65425 matches found
EUVD-2025-210029
The WP Nano AD plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘blogrolelink’ parameter in all versions up to, and including, 1.31 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...
CVE-2025-5085 wp-nano-ad <= 1.31 - Authenticated (Administrator+) Stored Cross-Site Scripting via blogrole_link Parameter
The WP Nano AD plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘blogrolelink’ parameter in all versions up to, and including, 1.31 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...
CVE-2025-5085
The WP Nano AD plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘blogrolelink’ parameter in all versions up to, and including, 1.31 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...
CVE-2026-10566
creationtimestamp| type| source ---|---|--- 2026-06-02 05:36:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbupmoxoy2b...
CVE-2026-10529
creationtimestamp| type| source ---|---|--- 2026-06-02 05:24:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbu5ppuib2c...
CVE-2026-10548
creationtimestamp| type| source ---|---|--- 2026-06-02 05:06:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbt5gaofz22...
CVE-2026-3871
creationtimestamp| type| source ---|---|--- 2026-06-02 05:03:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbsxh4jly2j...
CVE-2026-10100
creationtimestamp| type| source ---|---|--- 2026-06-02 04:52:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbsehigoh22 2026-06-08 11:30:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnrleigsid2n...
CVE-2026-3198
creationtimestamp| type| source ---|---|--- 2026-06-02 04:48:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbs4zpp6f2f...
CVE-2026-10581
A flaw has been found in DedeCMS 5.7.88. Affected by this vulnerability is the function base64decode of the file /plus/download.php?open=1. This manipulation of the argument Link causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has been published and...
CVE-2026-10510
creationtimestamp| type| source ---|---|--- 2026-06-02 03:01:39+00:00| seen| https://infosec.exchange/users/offseq/statuses/116678277579231176...
EUVD-2026-33878
A flaw has been found in DedeCMS 5.7.88. Affected by this vulnerability is the function base64decode of the file /plus/download.php?open=1. This manipulation of the argument Link causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has been published and...
CVE-2026-25258
creationtimestamp| type| source ---|---|--- 2026-06-02 00:41:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbe7zcwhy2z...
EUVD-2026-33799
In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
Google Chrome 安全漏洞
Google Chrome is a web browser developed by the American company Google. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability, which originated from an improper implementation in the Link Preview component. Remote attackers could bypass navigation restrictions throu...
PT-2026-46546
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description An inappropriate implementation in the Link Preview feature allows a remote attacker who has already compromised the renderer process to bypass navigation restrictions by using a...
PT-2026-45698
The WP Nano AD plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘blogrole link’ parameter in all versions up to, and including, 1.31 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via unbounded caching of StringLinkRelation instances. An attacker can cause denial of service by supplying a large number of unique link relation values, causing the static cache to...