Lucene search
+L

9051 matches found

Patchstack
Patchstack
added 2024/12/03 11:52 p.m.8 views

WordPress Visual Portfolio, Photo Gallery & Post Grid plugin <= 3.3.9 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library

Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library vulnerability discovered by Webbernaut in WordPress Plugin Visual Portfolio, Photo Gallery & Post Grid versions = 3.3.9...

6.4CVSS6.1AI score0.00421EPSS
SaveExploits0References1Affected Software1
HackRead
HackRead
added 2024/12/03 12:35 p.m.22 views

The Ultimate Guide to Designing a Logo Online: Tools, Tips, and Tricks

A logo is more than just a visual element—it’s the cornerstone of your brand identity. It communicates your…...

7.3AI score
SaveExploits0
OSV
OSV
added 2024/11/27 12:56 a.m.10 views

MAL-2024-11047 Malicious code in json-schema-editor-visual-yapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2c434b89e0272562d45ccf56680fe4b6edf72651ddb2603233fa84ad67bf2c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:0 a.m.9 views

The vulnerability of the SourceTree visual Git client, related to improper code generation management, allows a hacker to execute arbitrary code.

The vulnerability of the visual Git client SourceTree is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8AI score0.0072EPSS
SaveExploits0References4Affected Software1
OpenVAS
OpenVAS
added 2024/11/26 12:0 a.m.12 views

openSUSE Security Advisory (SUSE-SU-2024:4050-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.1AI score0.00803EPSS
SaveExploits0References5
GithubExploit
GithubExploit
added 2024/11/23 12:12 p.m.447 views

Exploit for Untrusted Pointer Dereference in Microsoft

CVE-2024-35250-BOF The Beacon Object File BOF implementati...

7.8CVSS7.3AI score0.25222EPSS
SaveExploits7
OSV
OSV
added 2024/11/21 11:15 a.m.9 views

CVE-2024-10172

The WPBakery Visual Composer WHMCS Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's voidwbwhmcselaoutssearch shortcode in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. Thi...

5.4CVSS5.9AI score0.00492EPSS
SaveExploits0References2
NVD
NVD
added 2024/11/21 11:15 a.m.14 views

CVE-2024-10172

The WPBakery Visual Composer WHMCS Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's voidwbwhmcselaoutssearch shortcode in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. Thi...

6.4CVSS0.00492EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/11/21 2:6 a.m.14 views

CVE-2024-10172 WPBakery Visual Composer WHMCS Elements <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via void_wbwhmcse_laouts_search Shortcode

The WPBakery Visual Composer WHMCS Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's voidwbwhmcselaoutssearch shortcode in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. Thi...

6.4CVSS5.8AI score0.00492EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/11/21 12:0 a.m.12 views

The vulnerability of the Python extension for Visual Studio Code, a code editor from Visual Studio Code, relates to breaches of confidentiality boundaries, allowing the intruder to execute arbitrary code.

The vulnerability of the Python extension for the Visual Studio Code code editor involves breaching trust boundaries. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...

10CVSS5.9AI score0.01217EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/11/20 7:9 a.m.14 views

BIT-DOTNET-SDK-2024-43498 .NET and Visual Studio Remote Code Execution Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability...

9.8CVSS9.4AI score0.03512EPSS
SaveExploits0References2
OSV
OSV
added 2024/11/20 7:8 a.m.17 views

BIT-DOTNET-2024-43499 .NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability...

7.5CVSS8.4AI score0.02559EPSS
SaveExploits0References2
OSV
OSV
added 2024/11/20 7:8 a.m.16 views

BIT-DOTNET-SDK-2024-43499 .NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability...

7.5CVSS8.4AI score0.02559EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/11/20 12:0 a.m.16 views

WordPress WPBakery Visual Composer WHMCS Elements Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)

Software WPBakery Visual Composer WHMCS Elements Type Plugin Vulnerable versions = 1.0.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10172 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 30c8a799718e Credits...

6.4CVSS5.7AI score0.00492EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/20 12:0 a.m.10 views

PT-2024-16086 · WordPress · Wpbakery Visual Composer Whmcs Elements

Name of the Vulnerable Software and Affected Versions: WPBakery Visual Composer WHMCS Elements plugin for WordPress versions up to, and including, 1.0.4 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied...

6.4CVSS7.8AI score0.00492EPSS
SaveExploits0References5
GithubExploit
GithubExploit
added 2024/11/19 9:36 p.m.483 views

Exploit for Allocation of Resources Without Limits or Throttling in Vmware Spring_Framework

Spring CVE-2022-22970 Proof of Concept This repo contains...

5.3CVSS6.8AI score0.01962EPSS
SaveExploits1
GithubExploit
GithubExploit
added 2024/11/19 8:57 a.m.1286 views

Exploit for Improper Authentication in Microsoft

PoC exploit for CVE-2024-49039, a vulnerability in Windows Task...

8.8CVSS9.1AI score0.13719EPSS
SaveExploits2
CNVD
CNVD
added 2024/11/15 12:0 a.m.24 views

Adobe After Effects Buffer Overflow Vulnerability (CNVD-2024-46801)

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D synthesis, animation and visual effects production. A security vulnerability exists in Adobe After Effects, which can be...

5.5CVSS6.6AI score0.00258EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/11/15 12:0 a.m.15 views

Microsoft Visual Studio Code Python Extension Remote Code Execution Vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A remote code execution vulnerability exists in Microsoft Visual Studio Code Python Extension, which can be exploited by an attacker to execute arbitrary code on a system...

8.8CVSS8.1AI score0.01217EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/11/15 12:0 a.m.28 views

Adobe After Effects Buffer Overflow Vulnerability (CNVD-2024-46800)

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D synthesis, animation and visual effects production. A security vulnerability exists in Adobe After Effects, which can be...

7.8CVSS7.5AI score0.00311EPSS
SaveExploits0References1
Rows per page
Query Builder