Lucene search
K

17 matches found

Patchstack
Patchstack
added 2026/02/02 7:34 a.m.6 views

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'email' vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'email' vulnerability discovered by shaman0x01 - Shaman Red Team in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions = 1.5.112...

6.4CVSS5.3AI score0.00587EPSS
Exploits1References1Affected Software1
Patchstack
Patchstack
added 2025/12/31 12:0 a.m.4 views

WordPress Structured Content (JSON-LD) #wpsc plugin <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via sc_fs_local_business Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via scfslocalbusiness Shortcode vulnerability discovered by shaman0x01 - Shaman Red Team in WordPress Plugin Structured Content versions = 1.6.3...

6.4CVSS5.4AI score0.00205EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/11/03 9:50 p.m.0 views

EUVD-2025-37513

Shaman has soundness issues and is unmaintained...

6.6AI score
Exploits0References2
vulnersOsv
vulnersOsv
added 2025/11/03 9:50 p.m.0 views

asn-tools (>=0.2.2 <=0.2.5), bitslideslib (>=0.1.1 <=0.1.2) +13 more potentially affected by unknown CVE via shaman (=0.1.0)

shaman CARGO version =0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on shaman and may be impacted: - asn-tools =0.2.2, =0.1.1, =0.2.0, =0.2.9, =0.1.0, =0.0.4, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.4 Source cves: unknown CVE Source advisory:...

5.8AI score
Exploits0
OSV
OSV
added 2025/11/03 9:50 p.m.0 views

GHSA-7VJM-6QGQ-3MRQ Shaman has soundness issues and is unmaintained

shaman::cryptoutil::writeu64vle and other functions mentioned above cannot garantee memory safety of getunchecked later if both length are zero. shaman is unmaintained...

5.8AI score
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2011-4270

Malware in sbrugna...

7.8CVSS7.6AI score0.0004EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/05/22 4:41 a.m.3 views

CVE-2011-4338

Shaman 1.0.9: Users can add the line askforpwd=false to his shaman.conf file, without entering the root password in shaman. The next time shaman is run, root privileges are granted despite the fact that the user never entered the root password...

7.8CVSS7.1AI score0.0004EPSS
Exploits1References1
vulnersOsv
vulnersOsv
added 2025/05/06 12:0 p.m.1 views

asn-tools (>=0.2.2 <=0.2.5), bitslideslib (>=0.1.1 <=0.1.2) +13 more potentially affected by unknown CVE via shaman (=0.1.0)

shaman CARGO version =0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on shaman and may be impacted: - asn-tools =0.2.2, =0.1.1, =0.2.0, =0.2.9, =0.1.0, =0.0.4, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.4 Source cves: unknown CVE Source advisory:...

5.8AI score
Exploits0
RustSec
RustSec
added 2025/05/06 12:0 p.m.4 views

soundness issue and unmaintained

shaman::cryptoutil::writeu64vle and other functions mentioned above cannot garantee memory safety of getunchecked later if both length are zero. shaman is unmaintained...

7.3AI score
Exploits0Affected Software1
Wired Threat Level
Wired Threat Level
added 2023/11/15 3:43 p.m.8 views

The QAnon Shaman Isn’t Even the Most Extreme Candidate in His Race for Congress

Jacob Chansley, the January 6 rioter known as the QAnon Shaman, will run for Congress in Arizona. The most remarkable thing about his campaign so far is how unremarkable it is in a state that’s embraced election conspiracies...

7.3AI score
Exploits0
NVD
NVD
added 2020/02/12 7:15 p.m.8 views

CVE-2011-4338

Shaman 1.0.9: Users can add the line askforpwd=false to his shaman.conf file, without entering the root password in shaman. The next time shaman is run, root privileges are granted despite the fact that the user never entered the root password...

7.8CVSS7.7AI score0.0004EPSS
Exploits1References2
Prion
Prion
added 2020/02/12 7:15 p.m.9 views

Default credentials

Shaman 1.0.9: Users can add the line askforpwd=false to his shaman.conf file, without entering the root password in shaman. The next time shaman is run, root privileges are granted despite the fact that the user never entered the root password...

7.2CVSS7.2AI score0.0004EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2020/02/12 6:11 p.m.11 views

CVE-2011-4338

Shaman 1.0.9: Users can add the line askforpwd=false to his shaman.conf file, without entering the root password in shaman. The next time shaman is run, root privileges are granted despite the fact that the user never entered the root password...

7.7AI score0.0004EPSS
Exploits1References2
CVE
CVE
added 2020/02/12 6:11 p.m.33 views

CVE-2011-4338

CVE-2011-4338 affects Shaman 1.0.9. The vulnerability arises when a user adds the line askforpwd=false to shaman.conf, allowing root privileges on the next run without entering the root password. Public documents from Red Hat and NVD confirm the issue and impact (local privilege escalation with c...

7.8CVSS7.6AI score0.0004EPSS
Exploits1References2Affected Software1
Virtuozzo
Virtuozzo
added 2019/03/12 12:0 a.m.10 views

Product update: Virtuozzo 6.0 Update 12 Hotfix 38 (6.0.12-3737)

This update provides a stability fix. Vulnerability id: PSBM-91776 If shamand-monitor had been killed for some reason, there was no way to manage orphaned shaman-monitor with standard tools...

1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2018/04/11 8:10 a.m.16 views

shaman-magazine.com XSS vulnerability

Open Bug Bounty ID: OBB-600501 Description| Value ---|--- Affected Website:| shaman-magazine.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Exploits0
Openbugbounty
Openbugbounty
added 2018/01/04 11:12 a.m.10 views

shaman-shop.at XSS vulnerability

Open Bug Bounty ID: OBB-484449 Description| Value ---|--- Affected Website:| shaman-shop.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
Exploits0
Rows per page
Query Builder