Lucene search
+L

60 matches found

Kitploit
Kitploit
added 2026/09/01 4:19 a.m.6 views

Bootstrap-with-XSS

Colección de PoC de vulnerabilidades históricas de Bootstrap Esta es una página HTML estática para aprendizaje e investigación que integra múltiples pruebas de concepto PoC de vulnerabilidades de cross-site scripting XSS en la historia del framework Bootstrap. Este proyecto tiene como objetivo...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 11:35 p.m.4 views

gitcolombo

Gitcolombo Strumento OSINT che estrae identità — nomi, email e collegamenti tra account apparentemente non correlati — da repository git e GitHub. Python CLI gitcolombo.py — clona repository, percorre git log e può chiamare l'API di GitHub per segnali più ricchi. Versione web gitcolombo.html — un...

5.4AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/06/05 7:30 p.m.21 views

CVE-2026-24574

Cross-Site Request Forgery CSRF vulnerability in Recorp Export WP Page to Static HTML/CSS allows Cross Site Request Forgery. This issue affects Export WP Page to Static HTML/CSS: from n/a through 6.0.0...

6.5CVSS5.5AI score0.0014EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/03 12:00 a.m.29 views

PT-2026-46095

When using React Router v7 Framework Mode with Pre-rendering enabled, an improper neutralization of the HTTP Location header value can permit Cross-Site Scripting XSS in statically generated HTML files if the redirect location comes from an untrusted source. !NOTE This does not impact your React...

5.4CVSS5.8AI score0.00144EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/06/02 4:59 p.m.17 views

CVE-2026-33244

React Router is a router for React. In versions 7.5.1 through 7.13.1, when using Framework Mode with pre-rendering enabled, improper neutralization of the HTTP Location header value can permit Cross-Site Scripting XSS in the statically generated HTML files if the redirect location comes from an...

5.4CVSS5.8AI score0.00144EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2026/05/25 9:16 p.m.32 views

CVE-2026-24574

Cross-Site Request Forgery CSRF vulnerability in Recorp Export WP Page to Static HTML/CSS allows Cross Site Request Forgery. This issue affects Export WP Page to Static HTML/CSS: from n/a through 6.0.0...

6.5CVSS0.0014EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/25 9:07 p.m.12 views

CVE-2026-24574

Cross-Site Request Forgery CSRF vulnerability in Recorp Export WP Page to Static HTML/CSS allows Cross Site Request Forgery. This issue affects Export WP Page to Static HTML/CSS: from n/a through 6.0.0...

6.5CVSS5.8AI score0.0014EPSS
SaveExploits0References2
CVE
CVE
added 2026/05/25 9:07 p.m.45 views

CVE-2026-24574

CVE-2026-24574 concerns the WordPress plugin Export WP Page to Static HTML/CSS (versions up to and including 6.0.0). The issue is a Cross-Site Request Forgery (CSRF) vulnerability in this plugin, with CVSSv3.1: base score 6.5 (Medium). Attack vector: Network; attack complexity: Low; privileges re...

6.5CVSS5.8AI score0.0014EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/25 9:07 p.m.12 views

CVE-2026-24574 WordPress Export WP Page to Static HTML/CSS plugin <= 6.0.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Recorp Export WP Page to Static HTML/CSS allows Cross Site Request Forgery. This issue affects Export WP Page to Static HTML/CSS: from n/a through 6.0.0...

6.5CVSS5.8AI score0.0014EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/05/25 9:06 p.m.22 views

WordPress Export WP Page to Static HTML/CSS plugin <= 6.0.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Export WP Page to Static HTML/CSS versions = 6.0.0...

6.5CVSS5.8AI score0.0014EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/25 12:00 a.m.36 views

PT-2026-43128

Name of the Vulnerable Software and Affected Versions Recorp Export WP Page to Static HTML/CSS versions prior to 6.0.0 Description A Cross-Site Request Forgery CSRF issue exists, which allows an attacker to perform unauthorized actions by tricking a victim into submitting a malicious request. CSR...

6.5CVSS6AI score0.0014EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/12/13 6:30 p.m.13 views

EUVD-2025-203201

The Export WP Page to Static HTML & PDF plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.4 through publicly exposed cookies.txt files containing authentication cookies. This makes it possible for unauthenticated attackers to cookies th...

9.8CVSS5.5AI score0.02135EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/13 4:31 a.m.44 views

CVE-2025-11693

CVE-2025-11693 affects the WordPress plugin “Export WP Page to Static HTML & PDF” (versions up to 4.3.4). It exposes authentication cookies via a publicly accessible cookies.txt log file, potentially leaking cookies injected during backups triggered by high-privilege roles (e.g., administrator). ...

9.8CVSS5.6AI score0.02135EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.16 views

EUVD-2023-0044

Malicious code in bioql PyPI...

6.4CVSS5.6AI score0.0068EPSS
SaveExploits1References12
EUVD
EUVD
added 2025/10/03 8:07 p.m.6 views

EUVD-2025-27394

Malicious code in bioql PyPI...

5.3CVSS6.5AI score0.00231EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2024-32176

Malicious code in bioql PyPI...

7.1CVSS6.5AI score0.00332EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/09/11 5:29 p.m.10 views

CVE-2025-58980

Missing Authorization vulnerability in recorp Export WP Page to Static HTML/CSS export-wp-page-to-static-html allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Export WP Page to Static HTML/CSS: from n/a through = 4.1.0...

5.3CVSS5.9AI score0.00231EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2025/09/09 8:54 p.m.17 views

Vite's `server.fs` settings were not applied to HTML files

Summary Any HTML files on the machine were served regardless of the server.fs settings. Impact Only apps that match the following conditions are affected: - explicitly exposes the Vite dev server to the network using --host or server.host config option - appType: 'spa' default or appType: 'mpa' i...

5.3CVSS7.1AI score0.00608EPSS
SaveExploits1References8Affected Software1
NVD
NVD
added 2025/09/09 5:16 p.m.16 views

CVE-2025-58980

Missing Authorization vulnerability in recorp Export WP Page to Static HTML/CSS export-wp-page-to-static-html allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Export WP Page to Static HTML/CSS: from n/a through = 4.1.0...

5.3CVSS0.00231EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/09 4:33 p.m.18 views

CVE-2025-58980 WordPress Export WP Page to Static HTML/CSS Plugin <= 4.1.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in recorp Export WP Page to Static HTML/CSS export-wp-page-to-static-html allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Export WP Page to Static HTML/CSS: from n/a through = 4.1.0...

5.3CVSS0.00231EPSS
SaveExploits0References1
Rows per page
Query Builder