Lucene search
+L

1903 matches found

Kitploit
Kitploit
added 2026/09/04 10:59 a.m.3 views

smalien

Smalien Smalien is an information flow analysis and information leakage detection tool for Android application analysts. Smalien performs static taint analysis of Android applications on a Linux machine as well as dynamic taint analysis, detection of information leakage due to implicit informatio...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/04 6:32 a.m.31 views

spamscanner

Spam Scanner is the best anti-spam, , and service...

5.9AI score
SaveExploits0References4
Nuclei
Nuclei
added 2026/09/04 2:04 a.m.22 views

Privacy Policy Genius - Cross-Site Scripting

Privacy Policy Genius WordPress plugin v2.0.4 contains a reflected cross-site scripting caused by unsanitized parameter output in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL. id: CVE-2024-13219...

6.1CVSS7.2AI score0.00581EPSS
SaveExploits1References2
NVD
NVD
added 2026/08/26 6:16 a.m.8 views

CVE-2026-16984

The Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates WordPress plugin before 3.7.1 does not include an authorization check on a REST route that returns stored account data, allowing unauthenticated visitors to retrieve the connected service's API secr...

6.5CVSS0.00338EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/26 6:00 a.m.8 views

EUVD-2026-66271

The Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates WordPress plugin before 3.7.1 does not include an authorization check on a REST route that returns stored account data, allowing unauthenticated visitors to retrieve the connected service's API secr...

6.5CVSS5.5AI score0.00338EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/26 12:00 a.m.13 views

PT-2026-81948

The Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates WordPress plugin before 3.7.1 does not include an authorization check on a REST route that returns stored account data, allowing unauthenticated visitors to retrieve the connected service's API secr...

5.4AI score0.00338EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/09 11:16 a.m.16 views

CVE-2026-4298

The DSGVO All in one for WP plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 4.9. This is due to the dsgvoresetpolicyservicefunc function lacking both capability checks and nonce verification while processing user-supplied parameters to reset plugin...

4.3CVSS0.00354EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/09 9:31 a.m.41 views

CVE-2026-4298 DSGVO All in one for WP <= 4.9 - Missing Authorization to Authenticated (Subscriber+) Settings Reset

The DSGVO All in one for WP plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 4.9. This is due to the dsgvoresetpolicyservicefunc function lacking both capability checks and nonce verification while processing user-supplied parameters to reset plugin...

4.3CVSS0.00354EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/09 9:31 a.m.12 views

CVE-2026-4298

The DSGVO All in one for WP plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 4.9. This is due to the dsgvoresetpolicyservicefunc function lacking both capability checks and nonce verification while processing user-supplied parameters to reset plugin...

4.3CVSS5.9AI score0.00354EPSS
SaveExploits0References7
PyPA
PyPA
added 2026/07/07 11:45 a.m.18 views

Fides JavaScript Injection Vulnerability in Privacy Center URL

ImpactThe Fides web application allows users to edit consent and privacy notices such as cookie banners. These privacy notices can then be served by other integrated websites, for example in cookie consent banners. One of the editable fields is a privacy policy URL and this input was found to not...

5.4CVSS6.1AI score0.00607EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2026/07/07 11:45 a.m.10 views

PYSEC-2026-1340 Fides JavaScript Injection Vulnerability in Privacy Center URL

Impact The Fides web application allows users to edit consent and privacy notices such as cookie banners. These privacy notices can then be served by other integrated websites, for example in cookie consent banners. One of the editable fields is a privacy policy URL and this input was found to no...

3.9CVSS6.1AI score0.00607EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2026/07/07 2:32 a.m.13 views

SUSE CVE-2026-14092

Insufficient policy enforcement in Privacy in Google Chrome prior to 150.0.7871.47 allowed an attacker in a privileged network position to leak cross-origin data via malicious network traffic. Chromium security severity: Low...

4.3CVSS6AI score0.00183EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
added 2026/07/03 2:00 p.m.53 views

Chromium: CVE-2026-14092 Insufficient policy enforcement in Privacy

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.3CVSS5.9AI score0.00183EPSS
SaveExploits0
EUVD
EUVD
added 2026/07/01 12:34 a.m.16 views

EUVD-2026-40779

Insufficient policy enforcement in Privacy in Google Chrome prior to 150.0.7871.47 allowed an attacker in a privileged network position to leak cross-origin data via malicious network traffic. Chromium security severity: Low...

5.8AI score0.00183EPSS
SaveExploits0References3
NVD
NVD
added 2026/06/30 11:17 p.m.15 views

CVE-2026-14092

Insufficient policy enforcement in Privacy in Google Chrome prior to 150.0.7871.47 allowed an attacker in a privileged network position to leak cross-origin data via malicious network traffic. Chromium security severity: Low...

4.3CVSS0.00183EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/30 11:17 p.m.11 views

DEBIAN-CVE-2026-14092

Insufficient policy enforcement in Privacy in Google Chrome prior to 150.0.7871.47 allowed an attacker in a privileged network position to leak cross-origin data via malicious network traffic. Chromium security severity: Low...

4.3CVSS5.8AI score0.00183EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/30 10:39 p.m.107 views

CVE-2026-14092

CVE-2026-14092 affects Google Chrome (Chromium-based privacy policy enforcement). It describes insufficient policy enforcement in Privacy in Chrome prior to 150.0.7871.47, enabling an attacker in a privileged network position to leak cross-origin data via malicious network traffic. The CVSS base ...

4.3CVSS5.8AI score0.00183EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/06/30 10:39 p.m.62 views

CVE-2026-14092

Insufficient policy enforcement in Privacy in Google Chrome prior to 150.0.7871.47 allowed an attacker in a privileged network position to leak cross-origin data via malicious network traffic. Chromium security severity: Low...

0.00183EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/06/30 10:39 p.m.13 views

CVE-2026-14092

Insufficient policy enforcement in Privacy in Google Chrome prior to 150.0.7871.47 allowed an attacker in a privileged network position to leak cross-origin data via malicious network traffic. Chromium security severity: Low...

4.3CVSS5.8AI score0.00183EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/30 12:00 a.m.30 views

PT-2026-54367

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description Insufficient policy enforcement in the Privacy component allows an attacker in a privileged network position to leak cross-origin data through the use of malicious network traffic...

9.8CVSS6AI score0.00503EPSS
SaveExploits0References447
Rows per page
Query Builder