Lucene search
+L

7 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-31209

Malicious code in bioql PyPI...

5.3CVSS6.5AI score0.00367EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/09/27 3:47 a.m.•28 views

CVE-2025-10745

The Banhammer – Monitor Site Traffic, Block Bad Users and Bots plugin for WordPress is vulnerable to Blocking Bypass in all versions up to, and including, 3.4.8. This is due to a site-wide “secret key” being deterministically generated from a constant character set using md5 and base64encode and...

5.3CVSS5.9AI score0.00367EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/26 3:25 a.m.•26 views

CVE-2025-10745 Banhammer – Monitor Site Traffic, Block Bad Users and Bots <= 3.4.8 - Unauthenticated Protection Mechanism Bypass

The Banhammer – Monitor Site Traffic, Block Bad Users and Bots plugin for WordPress is vulnerable to Blocking Bypass in all versions up to, and including, 3.4.8. This is due to a site-wide “secret key” being deterministically generated from a constant character set using md5 and base64encode and...

5.3CVSS0.00367EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/26 12:00 a.m.•5 views

CVE-2025-10745: Use of Insufficiently Random Values

The Banhammer – Monitor Site Traffic, Block Bad Users and Bots plugin for WordPress is vulnerable to Blocking Bypass in all versions up to, and including, 3.4.8. This is due to a site-wide “secret key” being deterministically generated from a constant character set using md5 and base64encode and...

5.3CVSS5.7AI score0.00367EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2023/02/15 4:16 a.m.•9 views

SUSE CVE-2019-5885

Matrix Synapse before 0.34.0.1, when the macaroonsecretkey authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers to impersonate users...

7.5CVSS7.8AI score0.02438EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/05 12:00 a.m.•2 views

CVE-2019-2317: Use of Insufficiently Random Values

The secret key used to make the Initial Sequence Number in the TCP SYN packet could be brute forced and therefore can be predicted in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

9.8CVSS8.2AI score0.00674EPSS
SaveExploits0References2
OSV
OSV
•added 2019/03/21 4:01 p.m.•9 views

DEBIAN-CVE-2019-5885

Matrix Synapse before 0.34.0.1, when the macaroonsecretkey authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers to impersonate users...

7.5CVSS7.1AI score0.02438EPSS
SaveExploits0References1
Rows per page
Query Builder