Lucene search
+L

607 matches found

Vulnrichment
Vulnrichment
•added 2025/09/22 6:24 p.m.•6 views

CVE-2025-57968 WordPress VikRestaurants Table Reservations and Take-Away plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e4jvikwp VikRestaurants vikrestaurants allows Reflected XSS.This issue affects VikRestaurants: from n/a through = 1.5...

7.1CVSS5.2AI score0.00342EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/22 12:00 a.m.•14 views

PT-2025-38812

Name of the Vulnerable Software and Affected Versions VikRestaurants Table Reservations and Take-Away versions through 1.4 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, leading to a Stored Cross-site Scripting condition. This allo...

5.9CVSS6.1AI score0.00327EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/09/22 12:00 a.m.•13 views

WordPress plugin VikRestaurants Table Reservations and Take-Away 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

7.1CVSS5.9AI score0.00342EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/22 12:00 a.m.•11 views

WordPress plugin VikRestaurants Table Reservations and Take-Away 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

5.9CVSS5.8AI score0.00327EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/22 12:00 a.m.•15 views

PT-2025-38818

Name of the Vulnerable Software and Affected Versions VikRestaurants Table Reservations and Take-Away versions through 1.4 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, potentially leading to Reflected Cross-site Scripting. Th...

7.1CVSS6.6AI score0.00342EPSS
SaveExploits0References3
OSV
OSV
•added 2025/09/16 3:02 p.m.•15 views

MAL-2025-191892 Malicious code in terminalcolornew (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5a555882888b9895fbe7575cc6121cad44600e17fb64d7551cacc33b29f2ae9f If used, the code attempts to take a photo using the computer's camera and exfiltrates it --- Category: MALICIOUS - The campaign has clearly malicious intent,...

7.1AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/09/05 5:10 p.m.•1 views

Malicious code in mile-take-along (npm)

The package mile-take-along was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/09/05 5:10 p.m.•2 views

MAL-2025-45188 Malicious code in mile-take-along (npm)

The package mile-take-along was found to contain malicious code...

7AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2025/07/21 12:34 p.m.•199 views

Exploit for Weak Password Recovery Mechanism for Forgotten Password in Gitlab

CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This c...

10CVSS9.2AI score0.94647EPSS
SaveExploits16
OSV
OSV
•added 2025/07/15 8:15 p.m.•9 views

CVE-2025-53024

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.1.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

8.2CVSS5.8AI score0.00268EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2025/07/08 4:13 p.m.•10 views

Anatsa Android Banking Trojan Hits 90,000 Users with Fake PDF App on Google Play

Cybersecurity researchers have discovered an Android banking malware campaign that has leveraged a trojan named Anatsa to target users in North America using malicious apps published on Google's official app marketplace. The malware, disguised as a "PDF Update" to a document viewer app, has been...

5.6AI score
SaveExploits0
CNVD
CNVD
•added 2025/06/27 12:00 a.m.•17 views

COVID19 Testing Management System Take Action Component Cross-Site Scripting Vulnerability

COVID19 Testing Management System is a new crown pneumonia testing management system. COVID19 Testing Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter mark in the file...

5.4CVSS4.8AI score0.00286EPSS
SaveExploits0References1
OSV
OSV
•added 2025/06/20 12:15 a.m.•16 views

CVE-2025-6287

A vulnerability classified as problematic was found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /test-details.php of the component Take Action. The manipulation of the argument remark leads to cross site scripting. Th...

5.4CVSS3.7AI score0.00286EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/20 12:00 a.m.•5 views

CVE-2025-6287: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /test-details.php of the component Take Action. The manipulation of the argument remark leads to cross site scripting. Th...

5.4CVSS3.8AI score0.00286EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/06/19 12:00 a.m.•17 views

PHPGurukul COVID19 Testing Management System 安全漏洞

COVID19 Testing Management System is a new crown pneumonia testing management system. COVID19 Testing Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter mark in the file...

5.4CVSS4.8AI score0.00286EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
•added 2025/06/08 12:00 a.m.•7 views

VulnCheck KEV: CVE-2022-31984

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/requests/takeaction.php?id=...

7.2CVSS5.9AI score0.04906EPSS
SaveIn wildExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/04 12:00 a.m.•3 views

CVE-2025-20986: Undefined Security Weakness

Improper access control in ScreenCapture for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to take screenshots...

5.5CVSS5.8AI score0.00142EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 3:32 a.m.•18 views

CVE-2023-27470

BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a pseudo-symlink at %PROGRAMDATA%\GetSupportServiceN-Central\PushUpdates, leading to arbitrary file deletion...

7CVSS7AI score0.00526EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/22 11:00 p.m.•24 views

CVE-2022-33106

WiJungle NGFW Version U250 was discovered to be vulnerable to No Rate Limit attack, allowing the attacker to brute force the admin password leading to Account Take Over...

9.8CVSS7.3AI score0.00935EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:22 p.m.•14 views

CVE-2022-21284

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...

6.3CVSS6.6AI score0.02686EPSS
SaveExploits0References1
Rows per page
Query Builder