Lucene search
+L

239 matches found

Packet Storm News
Packet Storm News
•added 2025/06/21 12:00 a.m.•13 views

An Advanced Reliability Reserve Incentivizes Flexibility Investments While Safeguarding the Electricity Market

To ensure security of supply in the power sector, many countries are already using or discussing the introduction of capacity mechanisms. Two main types of such mechanisms include capacity markets and capacity reserves. Simultaneously, the expansion of variable renewable energy sources increases...

6.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 6:24 p.m.•14 views

CVE-2021-24614

The Book appointment online WordPress plugin before 1.39 does not sanitise or escape Service Prices before outputting it in the List, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS6AI score0.00617EPSS
SaveExploits2References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/05/16 10:41 a.m.•10 views

Malicious code in sol-prices (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3d95d5a12e7c7a9753ed8a1612ade65f2e5775940dec3eadaefb47ec670bfc1d Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

7.3AI score
SaveExploits0References2
OSV
OSV
•added 2025/05/16 10:41 a.m.•12 views

MAL-2025-5133 Malicious code in sol-prices (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3d95d5a12e7c7a9753ed8a1612ade65f2e5775940dec3eadaefb47ec670bfc1d Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

7.2AI score
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/07 12:00 a.m.•3 views

CVE-2025-47602: Missing Authorization

Missing Authorization vulnerability in ammarahmad786 Calculate Prices based on Distance For WooCommerce calculate-prices-based-on-distance-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Calculate Prices based on Distance For WooCommerce:...

5.4CVSS5.9AI score0.00334EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/07 12:00 a.m.•14 views

WordPress plugin Calculate Prices based on Distance For WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

5.4CVSS6.2AI score0.00334EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/24 12:00 a.m.•4 views

CVE-2025-3280: Improper Neutralization of Special Elements used in an SQL Command

The ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin for WordPress is vulnerable to SQL Injection via the 'attributevaluefilter' parameter in all versions up to, and including, 1.4.9 due to insufficient escaping on the user supplied parameter and lack of sufficient...

6.5CVSS5.7AI score0.00387EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2025/04/18 12:00 a.m.•13 views

Bitcoin'S Edge: Embedded Sentiment in Blockchain Transactional Data

Cryptocurrency blockchains, beyond their primary role as distributed payment systems, are increasingly used to store and share arbitrary content, such as text messages and files. Although often non-financial, this hidden content can impact price movements by conveying private information, shaping...

7AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/01/30 12:00 a.m.•23 views

PT-2025-2180 · WordPress · Event Tickets/Registration

Name of the Vulnerable Software and Affected Versions: Event Tickets and Registration plugin for WordPress versions up to, and including, 5.18.1 Description: The issue allows unauthenticated attackers to view order details of orders they did not place, which includes ticket prices, user emails, a...

5.3CVSS9.4AI score0.00323EPSS
SaveExploits0References8
Malwarebytes
Malwarebytes
•added 2025/01/23 2:35 p.m.•20 views

Warning: Don’t sell or buy a second hand iPhone with TikTok already installed

After TikTok was briefly banned in the US last weekend, an unusual phenomenon unearthed. Reportedly, people are selling iPhones that have TikTok installed for up to $25,000. This may require some explanation, so bear with me. TikTok has had a rough time in the US the last weeks. The ban we...

6.8AI score
SaveExploits0
OSV
OSV
•added 2025/01/17 9:15 a.m.•14 views

CVE-2024-12370

The WP Hotel Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check when adding rooms in all versions up to, and including, 2.1.5. This makes it possible for unauthenticated attackers to add rooms with custom prices...

5.3CVSS7.3AI score0.00318EPSS
SaveExploits0References2
NVD
NVD
•added 2025/01/17 9:15 a.m.•41 views

CVE-2024-12370

The WP Hotel Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check when adding rooms in all versions up to, and including, 2.1.5. This makes it possible for unauthenticated attackers to add rooms with custom prices...

5.3CVSS0.00318EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/01/17 8:25 a.m.•40 views

CVE-2024-12370 WP Hotel Booking <= 2.1.5 - Missing Authorization

The WP Hotel Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check when adding rooms in all versions up to, and including, 2.1.5. This makes it possible for unauthenticated attackers to add rooms with custom prices...

5.3CVSS0.00318EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/01/17 8:25 a.m.•28 views

CVE-2024-12370 WP Hotel Booking <= 2.1.5 - Missing Authorization

The WP Hotel Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check when adding rooms in all versions up to, and including, 2.1.5. This makes it possible for unauthenticated attackers to add rooms with custom prices...

5.3CVSS6.2AI score0.00318EPSS
SaveExploits0References2
CVE
CVE
•added 2025/01/17 8:25 a.m.•71 views

CVE-2024-12370

CVE-2024-12370 affects the WordPress plugin WP Hotel Booking. The vulnerability is an unauthorized data modification flaw caused by a missing capability check when adding rooms, affecting all versions up to 2.1.5. This enables unauthenticated attackers to add rooms with custom prices. The issue i...

5.3CVSS5.1AI score0.00318EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/17 12:00 a.m.•16 views

PT-2025-1825 · WordPress · Wp Hotel Booking

Name of the Vulnerable Software and Affected Versions: WP Hotel Booking plugin for WordPress versions up to and including 2.1.5 Description: The issue allows unauthorized modification of data due to a missing capability check when adding rooms. This makes it possible for unauthenticated attackers...

5.3CVSS9.3AI score0.00318EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•4 views

CVE-2025-22352: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes elex-bulk-edit-products-prices-attributes-for-woocommerce-basic allows Blind SQL Injection.This issue affects ELEX...

7.6CVSS5.8AI score0.00732EPSS
SaveExploits1References1
Patchstack
Patchstack
•added 2025/01/03 2:32 p.m.•20 views

WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes Plugin <= 1.4.9 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Webula Patchstack Alliance in WordPress Plugin ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes versions = 1.4.9...

7.6CVSS8.1AI score0.00732EPSS
SaveExploits1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/07/11 12:37 p.m.•12 views

Malicious code in fasdghjkhjafsd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2384ead182322f38776720b4406ef7589305cdd61f49fa6ae98ae31288b447b2 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-prices-txt-exfiltration Reasons based on the campaign...

7AI score
SaveExploits0References1
OSV
OSV
•added 2024/07/11 12:37 p.m.•7 views

MAL-2024-12271 Malicious code in fasdghjkhjafsd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2384ead182322f38776720b4406ef7589305cdd61f49fa6ae98ae31288b447b2 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-prices-txt-exfiltration Reasons based on the campaign...

6.9AI score
SaveExploits0References1
Rows per page
Query Builder