Lucene search
K

502 matches found

Cvelist
Cvelist
added 2025/10/27 1:34 a.m.7 views

CVE-2025-62957 WordPress NikanWP WooCommerce Reporting plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in NikanWP NikanWP WooCommerce Reporting wc-reports-lite allows Stored XSS.This issue affects NikanWP WooCommerce Reporting: from n/a through = 1.0.0...

7.1CVSS0.00018EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2003-0313

Malware in sbrugna...

4.3CVSS6.3AI score0.00015EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2003-0475

Malware in sbrugna...

4.3CVSS6.4AI score0.00399EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2003-0489

Malware in sbrugna...

4.3CVSS6.4AI score0.00571EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2003-0515

Malware in sbrugna...

6.8CVSS6.4AI score0.00942EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2002-1179

Malware in sbrugna...

4.3CVSS6.4AI score0.00476EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2003-0383

Malware in sbrugna...

4.3CVSS6.4AI score0.00312EPSS
Exploits3References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2012-6475

Malware in sbrugna...

6.8CVSS6.4AI score0.00128EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 1:45 a.m.7 views

CVE-2011-5074

Multiple cross-site request forgery CSRF vulnerabilities in Support Incident Tracker aka SiT! before 3.65 allow remote attackers to hijack the authentication of administrators for requests that change administrator email, add a new administrator, or insert arbitrary script via 1 userprofileedit.p...

6.8CVSS7.6AI score0.00168EPSS
Exploits1References1
CVE
CVE
added 2023/05/08 6:4 p.m.49 views

CVE-2023-30860

CVE-2023-30860 affects WWBN AVideo prior to version 12.4. A normal user can create a Meeting Schedule and invite others, but input is not properly sanitized when creating a Meeting Room, allowing insertion of malicious scripts. Any user, including admins, can view the meeting room, enabling cooki...

8CVSS6AI score0.04161EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2023/01/12 12:0 a.m.39 views

CVE-2022-46369

CVE-2022-46369 affects Rumpus FTP server, specifically version 9.0.7.1. The issue is described as a persistent cross-site scripting (PXSS) vulnerability that may allow inserting scripts into unspecified input fields. Multiple connected sources corroborate this vector and the affected product/vers...

6.8CVSS5.5AI score0.00204EPSS
Exploits0References1Affected Software1
Exploit DB
Exploit DB
added 2019/10/17 12:0 a.m.223 views

WordPress Plugin Soliloquy Lite 2.5.6 - Persistent Cross-Site Scripting

Exploit Title: Wordpress Soliloquy Lite 2.5.6 - Persistent Cross-Site Scripting Google Dork: inurl:"\wp-content\plugins\soliloquy-lite" Date: 2019-06-13 Exploit Author: Unk9vvN Vendor Homepage: https://soliloquywp.com/ Software Link: https://wordpress.org/plugins/soliloquy-lite/ Version: 2.5.6...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2017/08/28 12:0 a.m.18 views

NethServer 7.3.1611 - Cross-Site Request Forgery Cross-Site Scripting

NethServer 7.3.1611 - Cross-Site Request Forgery Cross-Site Scripting NethServer 7.3.1611 Upload.json CSRF Script Insertion Vulnerability Vendor: NethServer.org Product web page: https://www.nethserver.org Affected version: 7.3.1611-u1-x8664 Summary: NethServer is an operating system for the Linu...

0.6AI score
Exploits0
Packet Storm
Packet Storm
added 2017/08/28 12:0 a.m.36 views

NethServer 7.3.1611 Upload.json CSRF Script Insertion

NethServer 7.3.1611 Upload.json CSRF Script Insertion Vulnerability Vendor: NethServer.org Product web page: https://www.nethserver.org Affected version: 7.3.1611-u1-x8664 Summary: NethServer is an operating system for the Linux enthusiast, designed for small offices and medium enterprises. It's...

0.3AI score
Exploits0
Packet Storm
Packet Storm
added 2016/07/19 12:0 a.m.50 views

Django 3.3.0 Script Insertion

Document Title: =============== Django CMS v3.3.0 - Editor Snippet Persistent Web Vulnerability CVE-2016-6186 References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1869 Security Release: https://www.djangoproject.com/weblog/2016/jul/18/security-releases/...

4.3CVSS6.6AI score0.16367EPSS
Exploits6
CNVD
CNVD
added 2016/05/19 12:0 a.m.2 views

Stored Cross-Site Scripting Vulnerability in 78OA Office System

78OA office system is a full-featured OA office system launched by Shenzhen Xinxingkong Software for large and medium-sized enterprises and group enterprises. 78OA office system has a stored cross-site script vulnerability, an attacker can directly insert the cross-site script, and triggered by a...

6.7AI score
Exploits0
Packet Storm
Packet Storm
added 2016/04/14 12:0 a.m.40 views

Django CMS 3.2.3 Filter Bypass / Script Insertion

Document Title: =============== Django CMS v3.2.3 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1821 Release Date: ============= 2016-04-14 Vulnerability Laboratory ID VL-ID: ==================================...

0.4AI score
Exploits0
Packet Storm
Packet Storm
added 2016/04/08 12:0 a.m.27 views

Perli 2.6 Filter Bypass / Script Insertion

Document Title: =============== Perli v2.6 iOS - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1813 Release Date: ============= 2016-04-05 Vulnerability Laboratory ID VL-ID: ====================================...

Exploits0
exploitpack
exploitpack
added 2016/02/16 12:0 a.m.18 views

WordPress Plugin ALO EasyMail NewsLetter 2.6.01 - Cross-Site Request Forgery

WordPress Plugin ALO EasyMail NewsLetter 2.6.01 - Cross-Site Request Forgery Exploit Title: Wordpress ALO EasyMail Newsletter plugin cross-site request forgery vulnerability Software Link: https://wordpress.org/plugins/alo-easymail/ Affected Version: 2.6.01 Exploit Author: Mohsen Lotfi Contact:...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2016/02/16 12:0 a.m.26 views

WordPress ALO EasyMail Newsletter 2.6.01 CSRF

Exploit Title: Wordpress ALO EasyMail Newsletter plugin cross-site request forgery vulnerability Software Link: https://wordpress.org/plugins/alo-easymail/ Affected Version: 2.6.01 Exploit Author: Mohsen Lotfi Contact: [email protected] Twitter: foxonefoxone Date: 01-16-2016 1. Descripti...

0.1AI score
Exploits0
Rows per page
Query Builder