Lucene search
K

8 matches found

OSV
OSV
added 2026/03/20 2:38 a.m.3 views

CVE-2026-32891 Anchorr Privilege Escalation: Jellyseerr User → Anchorr Admin via Stored XSS

Anchorr is a Discord bot for requesting movies and TV shows and receiving notifications when items are added to a media server. Versions 1.4.1 and below contain a stored XSS vulnerability in the Jellyseerr user selector. Jellyseerr allows any account holder to execute arbitrary JavaScript in the...

9CVSS6.1AI score0.00025EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/03/20 12:0 a.m.1 views

PT-2026-26546

Anchorr is a Discord bot for requesting movies and TV shows and receiving notifications when items are added to a media server. Versions 1.4.1 and below contain a stored XSS vulnerability in the Jellyseerr user selector. Jellyseerr allows any account holder to execute arbitrary JavaScript in the...

9CVSS6AI score0.00025EPSS
Exploits0References8
CNNVD
CNNVD
added 2026/03/20 12:0 a.m.2 views

Anchorr 安全漏洞

Anchorr is an open-source Discord bot developed by openVESSL that integrates media search and notifications. Versions of Anchorr 1.4.1 and earlier contain security vulnerabilities. These vulnerabilities stem from a storage-oriented cross-site scripting vulnerability in the Jellyseerr user selecto...

9CVSS5.7AI score0.00025EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2024-32499

Malicious code in bioql PyPI...

3.1CVSS4.1AI score0.00064EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/05/23 9:18 a.m.3 views

CVE-2024-3931

A vulnerability was found in Totara LMS up to 18.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file admin/roles/check.php of the component User Selector. The manipulation of the argument ID Number leads to cross site scripting. The attack may be...

5.4CVSS3.8AI score0.00152EPSS
Exploits0References1
OSV
OSV
added 2024/04/18 12:15 a.m.1 views

CVE-2024-3931

A vulnerability was found in Totara LMS up to 18.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file admin/roles/check.php of the component User Selector. The manipulation of the argument ID Number leads to cross site scripting. The attack may be...

5.4CVSS3.7AI score
Exploits0References3
CNNVD
CNNVD
added 2022/10/31 12:0 a.m.3 views

Forma Learning Management System SQL注入漏洞

Forma Learning Management System LMS is a Learning Management System LMS. A security vulnerability exists in the Forma Learning Management System version 3.1.0, which originates from an SQl injection of the dynfilter parameter of the appLms/ajax.admserver.php?r=widget/userselector/getusertabledat...

7.6CVSS6.5AI score0.00294EPSS
Exploits0References2
0day.today
0day.today
added 2005/10/26 12:0 a.m.37 views

Linux Kernel 2.4/2.6 bluez Local Root Privilege Escalation Exploit (update)

Exploit for linux platform in category local exploits =========================================================================== Linux Kernel 2.4/2.6 bluez Local Root Privilege Escalation Exploit update =========================================================================== / Due to many...

6.8AI score
Exploits0
Rows per page
Query Builder