Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

13 matches found

EUVD
EUVD•added 2025/10/03 8:07 p.m.•7 views

EUVD-2024-50930

Malicious code in bioql PyPI...

6.4CVSS8.7AI score0.00337EPSS
SaveExploits0References3
NVD
NVD•added 2025/01/11 8:15 a.m.•8 views

CVE-2024-12519

The TCBD Auto Refresher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tcbdautorefresh' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00337EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2025/01/11 7:21 a.m.•25 views

CVE-2024-12519 TCBD Auto Refresher <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The TCBD Auto Refresher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tcbdautorefresh' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00337EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment•added 2025/01/11 7:21 a.m.•8 views

CVE-2024-12519 TCBD Auto Refresher <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The TCBD Auto Refresher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tcbdautorefresh' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5.8AI score0.00337EPSS
SaveExploits0References3
CVE
CVE•added 2025/01/11 7:21 a.m.•46 views

CVE-2024-12519

CVE-2024-12519 affects the WordPress plugin TCBD Auto Refresher. The vulnerability is a Stored Cross-Site Scripting (XSS) via the plugin’s tcbd_auto_refresh shortcode in all versions up to 2.0, caused by insufficient input sanitization and output escaping for user-supplied attributes. Exploitatio...

6.4CVSS5.7AI score0.00337EPSS
SaveExploits0References3
CNNVD
CNNVD•added 2025/01/11 12:00 a.m.•6 views

WordPress plugin TCBD Auto Refresher 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS7.8AI score0.00337EPSS
SaveExploits0References3
Patchstack
Patchstack•added 2025/01/10 9:33 p.m.•7 views

WordPress TCBD Auto Refresher plugin <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin TCBD Auto Refresher versions = 2.0...

6.4CVSS5.7AI score0.00337EPSS
SaveExploits0References1Affected Software1
Openbugbounty
Openbugbounty•added 2018/02/24 7:33 a.m.•18 views

tsw.uk.forexprostools.com XSS vulnerability

Open Bug Bounty ID: OBB-567056 Description| Value ---|--- Affected Website:| tsw.uk.forexprostools.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

6.4AI score
SaveExploits0
Openbugbounty
Openbugbounty•added 2018/02/24 7:31 a.m.•7 views

tsw.jp.forexprostools.com XSS vulnerability

Open Bug Bounty ID: OBB-567053 Description| Value ---|--- Affected Website:| tsw.jp.forexprostools.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

6.4AI score
SaveExploits0
Openbugbounty
Openbugbounty•added 2018/02/24 7:30 a.m.•9 views

tsw.in.forexprostools.com XSS vulnerability

Open Bug Bounty ID: OBB-567051 Description| Value ---|--- Affected Website:| tsw.in.forexprostools.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

6.4AI score
SaveExploits0
Openbugbounty
Openbugbounty•added 2018/02/24 7:30 a.m.•8 views

tsw.de.forexprostools.com XSS vulnerability

Open Bug Bounty ID: OBB-567048 Description| Value ---|--- Affected Website:| tsw.de.forexprostools.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

6.4AI score
SaveExploits0
Openbugbounty
Openbugbounty•added 2018/02/24 7:24 a.m.•13 views

tsw.se.forexprostools.com XSS vulnerability

Open Bug Bounty ID: OBB-567034 Description| Value ---|--- Affected Website:| tsw.se.forexprostools.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

6.4AI score
SaveExploits0
Openbugbounty
Openbugbounty•added 2016/01/11 3:55 p.m.•9 views

refresher.sk Open Redirect vulnerability

Vulnerable URL: http://refresher.sk/set-lang?lang=cz=http://xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 16.04.2017 Latest check for patch:| 16.04.2017 07:14 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 24825 Google Pagerank| 0...

6.9AI score
SaveExploits0
Rows per page
Query Builder