Lucene search
+L

1274 matches found

Nuclei
Nuclei
added 6 days ago254 views

Skype for Business 2019 (SfB) - Blind Server-side Request Forgery

Skype Pre-Auth Server-side Request Forgery SSRF vulnerability id: CVE-2023-41763 info: name: Skype for Business 2019 SfB - Blind Server-side Request Forgery author: hateshape severity: medium description: | Skype Pre-Auth Server-side Request Forgery SSRF vulnerability impact: | Unauthenticated...

5.3CVSS7AI score0.90353EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/01/09 11:54 a.m.9 views

CVE-2009-4741

Unspecified vulnerability in the Extras Manager before 2.0.0.67 in Skype before 4.1.0.179 on Windows has unknown impact and attack vectors...

10CVSS6.9AI score0.0197EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:50 a.m.7 views

CVE-2020-24003

Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process with the user's privileges to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Skype Client's microphone and camera access...

3.3CVSS6.4AI score0.01164EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/12/07 6:5 a.m.16 views

CVE-2025-13898

The Ultra Skype Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btnid' parameter of the ultraskype shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

6.4CVSS5.1AI score0.00205EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/06 6:30 a.m.6 views

EUVD-2025-201535

The Ultra Skype Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btnid' parameter of the ultraskype shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

6.4CVSS4.7AI score0.00205EPSS
SaveExploits0References6
NVD
NVD
added 2025/12/06 6:15 a.m.6 views

CVE-2025-13898

The Ultra Skype Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btnid' parameter of the ultraskype shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

6.4CVSS0.00205EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/12/06 5:49 a.m.4 views

CVE-2025-13898 Ultra Skype Button <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'btn_id' Shortcode Attribute

The Ultra Skype Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btnid' parameter of the ultraskype shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

6.4CVSS4.8AI score0.00205EPSS
SaveExploits0References5
CVE
CVE
added 2025/12/06 5:49 a.m.37 views

CVE-2025-13898

The Ultra Skype Button WordPress plugin (Ultra Skype Button, Plugin Slug: ultra-skype-button) is affected by CVE-2025-13898: a Stored Cross-Site Scripting vulnerability in the btn_id attribute of the [ultra_skype] shortcode. Affects all versions up to 1.0. Root cause: insufficient input sanitizat...

6.4CVSS4.8AI score0.00205EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/12/06 12:0 a.m.12 views

PT-2025-49351

The Ultra Skype Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btn id' parameter of the ultra skype shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...

6.4CVSS5.1AI score0.00205EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/12/06 12:0 a.m.6 views

WordPress plugin Ultra Skype Button 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.8AI score0.00205EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2025/12/05 11:57 p.m.9 views

WordPress Ultra Skype Button plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'btn_id' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'btnid' Shortcode Attribute vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Ultra Skype Button versions = 1.0...

6.4CVSS5.6AI score0.00205EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2018-1404

Malware in sbrugna...

7.8CVSS7.9AI score0.0513EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2008-0593

Malware in sbrugna...

4.3CVSS6.4AI score0.02063EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2007-5959

Malware in sbrugna...

6.8CVSS6.2AI score0.04421EPSS
SaveExploits1References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2018-10288

Malware in sbrugna...

5.9CVSS6AI score0.00734EPSS
SaveExploits3References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.15 views

EUVD-2019-1386

Malware in sbrugna...

4.6CVSS5.2AI score0.01968EPSS
SaveExploits2References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2008-1805

Malware in sbrugna...

9.3CVSS6.1AI score0.03898EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2010-3136

Malware in sbrugna...

9.3CVSS6.4AI score0.06914EPSS
SaveExploits2References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2021-10989

Malware in sbrugna...

7.1CVSS6.4AI score0.0162EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2019-1554

Malware in sbrugna...

6.1CVSS6.3AI score0.02084EPSS
SaveExploits0References2
Rows per page
Query Builder