Lucene search
+L

23 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2024-28360

Malicious code in bioql PyPI...

7.1CVSS8.6AI score0.00419EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 9:47 a.m.•16 views

CVE-2024-30439

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BestWebSoft Limit Attempts by BestWebSoft allows Reflected XSS.This issue affects Limit Attempts by BestWebSoft: from n/a through 1.2.9...

7.1CVSS8.6AI score0.00419EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/04 1:17 p.m.•37 views

CVE-2024-51558

This vulnerability exists in the Wave 2.0 due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack against legitimate user OTP, MPIN or password, which could lead to gain...

9.8CVSS5.8AI score0.00568EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/29 6:15 p.m.•27 views

CVE-2024-30439

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BestWebSoft Limit Attempts by BestWebSoft allows Reflected XSS.This issue affects Limit Attempts by BestWebSoft: from n/a through 1.2.9...

7.1CVSS6.9AI score0.00419EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/29 5:19 p.m.•79 views

CVE-2024-30439

CVE-2024-30439 is a reflected XSS in BestWebSoft Limit Attempts plugin for WordPress, caused by improper neutralization of input during web page generation. Affected versions are from n/a up to 1.2.9. Public records (Red Hat entry) confirm the root cause and vulnerability class but do not specify...

7.1CVSS8.6AI score0.00419EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/29 5:19 p.m.•38 views

CVE-2024-30439 WordPress Limit Attempts by BestWebSoft plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BestWebSoft Limit Attempts by BestWebSoft allows Reflected XSS.This issue affects Limit Attempts by BestWebSoft: from n/a through 1.2.9...

7.1CVSS7.1AI score0.00419EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/03/29 12:00 a.m.•20 views

WordPress Plugin Limit Attempts by BestWebSoft 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress Plugin Limit Attempts by BestWebSoft A...

7.1CVSS7.5AI score0.00419EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/03/29 12:00 a.m.•16 views

PT-2024-23367 · Bestwebsoft · Limit Attempts

Name of the Vulnerable Software and Affected Versions: Limit Attempts by BestWebSoft versions 1.2.9 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...

7.1CVSS9.3AI score0.00419EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/29 12:00 a.m.•5 views

CVE-2024-30439: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BestWebSoft Limit Attempts by BestWebSoft allows Reflected XSS.This issue affects Limit Attempts by BestWebSoft: from n/a through 1.2.9...

7.1CVSS5.8AI score0.00419EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/04/29 12:00 a.m.•17 views

PT-2023-8053 · Eurotel · Eurotel Etl3100

Name of the Vulnerable Software and Affected Versions: EuroTel ETL3100 versions v01c01 and v01x37 Description: The issue is related to the lack of limitations on authentication attempts, which can be exploited by a remote attacker to gain full access to the system through brute-force guessing of...

9.8CVSS9.6AI score0.00769EPSS
SaveExploits1References8
CNVD
CNVD
•added 2019/08/28 12:00 a.m.•16 views

WordPress limit-attempts plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blogs on PHP and MySQL servers. limit-attempts is a website security plugin that targets spam and brute-force attacks. A SQL injection vulnerability exists in the WordPres...

9.8CVSS8AI score0.01795EPSS
SaveExploits0References1
NVD
NVD
•added 2019/08/22 1:15 p.m.•35 views

CVE-2015-9335

The limit-attempts plugin before 1.1.1 for WordPress has SQL injection during IP address handling...

9.8CVSS10AI score0.01795EPSS
SaveExploits0References1
Prion
Prion
•added 2019/08/22 1:15 p.m.•20 views

Sql injection

The limit-attempts plugin before 1.1.1 for WordPress has SQL injection during IP address handling...

7.5CVSS8.4AI score0.01795EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2019/08/22 12:17 p.m.•2 views

CVE-2015-9335

The limit-attempts plugin before 1.1.1 for WordPress has SQL injection during IP address handling...

9.8CVSS0.01795EPSS
SaveExploits0References1
CVE
CVE
•added 2019/08/22 12:17 p.m.•67 views

CVE-2015-9335

CVE-2015-9335 : A SQL injection vulnerability exists in the WordPress limit-attempts plugin prior to version 1.1.1 during IP address handling. This affects the plugin used with WordPress, enabling potentially unauthorized SQL commands through crafted input. The CVSS indications show high impact (...

9.8CVSS9.9AI score0.01795EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/08/22 12:17 p.m.•43 views

CVE-2015-9335

The limit-attempts plugin before 1.1.1 for WordPress has SQL injection during IP address handling...

10AI score0.01795EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/08/22 12:00 a.m.•4 views

PT-2019-7294

Name of the Vulnerable Software and Affected Versions WordPress limit-attempts plugin versions prior to 1.1.1 Description The issue concerns SQL injection during IP address handling. Recommendations For versions prior to 1.1.1, update to version 1.1.1 or later to resolve the issue...

9.8CVSS0.01795EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/22 12:00 a.m.•6 views

CVE-2015-9335: Improper Neutralization of Special Elements used in an SQL Command

The limit-attempts plugin before 1.1.1 for WordPress has SQL injection during IP address handling...

9.8CVSS5.8AI score0.01795EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/05/22 12:00 a.m.•8 views

PT-2017-15230

Name of the Vulnerable Software and Affected Versions Captcha versions prior to 4.3.0 Car Rental versions prior to 1.0.5 Contact Form Multi versions prior to 1.2.1 Contact Form versions prior to 4.0.6 Contact Form to DB versions prior to 1.5.7 Custom Admin Page versions prior to 0.1.2 Custom Fiel...

6.1CVSS0.00886EPSS
SaveExploits0References4
Packet Storm
Packet Storm
•added 2015/12/17 12:00 a.m.•46 views

WordPress Limit Attempts 1.0.3 Cross Site Scripting

Plugin Name : Limit Attempts Effected Version : 1.0.3 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept : The following fields put the payload a...

7.4AI score
SaveExploits0
Rows per page
Query Builder