19425 matches found
CVE-2025-29369
creationtimestamp| type| source ---|---|--- 2025-04-10 20:49:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11340...
CVE-2022-46178
creationtimestamp| type| source ---|---|--- 2025-04-10 19:49:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11318...
GHSA-832J-56XW-5P7F
creationtimestamp| type| source ---|---|--- 2025-04-10 14:50:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11240...
WordPress License Manager for WooCommerce plugin <= 3.0.9 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis in WordPress Plugin License Manager for WooCommerce versions = 3.0.9...
WordPress Web2application Plugin <= 6.1 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Web2application versions = 6.1...
WordPress SERPed.net Plugin <= 4.6 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin SERPed.net versions = 4.6...
WordPress Zephyr Project Manager plugin <= 3.3.101 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Dimas Maulana in WordPress Plugin Zephyr Project Manager versions = 3.3.101...
Expected Behavior Violation
Overview Affected versions of this package are vulnerable to Expected Behavior Violation due to the behavior of the DisableForwarding directive in sshd8, which fails to disable X11 forwarding and agent forwarding by default. An attacker can bypass intended security restrictions. Remediation A fix...
WordPress Industrial Lite Theme <= 1.0.8 is vulnerable to Broken Access Control
Software Industrial Lite Type Theme Vulnerable versions = 1.0.8 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2025-26955 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1a08c3e67c74 Credits Mika Required privilege Subscrib...
WordPress Accredible Certificates & Open Badges plugin <= 1.4.9 - Authenticated (Administrator+) SQL Injection via orderby Parameter vulnerability
Authenticated Administrator+ SQL Injection via orderby Parameter vulnerability discovered by oncybersec in WordPress Plugin Accredible Certificates & Open Badges versions = 1.4.9...
CVE-2015-10032
creationtimestamp| type| source ---|---|--- 2025-04-09 19:48:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11151...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the LoadArchiveFiles function in archive.go. An attacker can disrupt service by supplying an archive whose decompressed size is very large. Remediation A fix was pushed into the...
WordPress Waymark plugin <= 1.5.3 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by theviper17 in WordPress Plugin Waymark versions = 1.5.3...
WordPress Lock Your Updates Plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Lock Your Updates versions = 1.1...
WordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin Motors versions = 1.4.71...
CVE-2022-46449
creationtimestamp| type| source ---|---|--- 2025-04-09 15:47:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11091...
CVE-2021-47323
creationtimestamp| type| source ---|---|--- 2025-04-09 13:47:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11064...
beslist.be Cross Site Scripting vulnerability OBB-4042730
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...