Lucene search
+L

4757 matches found

Redos
Redos
added 2026/01/26 12:0 a.m.7 views

ROS-20260126-73-0038

A vulnerability in the Linux operating system kernel is related to thread locking errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

7.8CVSS7.2AI score0.00152EPSS
SaveExploits0
NVD
NVD
added 2026/01/23 5:15 p.m.20 views

CVE-2018-25132

MyBB Trending Widget Plugin 1.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through thread titles. Attackers can modify thread titles with script payloads that will execute when other users view the trending widget...

6.1CVSS0.00203EPSS
SaveExploits1References3
NVD
NVD
added 2026/01/23 5:15 p.m.15 views

CVE-2018-25116

MyBB Thread Redirect Plugin 0.2.1 contains a cross-site scripting vulnerability in the custom text input field for thread redirects. Attackers can inject malicious SVG scripts that will execute when other users view the thread, allowing arbitrary script execution...

6.1CVSS0.00278EPSS
SaveExploits1References3
OSV
OSV
added 2026/01/23 5:15 p.m.7 views

CVE-2018-25116

MyBB Thread Redirect Plugin 0.2.1 contains a cross-site scripting vulnerability in the custom text input field for thread redirects. Attackers can inject malicious SVG scripts that will execute when other users view the thread, allowing arbitrary script execution...

5.1CVSS5.8AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/23 4:47 p.m.4 views

CVE-2018-25132

MyBB Trending Widget Plugin 1.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through thread titles. Attackers can modify thread titles with script payloads that will execute when other users view the trending widget...

6.1CVSS5.9AI score0.00203EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/23 4:47 p.m.5 views

CVE-2018-25132 MyBB Trending Widget Plugin 1.2 - Cross-Site Scripting

MyBB Trending Widget Plugin 1.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through thread titles. Attackers can modify thread titles with script payloads that will execute when other users view the trending widget...

6.1CVSS5.2AI score0.00203EPSS
SaveExploits1References3
CVE
CVE
added 2026/01/23 4:47 p.m.21 views

CVE-2018-25132

CVE-2018-25132 affects the MyBB Trending Widget Plugin 1.2. The vulnerability is a cross-site scripting (XSS) flaw that lets an attacker inject malicious scripts via thread titles. These payloads execute when other users view the trending widget. The provided documents consistently describe the i...

6.1CVSS5.2AI score0.00203EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2026/01/23 4:47 p.m.39 views

CVE-2018-25132 MyBB Trending Widget Plugin 1.2 - Cross-Site Scripting

MyBB Trending Widget Plugin 1.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through thread titles. Attackers can modify thread titles with script payloads that will execute when other users view the trending widget...

6.1CVSS0.00203EPSS
SaveExploits1References3
CVE
CVE
added 2026/01/23 4:47 p.m.21 views

CVE-2018-25116

The CVE-2018-25116 entry pertains to MyBB Thread Redirect Plugin version 0.2.1, which is documented to contain a cross-site scripting (XSS) vulnerability in the custom text input field for thread redirects. Attackers can inject SVG scripts that execute when other users view the thread, enabling a...

6.1CVSS5.3AI score0.00278EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/23 4:47 p.m.5 views

CVE-2018-25116

MyBB Thread Redirect Plugin 0.2.1 contains a cross-site scripting vulnerability in the custom text input field for thread redirects. Attackers can inject malicious SVG scripts that will execute when other users view the thread, allowing arbitrary script execution...

6.1CVSS5.9AI score0.00278EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/23 4:47 p.m.6 views

CVE-2018-25116 MyBB Thread Redirect Plugin 0.2.1 - Cross-Site Scripting

MyBB Thread Redirect Plugin 0.2.1 contains a cross-site scripting vulnerability in the custom text input field for thread redirects. Attackers can inject malicious SVG scripts that will execute when other users view the thread, allowing arbitrary script execution...

6.1CVSS5.3AI score0.00278EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/01/23 4:47 p.m.37 views

CVE-2018-25116 MyBB Thread Redirect Plugin 0.2.1 - Cross-Site Scripting

MyBB Thread Redirect Plugin 0.2.1 contains a cross-site scripting vulnerability in the custom text input field for thread redirects. Attackers can inject malicious SVG scripts that will execute when other users view the thread, allowing arbitrary script execution...

6.1CVSS0.00278EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/01/23 12:0 a.m.8 views

trends-widget Cross-Site Scripting Vulnerability

Trends-Widget is a plugin developed by Zain Ali, a personal developer for MyBB. Version 1.2 of Trends-Widget contains a cross-site scripting vulnerability. This vulnerability stems from insufficient input validation for thread titles, which may lead to cross-site scripting attacks...

6.1CVSS5.6AI score0.00203EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/01/23 12:0 a.m.17 views

PT-2026-4502

MyBB Trending Widget Plugin 1.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through thread titles. Attackers can modify thread titles with script payloads that will execute when other users view the trending widget...

6.1CVSS5.2AI score0.00203EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/01/23 12:0 a.m.7 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: curl (UTSA-2026-004928)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004928 advisory. When doing multi-threaded LDAPS transfers LDAP over TLS with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore...

6.3CVSS5.6AI score0.00106EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/01/23 12:0 a.m.11 views

Thread Redirect plugin for MyBB – Cross-site scripting vulnerabilities

The Thread Redirect plugin for MyBB is a plugin developed by Jamie Sage, an individual developer. The Thread Redirect plugin for MyBB version 0.2.1 has a cross-site scripting vulnerability. This vulnerability stems from improper cleaning of custom text input fields, which may lead to cross-site...

6.1CVSS5.6AI score0.00278EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/01/23 12:0 a.m.11 views

Linux Kernel Security Vulnerabilities

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the improper closure of the IRQ working thread when removing devices, potentially leading to crashes...

5.5CVSS6AI score0.00144EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2026/01/22 10:48 a.m.191 views

Exploit for CVE-2026-24061

CVE-2026-24061 CVE-2026-24061 Batch Scanning Tool How to us...

9.8CVSS5.5AI score0.97878EPSS
SaveExploits63
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/22 7:31 a.m.9 views

Malicious code in icloudprocessor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 67b215e1995682b83e1afa8c297ecbdfe93d12db8cc11341b6bda84116d95814 During importing, the package starts a thread that exfiltrates user's files --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

5.5AI score
SaveExploits0References1
OSV
OSV
added 2026/01/22 7:31 a.m.5 views

MAL-2026-449 Malicious code in icloudprocessor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 67b215e1995682b83e1afa8c297ecbdfe93d12db8cc11341b6bda84116d95814 During importing, the package starts a thread that exfiltrates user's files --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

5.5AI score
SaveExploits0References1
Rows per page
Query Builder