Lucene search
+L

628 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/07 12:00 a.m.•1 views

CVE-2024-36063: Incorrect Default Permissions

The Goodwy com.goodwy.dialer aka Right Dialer application through 5.1.0 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.goodwy.dialer.activities.DialerActivity component...

7.5CVSS5.8AI score0.00316EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/07 12:00 a.m.•15 views

CVE-2024-36063

The Goodwy com.goodwy.dialer aka Right Dialer application through 5.1.0 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.goodwy.dialer.activities.DialerActivity component...

6.8AI score0.00316EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/07 12:00 a.m.•14 views

PT-2024-26875 · Unknown · Com.Goodwy.Dialer

Name of the Vulnerable Software and Affected Versions: com.goodwy.dialer aka Right Dialer versions through 5.1.0 Description: The issue allows any application to place phone calls without user interaction by sending a crafted intent via the com.goodwy.dialer.activities.DialerActivity component...

7.5CVSS6.6AI score0.00316EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/11/07 12:00 a.m.•24 views

Goodwy Right Dialer 安全漏洞

Goodwy Right Dialer is a dialer software from Goodwy. A security vulnerability exists in Goodwy Right Dialer version 5.1.0 and earlier, which originates from an attacker being able to make a phone call without user interaction by sending a crafted intent to the...

7.5CVSS6.6AI score0.00316EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/20 11:15 a.m.•25 views

CVE-2024-49306

Cross-Site Request Forgery CSRF vulnerability in wp-buy WP Content Copy Protection & No Right Click wp-content-copy-protector allows Cross Site Request Forgery.This issue affects WP Content Copy Protection & No Right Click: from n/a through = 3.5.9...

8.8CVSS0.0024EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/20 11:15 a.m.•16 views

CVE-2024-49306

Cross-Site Request Forgery CSRF vulnerability in WP-buy WP Content Copy Protection & No Right Click allows Cross Site Request Forgery.This issue affects WP Content Copy Protection & No Right Click: from n/a through 3.5.9...

8.8CVSS5.8AI score0.0024EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/20 10:13 a.m.•76 views

CVE-2024-49306

WP Content Copy Protection & No Right Click (WordPress plugin)

8.8CVSS5.9AI score0.0024EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/10/20 10:13 a.m.•38 views

CVE-2024-49306 WordPress WP Content Copy Protection & No Right Click plugin <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wp-buy WP Content Copy Protection & No Right Click wp-content-copy-protector allows Cross Site Request Forgery.This issue affects WP Content Copy Protection & No Right Click: from n/a through = 3.5.9...

5.3CVSS0.0024EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/20 12:00 a.m.•20 views

WordPress plugin WP Content Copy Protection & No Right Click 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...

8.8CVSS6.3AI score0.0024EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/20 12:00 a.m.•4 views

CVE-2024-49306: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in wp-buy WP Content Copy Protection & No Right Click wp-content-copy-protector allows Cross Site Request Forgery.This issue affects WP Content Copy Protection & No Right Click: from n/a through = 3.5.9...

8.8CVSS5.8AI score0.0024EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/10/15 12:47 p.m.•15 views

WordPress WP Content Copy Protection & No Right Click plugin <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin WP Content Copy Protection & No Right Click versions = 3.5.9...

8.8CVSS6.9AI score0.0024EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/10/15 12:00 a.m.•25 views

WordPress WP Content Copy Protection & No Right Click Plugin <= 3.5.9 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Content Copy Protection & No Right Click Type Plugin Vulnerable versions = 3.5.9 Fixed in 3.6.1 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-49306 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 2fc979b85a6d...

8.8CVSS4.5AI score0.0024EPSS
SaveExploits0References2Affected Software1
Snyk
Snyk
•added 2024/10/09 6:45 p.m.•7 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper user input sanitization. An attacker can manipulate scripts in the user's browser by injecting malicious code into editable content areas. Exploiting this vulnerability is possible if the user ha...

7CVSS5.3AI score0.00419EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/10/09 6:21 p.m.•14 views

CVE-2024-47815 Cross-site Scripting in IncidentReporting

IncidentReporting is a MediaWiki extension for moving incident reports from wikitext to database tables. There are a variety of Cross-site Scripting issues, though all of them require elevated permissions. Some are available to anyone who has the editincidents right, some are available to those w...

6CVSS6.7AI score0.00419EPSS
SaveExploits0References3
Wired Threat Level
Wired Threat Level
•added 2024/09/13 3:48 p.m.•19 views

‘Terrorgram’ Charges Show US Has Had Tools to Crack Down on Far-Right Terrorism All Along

The federal indictment of two alleged members of the Terrorgram Collective, a far-right cell accused of inspiring “lone wolf” attacks, reveals the US is now using a “forgotten” legal strategy...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2024/08/30 12:00 a.m.•26 views

Vim < 9.1.0689 Heap Buffer Overflow

The version of Vim installed on the remote host is after 9.1.0425 and prior to 9.1.0689. It is, therefore, affected by a heap buffer overflow vulnerability. When performing a search and displaying the search-count message is disabled :set shm+=S, the search pattern is displayed at the bottom of t...

5.5CVSS6.1AI score0.00307EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2024/08/25 2:31 a.m.•7 views

SUSE CVE-2024-43790

Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled :set shm+=S, the search pattern is displayed at the bottom of the screen in a buffer msgbuf. When right-left mode :set rl is enabled, the search pattern is reversed. This...

4.5CVSS7.4AI score0.00307EPSS
SaveExploits0References8
OSV
OSV
•added 2024/08/22 10:15 p.m.•5 views

DEBIAN-CVE-2024-43790

Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled :set shm+=S, the search pattern is displayed at the bottom of the screen in a buffer msgbuf. When right-left mode :set rl is enabled, the search pattern is reversed. This...

5.5CVSS4.8AI score0.00307EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/22 12:00 a.m.•9 views

PT-2024-6175 · Vim +3 · Vim +3

Name of the Vulnerable Software and Affected Versions: Vim versions prior to v9.1.0689 Description: The issue is related to a buffer overflow in the Vim text editor. When the search-count message is disabled and right-left mode is enabled, the search pattern is reversed and allocated in a new...

7.8CVSS5.2AI score0.00541EPSS
SaveExploits1References64
Wired Threat Level
Wired Threat Level
•added 2024/08/01 2:50 p.m.•36 views

He Was an FBI Informant—and Inspired a Generation of Violent Extremists

Joshua Caleb Sutter infiltrated far-right extremist organizations as a confidential FBI informant, all while promoting hateful ideologies that influenced some of the internet's most violent groups...

7.3AI score
SaveExploits0
Rows per page
Query Builder