Lucene search
+L

607 matches found

Patchstack
Patchstack
added 2025/09/30 5:38 p.m.12 views

WordPress CF7 Auto Responder Addon plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin CF7 Auto Responder Addon versions = 2.4...

7.1CVSS6.1AI score0.00226EPSS
SaveExploits0Affected Software1
Malwarebytes
Malwarebytes
added 2025/09/24 12:34 p.m.11 views

Police using drones to read your license plates, warns EFF

Police are using drones as flying automated license plate readers ALPRs, according to a report by the Electronic Frontier Foundation EFF. And where there is a market, a provider will jump in. Or was it the other way around this time? Flock Safety, for example, recently told a group of potential l...

6.3AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/09/07 2:33 p.m.5 views

CVE-2025-58801

Cross-Site Request Forgery CSRF vulnerability in KCS Responder responder allows Cross Site Request Forgery.This issue affects Responder: from n/a through = 4.3.8...

5.4CVSS5.9AI score0.00136EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/05 2:15 p.m.6 views

CVE-2025-58801

Cross-Site Request Forgery CSRF vulnerability in KCS Responder responder allows Cross Site Request Forgery.This issue affects Responder: from n/a through = 4.3.8...

5.4CVSS0.00136EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/05 1:45 p.m.2 views

CVE-2025-58801 WordPress Responder Plugin <= 4.3.8 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in KCS Responder responder allows Cross Site Request Forgery.This issue affects Responder: from n/a through = 4.3.8...

5.4CVSS5.9AI score0.00136EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/05 1:45 p.m.14 views

CVE-2025-58801

CVE-2025-58801 (WordPress Responder Plugin) : CSRF vulnerability affecting WordPress Responder plugin versions up to 4.3.8. Exploitation could allow unauthorized actions on behalf of authenticated users. Root cause is CSRF in the Responder plugin; CVSSv3.1 base score 5.4 (Medium). Public referenc...

5.4CVSS5.9AI score0.00136EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/05 1:45 p.m.16 views

CVE-2025-58801 WordPress Responder Plugin <= 4.3.8 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in KCS Responder responder allows Cross Site Request Forgery.This issue affects Responder: from n/a through = 4.3.8...

5.4CVSS0.00136EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/09/05 1:22 p.m.7 views

WordPress Responder Plugin <= 4.3.8 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Responder versions = 4.3.8...

5.4CVSS6.6AI score0.00136EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/05 12:00 a.m.6 views

PT-2025-36141

Name of the Vulnerable Software and Affected Versions: KCS Responder versions through 4.3.8 Description: KCS Responder is susceptible to a Cross-Site Request Forgery CSRF issue, which allows attackers to perform actions on behalf of authenticated users. Recommendations: Versions prior to 4.3.9 ar...

5.4CVSS6.2AI score0.00136EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/05 12:00 a.m.6 views

WordPress plugin Responder 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

5.4CVSS6.5AI score0.00136EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2025/06/14 6:46 a.m.280 views

Exploit for External Control of File Name or Path in Microsoft

VIETNAMESE - Với file CVE-2025-24054.py và Exploit.librar...

6.5CVSS7.2AI score0.58909EPSS
SaveExploits20
Citrix
Citrix
added 2025/06/03 12:00 a.m.21 views

NetScaler-13.1-How to limit the IP subnets to access LB vServer with responder policy in NetScaler?

How to allow only specified IP subnets to access LB virtual server with responder policy in NetScaler?...

7.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/06/03 12:00 a.m.8 views

Cisco Emergency Responder Privilege Escalation (cisco-sa-cucm-kkhZbHR5)

According to its self-reported version, Cisco Emergency Responder is affected by privilege escalation vulnerability. - A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate privileges to root on an...

5.1CVSS5.7AI score0.00139EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2025/05/28 12:21 a.m.576 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-24071 PoC SMB + TAR Extraction Method This is a Po...

6.5CVSS7.8AI score0.24638EPSS
SaveExploits22
Citrix
Citrix
added 2025/05/26 12:00 a.m.34 views

[NetScaler-Responder] Responder policy lead to Client "ERR_TOO_MANY_REDIRECTS"

You may want to redirect clients to a backend server's error page if a specific condition is met. The error page is hosted by the same vServer's backend service. You may configure the responder policy like below: add responder action RespErrorPageAct redirect ""/path/to/errorpage.html""...

7AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 10:07 a.m.16 views

CVE-2024-20352

A vulnerability in Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a directory traversal attack, which could allow the attacker to perform arbitrary actions on an affected device. This vulnerability is due to insufficient protections for the web UI of an affecte...

8.8CVSS7.3AI score0.01473EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:07 a.m.12 views

CVE-2024-20347

A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a CSRF attack, which could allow the attacker to perform arbitrary actions on an affected device. This vulnerability is due to insufficient protections for the web UI of an affected system. An...

6.5CVSS7.2AI score0.0023EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:53 a.m.9 views

CVE-2023-20266

A vulnerability in Cisco Emergency Responder, Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager Session Management Edition Unified CM SME, and Cisco Unity Connection could allow an authenticated, remote attacker to elevate privileges to root on an affected...

7.2CVSS6.8AI score0.00364EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:47 a.m.9 views

CVE-2023-20101

A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to log in to an affected device using the root account, which has default, static credentials that cannot be changed or deleted. This vulnerability is due to the presence of static user credentials for th...

9.8CVSS7.9AI score0.02427EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:09 p.m.10 views

CVE-2020-11270

Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting FTM1 with failure status in the FTM parameter IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon...

7.8CVSS7.1AI score0.00605EPSS
SaveExploits0References1
Rows per page
Query Builder