress has XSS via the Likes module...

4.3CVSS6.1AI score0.00952EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2018/01/12 7:29 p.m.22 views

CVE-2016-10705

The Jetpack plugin before 4.0.4 for WordPress has XSS via the Likes module...

6.1CVSS6.1AI score0.00952EPSS
SaveExploits0References2
OSV
OSV
added 2018/01/12 7:29 p.m.17 views

CVE-2016-10705

The Jetpack plugin before 4.0.4 for WordPress has XSS via the Likes module...

6.1CVSS6.2AI score
SaveExploits0References2
CVE
CVE
added 2018/01/12 7:00 p.m.123 views

CVE-2016-10705

The CVE-2016-10705 entry concerns the Jetpack WordPress plugin prior to version 4.0.4, where the Likes module allows cross-site scripting (XSS). The vulnerability is documented across multiple sources (NVD, Red Hat security, CVE databases, WPVulndb) with consistent wording: XSS via the Likes modu...

6.1CVSS6AI score0.00952EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2018/01/12 7:00 p.m.39 views

CVE-2016-10705

The Jetpack plugin before 4.0.4 for WordPress has XSS via the Likes module...

6.1AI score0.00952EPSS
SaveExploits0References2
hackapp
hackapp
added 2017/07/07 7:45 p.m.16 views

Get Instant likes - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Get Instant likes published at the 'play' market has multiple vulnerabilities...

0.6AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2017/05/19 9:56 a.m.14 views

Likes - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Likes published at the 'play' market has multiple vulnerabilities...

0.3AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2017/05/19 9:55 a.m.16 views

Instant Likes - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Instant Likes published at the 'play' market has multiple vulnerabilities...

0.6AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2017/05/19 9:44 a.m.15 views

1000 Likes Booster Pro - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application 1000 Likes Booster Pro published at the 'play' market has multiple vulnerabilities...

0.2AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2017/04/05 9:59 a.m.15 views

Free Likes Face prank - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Free Likes Face prank published at the 'play' market has multiple vulnerabilities...

0.7AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2017/04/01 7:33 p.m.20 views

Virais.club - Instagram Likes - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Virais.club - Instagram Likes published at the 'play' market has multiple vulnerabilities...

0.7AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2017/04/01 7:33 p.m.15 views

Free Boost Instagram Likes Tip - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Free Boost Instagram Likes Tip published at the 'play' market has multiple vulnerabilities...

0.6AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2017/02/16 1:46 a.m.13 views

Real Followers And Likes - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Real Followers And Likes published at the 'play' market has multiple vulnerabilities...

2.3AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2017/02/03 12:38 p.m.24 views

Real Followers And Likes - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Real Followers And Likes published at the 'play' market has multiple vulnerabilities...

2.3AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2017/01/30 4:11 p.m.15 views

Lot Of Likes - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Lot Of Likes published at the 'play' market has multiple vulnerabilities...

0.5AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder