Lucene search
+L

3140 matches found

ATTACKERKB
ATTACKERKB
added 2022/02/28 9:15 a.m.9 views

CVE-2022-0383

The WP Review Slider WordPress plugin before 11.0 does not sanitise and escape the pid parameter when copying a Twitter source, which could allow a high privilege users to perform SQL Injections attacks...

7.2CVSS7.2AI score0.01467EPSS
SaveExploits2References3
OSV
OSV
added 2022/02/28 9:15 a.m.6 views

CVE-2022-0383

The WP Review Slider WordPress plugin before 11.0 does not sanitise and escape the pid parameter when copying a Twitter source, which could allow a high privilege users to perform SQL Injections attacks...

7.2CVSS5.8AI score0.01467EPSS
SaveExploits2References2
NVD
NVD
added 2022/02/28 9:15 a.m.24 views

CVE-2022-0383

The WP Review Slider WordPress plugin before 11.0 does not sanitise and escape the pid parameter when copying a Twitter source, which could allow a high privilege users to perform SQL Injections attacks...

7.2CVSS0.01467EPSS
SaveExploits2References2
Prion
Prion
added 2022/02/28 9:15 a.m.24 views

Sql injection

The WP Review Slider WordPress plugin before 11.0 does not sanitise and escape the pid parameter when copying a Twitter source, which could allow a high privilege users to perform SQL Injections attacks...

6.5CVSS7AI score0.01467EPSS
SaveExploits2References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.10 views

WordPress Add Twitter Pixel for Twitter ads plugin <= 1.0.3 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Add Twitter Pixel for Twitter ads plugin versions = 1.0.3. Solution Update the WordPress Add Twitter Pixel for Twitter ads plugin to the latest available version at least 1.0.4...

2.7AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.5 views

WordPress Add Twitter Pixel for Twitter ads plugin <= 1.0.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Add Twitter Pixel for Twitter ads plugin versions = 1.0.3. Solution Update the WordPress Add Twitter Pixel for Twitter ads plugin to the latest available version at least 1.0.4...

4.2AI score
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/02/28 12:0 a.m.6 views

WordPress SQL注入漏洞

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blogging sites on PHP and MySQL servers.WordPress WP Review Slider plugin version 11.0 before the SQL injection vulnerability, the vulnerability stems fr...

7.2CVSS6AI score0.01467EPSS
SaveExploits2References4
Openbugbounty
Openbugbounty
added 2022/02/25 12:48 p.m.10 views

registar.obnova.gov.rs Cross Site Scripting vulnerability OBB-2383461

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
Wordfence Blog
Wordfence Blog
added 2022/02/24 5:54 a.m.24 views

Entering a Higher State of Vigilance – Ukraine Under Attack

It appears that Russia has just commenced the invasion of Ukraine. Check your preferred international news outlet, but according to the Ukrainian foreign minister "Putin has just launched a full-scale invasion of Ukraine." Ukrainian airspace is closed with flights diverting. The Twitter Safety...

0.5AI score
SaveExploits0
Kitploit
Kitploit
added 2022/02/23 8:30 p.m.38 views

Scylla - The Simplistic Information Gathering Engine | Find Advanced Information On A Username, Website, Phone Number, Etc

Notice For Deprecation This project is no longer being worked on by the developer. As of today, the program has many flaws and is not up to modern OSINT standards. A lot of APIs utilized within Scylla are no longer working as they did when the project was first released. The developer wrote Scyll...

7.3AI score
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2022/02/23 8:22 a.m.16 views

enviro.epa.gov Cross Site Scripting vulnerability OBB-2382669

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| enviro.epa.gov ---|--- Open Bug Bounty...

6.3AI score
SaveExploits0
zdt
zdt
added 2022/02/23 12:0 a.m.796 views

Twitter reset account Private Method 0day Exploit

Twitter reset any Account Private Method Exploit...

7.1AI score
SaveExploits0
Hacker One
Hacker One
added 2022/02/21 7:34 p.m.21 views

Twitter: Delete direct message history without access the proper conversation_id

Hello Team i found a bug in your system this bug already fixed as i know,but i try this another way, and its worked, this is why i report it the bug is i was able to delete message history without access the proper conversation id user 1 id: 1234 user 2 id: 5678 their conversation look like...

0.2AI score
SaveExploits0
OSV
OSV
added 2022/02/21 11:15 a.m.4 views

CVE-2021-25058

The Buffer Button WordPress plugin through 1.0 was vulnerable to Authenticated Stored Cross Site Scripting XSS within the Twitter username to mention text field...

5.4CVSS5.8AI score0.006EPSS
SaveExploits2References1
NVD
NVD
added 2022/02/21 11:15 a.m.24 views

CVE-2021-25058

The Buffer Button WordPress plugin through 1.0 was vulnerable to Authenticated Stored Cross Site Scripting XSS within the Twitter username to mention text field...

5.4CVSS0.006EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2022/02/21 10:45 a.m.28 views

CVE-2021-25058 The Buffer Button <= 1.0 - Authenticated Stored Cross Site Scripting (XSS)

The Buffer Button WordPress plugin through 1.0 was vulnerable to Authenticated Stored Cross Site Scripting XSS within the Twitter username to mention text field...

5.5AI score0.006EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2022/02/21 12:0 a.m.7 views

WordPress plugin Buffer Button 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Buffer Button prior to version 1.0, which...

5.4CVSS5.2AI score0.006EPSS
SaveExploits2References2
Openbugbounty
Openbugbounty
added 2022/02/20 2:37 p.m.18 views

enviro.epa.gov Cross Site Scripting vulnerability OBB-2381440

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| enviro.epa.gov ---|--- Open Bug Bounty...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2022/02/20 9:38 a.m.15 views

vl.arbitr.gov.ua Cross Site Scripting vulnerability OBB-2380702

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
Openbugbounty
Openbugbounty
added 2022/02/17 11:13 p.m.12 views

dna.arbitr.gov.ua Cross Site Scripting vulnerability OBB-2376945

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
Rows per page
Query Builder