Lucene search
+L

22491 matches found

RedhatCVE
RedhatCVE
•added 2025/04/25 11:18 p.m.•21 views

CVE-2025-39554

Missing Authorization vulnerability in Elliot Sowersby / RelyWP AI Text to Speech ai-text-to-speech allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Text to Speech: from n/a through = 3.0.3...

6.5CVSS7.2AI score0.00311EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2025/04/25 12:00 a.m.•18 views

ECG Identity Authentication in Open-Set with Multi-Model Pretraining and Self-Constraint Center and Irrelevant Sample Repulsion Learning

Electrocardiogram ECG signal exhibits inherent uniqueness, making it a promising biometric modality for identity authentication. As a result, ECG authentication has gained increasing attention in recent years. However, most existing methods focus primarily on improving authentication accuracy...

7.1AI score
SaveExploits0
NVD
NVD
•added 2025/04/24 4:15 p.m.•24 views

CVE-2025-46538

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webplanetsoft Inline Text Popup inline-text-popup allows DOM-Based XSS.This issue affects Inline Text Popup: from n/a through = 1.0.0...

6.5CVSS0.00216EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/24 4:09 p.m.•68 views

CVE-2025-46538

CVE-2025-46538 – WordPress Inline Text Popup (webplanetsoft) is a DOM-based cross-site scripting vulnerability affecting Inline Text Popup versions up to 1.0.0. The issue arises from improper input neutralization during web page generation, enabling XSS. Public details in the initial document ide...

6.5CVSS8.4AI score0.00216EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/24 4:09 p.m.•13 views

CVE-2025-46538 WordPress Inline Text Popup <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webplanetsoft Inline Text Popup allows DOM-Based XSS. This issue affects Inline Text Popup: from n/a through 1.0.0...

6.5CVSS8.4AI score0.00216EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/24 4:09 p.m.•31 views

CVE-2025-46538 WordPress Inline Text Popup plugin <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webplanetsoft Inline Text Popup inline-text-popup allows DOM-Based XSS.This issue affects Inline Text Popup: from n/a through = 1.0.0...

6.5CVSS0.00216EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/24 12:00 a.m.•4 views

CVE-2025-46538: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webplanetsoft Inline Text Popup inline-text-popup allows DOM-Based XSS.This issue affects Inline Text Popup: from n/a through = 1.0.0...

6.5CVSS8.6AI score0.00216EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/24 12:00 a.m.•15 views

WordPress plugin Inline Text Popup has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

6.5CVSS8.1AI score0.00216EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/04/24 12:00 a.m.•17 views

PT-2025-17838 · Webplanetsoft · Webplanetsoft Inline Text Popup

Name of the Vulnerable Software and Affected Versions: webplanetsoft Inline Text Popup versions 1.0.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an...

6.5CVSS6.8AI score0.00216EPSS
SaveExploits0References6
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/04/23 3:41 p.m.•12 views

Malicious code in @sporta-technology/rn-components.text-input (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/04/23 3:41 p.m.•17 views

Malicious code in @sporta-technology/d11-web-components.text-link (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/04/23 3:41 p.m.•16 views

MAL-2025-3363 Malicious code in @sporta-technology/d11-web-components.text-button (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/04/23 3:41 p.m.•14 views

Malicious code in @sporta-technology/d11-web-components.text-button (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/04/23 3:40 p.m.•15 views

Malicious code in @sporta-technology/d11-web-components.text-area (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
Kitploit
Kitploit
•added 2025/04/23 12:30 p.m.•148 views

Text4Shell-Exploit - A Custom Python-based Proof-Of-Concept (PoC) Exploit Targeting Text4Shell (CVE-2022-42889), A Critical Remote Code Execution Vulnerability In Apache Commons Text Versions < 1.10

A custom Python-based proof-of-concept PoC exploit targeting Text4Shell CVE-2022-42889, a critical remote code execution vulnerability in Apache Commons Text versions 1.10. This exploit targets vulnerable Java applications that use the StringSubstitutor class with interpolation enabled, allowing...

9.8CVSS8.8AI score0.99931EPSS
SaveExploits44References2
CVE
CVE
•added 2025/04/23 10:38 a.m.•94 views

CVE-2025-42603

Meon KYC solutions are affected by a data leakage vulnerability where sensitive information is transmitted in plaintext in API response payloads. An authenticated remote attacker could intercept unencrypted data belonging to other users and impersonate the target user to gain unauthorized access....

8.7CVSS7.8AI score0.0033EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/23 12:00 a.m.•24 views

Meon KYC security vulnerability

Meon KYC is a solution from Meon India. Meon KYC has a security vulnerability that stems from certain API endpoints transmitting sensitive data in clear text in response to a load, which could lead to information disclosure...

8.7CVSS7.8AI score0.0033EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
•added 2025/04/23 12:00 a.m.•16 views

Enhancing Variational Autoencoders with Smooth Robust Latent Encoding

Variational Autoencoders VAEs have played a key role in scaling up diffusion-based generative models, as in Stable Diffusion, yet questions regarding their robustness remain largely underexplored. Although adversarial training has been an established technique for enhancing robustness in predicti...

6.8AI score
SaveExploits0
osv_cve
osv_cve
•added 2025/04/22 10:15 a.m.•15 views

CVE-2025-46232

Missing Authorization vulnerability in alttextai Download Alt Text AI allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Download Alt Text AI: from n/a through 1.9.93...

8.8CVSS8.6AI score0.00288EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/22 10:15 a.m.•19 views

CVE-2025-46232

Missing Authorization vulnerability in alttextai Download Alt Text AI alttext-ai allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download Alt Text AI: from n/a through = 1.9.93...

8.8CVSS0.00288EPSS
SaveExploits0References1
Rows per page
Query Builder