Lucene search
+L

26 matches found

Kitploit
Kitploit
•added 2026/10/08 6:26 a.m.•21 views

Awesome-FOFA

Awesome-FOFA Library 📒 中文 README Get Started with FOFA A Beginner’s Guide How to Get Free F-point from FOFA? FOFA and AI Next-Generation Attack Surface Inventory: Free Trial Available! Basic scenario How to use FOFA to discover free LLM resources? Elevating FOFA Search Efficiency through Novel...

9.9CVSS8.2AI score0.98972EPSS
SaveExploits29References30
Kitploit
Kitploit
•added 2026/10/04 3:22 p.m.•12 views

Cybersecurity-Resources

Cybersecurity-Resources A Library of various cybersecurity resources...

6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/07 1:08 p.m.•42 views

Malicious code in resource-library-engine (npm)

--- -= Per source details. Do not edit below this line.=-...

5.9AI score
SaveExploits0References1
OSV
OSV
•added 2026/07/07 1:08 p.m.•19 views

MAL-2026-7387 Malicious code in resource-library-engine (npm)

--- -= Per source details. Do not edit below this line.=-...

6.1AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/13 3:59 a.m.•12 views

CVE-2025-14354

The Resource Library for Logged In Users plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5. This is due to missing nonce validation on multiple administrative functions. This makes it possible for unauthenticated attackers to perform variou...

4.3CVSS5.8AI score0.00165EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/12 6:31 a.m.•18 views

EUVD-2025-202989

The Resource Library for Logged In Users plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. This is due to missing nonce validation on multiple administrative functions. This makes it possible for unauthenticated attackers to perform variou...

4.3CVSS4.9AI score0.00165EPSS
SaveExploits0References8
NVD
NVD
•added 2025/12/12 4:15 a.m.•36 views

CVE-2025-14354

The Resource Library for Logged In Users plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5. This is due to missing nonce validation on multiple administrative functions. This makes it possible for unauthenticated attackers to perform variou...

4.3CVSS0.00165EPSS
SaveExploits0References8
CVE
CVE
•added 2025/12/12 3:20 a.m.•34 views

CVE-2025-14354

CVE-2025-14354 covers the WordPress plugin Resource Library for Logged In Users . Connected documentation confirms a CSRF vulnerability due to missing nonce validation on multiple administrative actions, allowing unauthenticated attackers to cause create/edit/delete operations by luring a site ad...

4.3CVSS5.6AI score0.00165EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2025/12/12 3:20 a.m.•48 views

CVE-2025-14354 Resource Library for Logged In Users <= 1.5 - Cross-Site Request Forgery to Multiple Administrative Actions

The Resource Library for Logged In Users plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5. This is due to missing nonce validation on multiple administrative functions. This makes it possible for unauthenticated attackers to perform variou...

4.3CVSS0.00165EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2025/12/12 3:20 a.m.•11 views

CVE-2025-14354 Resource Library for Logged In Users <= 1.5 - Cross-Site Request Forgery to Multiple Administrative Actions

The Resource Library for Logged In Users plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5. This is due to missing nonce validation on multiple administrative functions. This makes it possible for unauthenticated attackers to perform variou...

4.3CVSS5.6AI score0.00165EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2025/12/12 12:00 a.m.•23 views

PT-2025-50866

The Resource Library for Logged In Users plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. This is due to missing nonce validation on multiple administrative functions. This makes it possible for unauthenticated attackers to perform variou...

4.3CVSS5.4AI score0.00165EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2025/12/12 12:00 a.m.•16 views

WordPress plugin Resource Library for Logged In Users 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL-based...

4.3CVSS6.3AI score0.00165EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/12 12:00 a.m.•3 views

CVE-2025-14354: Cross-Site Request Forgery (CSRF)

The Resource Library for Logged In Users plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5. This is due to missing nonce validation on multiple administrative functions. This makes it possible for unauthenticated attackers to perform variou...

4.3CVSS5.5AI score0.00165EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/12/11 11:35 p.m.•17 views

WordPress Resource Library for Logged In Users plugin <= 1.4 - Cross-Site Request Forgery to Multiple Administrative Actions vulnerability

Cross-Site Request Forgery to Multiple Administrative Actions vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin Resource Library for Logged In Users versions = 1.4...

4.3CVSS6.8AI score0.00165EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/09/10 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2023-28628

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lambdaisland/uri is a pure Clojure/ClojureScript URI library. In versions prior to 1.14.120 authority- regex allows an attacker to send malicious URLs to be...

6.1CVSS6.4AI score0.00548EPSS
SaveExploits1References3
OSV
OSV
•added 2023/07/26 3:15 p.m.•17 views

CVE-2023-3622

Access Control Bypass Vulnerability in the SolarWinds Platform that allows an underprivileged user to read arbitrary resource...

4.3CVSS5.9AI score0.00751EPSS
SaveExploits0References2
CISA
CISA
•added 2022/09/02 12:00 a.m.•22 views

CISA, NSA, and ODNI Release Part One of Guidance on Securing the Software Supply Chain

CISA, the National Security Agency NSA, and the Office of the Director of National Intelligence ODNI, have published part one of a three-part joint publication series, Securing Software Supply Chain Series - Recommended Practices for Developers. This guidance—created by the Enduring Security...

1.5AI score
SaveExploits0References4
OSV
OSV
•added 2020/12/17 11:15 p.m.•13 views

CVE-2020-12523

On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration. For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by device configuration. After a reboot these ports g...

9.1CVSS7.3AI score0.00899EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2020/10/27 11:30 a.m.•37 views

TASER - Python3 Resource Library For Creating Security Related Tooling

TASER T esting A nd SE ecurity R esource is a Python resource library used to simplify the process of creating offensive security tooling, especially those relating to web or external assessments. It's modular design makes it easy for code to be customized and re-purposed in a variety of scenario...

7.6AI score
SaveExploits0References3
CNVD
CNVD
•added 2020/09/04 12:00 a.m.•10 views

File Upload Vulnerability in the Application Resource Library Platform of Xiamen NetZhongwei Software Co.

Xiamen net in the net software limited company is specialized in accounting class teaching teaching software product development, service, sales enterprises. A file upload vulnerability exists in the application repository platform of Xiamen NetZhongwei Software Co. An attacker can use the...

7.1AI score
SaveExploits0
Rows per page
Query Builder