Lucene search
+L

116 matches found

CNVD
CNVD
•added 2025/12/12 12:00 a.m.•17 views

WordPress Auto Alt Text plugin cross-site request forgery vulnerability

WordPress Auto Alt Text plugin is a tool that uses artificial intelligence technology to automatically generate alternative text AltText for website images. The WordPress Auto Alt Text plugin suffers from a cross-site request forgery vulnerability, which arises from a web application that does no...

4.3CVSS5.8AI score0.00131EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/11/20 12:00 a.m.•40 views

WordPress Coil Web Monetization plugin Cross-Site Request Forgery Vulnerability

The WordPress Coil Web Monetization plugin is a WordPress plugin that allows websites to monetize content through the WebMonetizationAPI, which allows users to pay content creators directly through a browser extension. The WordPress Coil Web Monetization plugin suffers from a cross-site request...

4.3CVSS5.8AI score0.00156EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/11/05 12:00 a.m.•39 views

WordPress Depicter plugin cross-site request forgery vulnerability

WordPress Depicter plugin is a slider, popup and rotator image creation tool designed for WordPress, offering a no-code interface and rich customization features. The WordPress Depicter plugin suffers from a cross-site request forgery vulnerability, which originates from a web application that do...

4.3CVSS6.8AI score0.00171EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/11 12:20 a.m.•32 views

CVE-2025-60306

code-projects Simple Car Rental System 1.0 has a permission bypass issue where low privilege users can forge high privilege sessions and perform sensitive operations...

9.9CVSS6.9AI score0.0039EPSS
SaveExploits1References1
NVD
NVD
•added 2025/10/10 5:15 p.m.•27 views

CVE-2025-60306

code-projects Simple Car Rental System 1.0 has a permission bypass issue where low privilege users can forge high privilege sessions and perform sensitive operations...

9.9CVSS0.0039EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/10 12:00 a.m.•6 views

CVE-2025-60306: Improper Access Control

code-projects Simple Car Rental System 1.0 has a permission bypass issue where low privilege users can forge high privilege sessions and perform sensitive operations...

9.9CVSS5.7AI score0.0039EPSS
SaveExploits1References4
CVE
CVE
•added 2025/10/10 12:00 a.m.•60 views

CVE-2025-60306

The code-projects Simple Car Rental System 1.0 is affected by a permission bypass vulnerability. This flaw allows low-privileged users to forge high-privilege sessions , enabling them to perform sensitive operations within the application. No specific remediation or patch version is currently pro...

9.9CVSS5.8AI score0.0039EPSS
SaveExploits1References1Affected Software1
EUVD
EUVD
•added 2025/10/10 12:00 a.m.•25 views

EUVD-2025-33745

code-projects Simple Car Rental System 1.0 has a permission bypass issue where low privilege users can forge high privilege sessions and perform sensitive operations...

9.9CVSS6.4AI score0.0039EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2025/10/10 12:00 a.m.•34 views

CVE-2025-60306

code-projects Simple Car Rental System 1.0 has a permission bypass issue where low privilege users can forge high privilege sessions and perform sensitive operations...

0.0039EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/10/10 12:00 a.m.•30 views

PT-2025-41574

Name of the Vulnerable Software and Affected Versions SourceCodester Online Student Clearance System version 1.0 Description The application has a flaw in access control. This allows users with limited privileges to create sessions with higher privileges and execute sensitive operations...

8.8CVSS5.9AI score0.00408EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2025/10/10 12:00 a.m.•29 views

PT-2025-41577

Name of the Vulnerable Software and Affected Versions code-projects Simple Car Rental System version 1.0 Description A permission bypass issue exists that allows low privilege users to forge high privilege sessions and perform sensitive operations. Recommendations At the moment, there is no...

9.9CVSS6.3AI score0.0039EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
•added 2025/10/10 12:00 a.m.•14 views

CVE-2025-60306

code-projects Simple Car Rental System 1.0 has a permission bypass issue where low privilege users can forge high privilege sessions and perform sensitive operations...

5.8AI score0.0039EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2020-4015

Malware in sbrugna...

9.8CVSS8.1AI score0.03525EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2020-11185

Malware in sbrugna...

8.8CVSS7.8AI score0.0091EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2022-52788

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.0067EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2025-29265

Malicious code in bioql PyPI...

8.1CVSS6.6AI score0.00427EPSS
SaveExploits1References3
CNVD
CNVD
•added 2025/09/29 12:00 a.m.•22 views

IBM Storage TS4500 Library Cross-Site Request Forgery Vulnerability

IBM Storage TS4500 Library is a next-generation tape storage solution from IBM designed to help mid-sized and large enterprises meet the challenges of cloud storage, enabling high-density data storage and flexible scaling through LTO technology. The IBM Storage TS4500 Library suffers from a...

6.5CVSS6.6AI score0.00167EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/15 12:00 a.m.•15 views

SourceCodester Web-based Pharmacy Product Management System 安全漏洞

SourceCodester Web-based Pharmacy Product Management System is a SourceCodester open source web-based pharmacy product management system. A security vulnerability exists in the SourceCodester Web-based Pharmacy Product Management System version 1.0, which stems from improper access control and...

8.1CVSS6.5AI score0.00427EPSS
SaveExploits1References3
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•24 views

WordPress CBX Restaurant Booking plugin cross-site request forgery attack vulnerability

WordPress CBX Restaurant Booking plugin is a restaurant booking plugin for WordPress websites that allows users to book restaurant seats online. The plugin supports online booking, instant confirmation, personalized notifications and other features that automate the booking process and reduce...

4.3CVSS6.8AI score0.00147EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/07/19 12:00 a.m.•23 views

PHPGurukul Complaint Management System 安全漏洞

Complaint Management System is a complaint management system. The Complaint Management System suffers from a cross-site request forgery vulnerability that arises from a web application that does not adequately validate that a request is coming from a trusted user. An attacker could use this...

5.3CVSS6.7AI score0.00248EPSS
SaveExploits1References6
Rows per page
Query Builder