Lucene search
K

21 matches found

Cvelist
Cvelist
added 2026/03/25 4:15 p.m.27 views

CVE-2026-32545 WordPress Taboola Pixel plugin <= 1.1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Taboola Taboola Pixel taboola-pixel allows Reflected XSS.This issue affects Taboola Pixel: from n/a through = 1.1.4...

7.1CVSS0.00146EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-28289

Malicious code in bioql PyPI...

5.5CVSS5.5AI score0.01714EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2025/07/01 4:0 p.m.5 views

Understand your software’s supply chain with GitHub’s dependency graph

What if you could spot the weakest link in your software supply chain before it breaks? With GitHub's dependency graph, you can. By providing a clear, complete view of the external packages your code depends on, both directly and indirectly, it allows you to understand, secure, and manage your...

7.2AI score
Exploits0
OSV
OSV
added 2025/05/29 1:10 a.m.2 views

MINI-WMR9-HHXC-HCJF

Bulletin has no description...

9.8CVSS7.2AI score0.00564EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2023-31629

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in the sqlounionscope component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.2AI score0.00905EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2016-9427

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of bdwgc denial of service heap buffer overflow crash and possibly...

9.8CVSS8.4AI score0.0414EPSS
Exploits0References2
Circl
Circl
added 2025/03/01 6:27 a.m.3 views

CVE-2025-27554

creationtimestamp| type| source ---|---|--- 2025-03-01 06:27:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6052 2025-03-01 07:48:16+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114086071203267834 2025-03-01 08:00:33+00:00|...

9.9CVSS5.8AI score0.00741EPSS
Exploits0References4
Circl
Circl
added 2025/01/28 4:15 a.m.3 views

CVE-2024-53869

creationtimestamp| type| source ---|---|--- 2025-01-28 04:15:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113904039606967230 2025-01-28 04:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrlt53hxd2f 2025-01-28 06:15:06+00:00| seen|...

5.5CVSS4.7AI score0.00185EPSS
Exploits0References5
CVE
CVE
added 2025/01/21 8:53 p.m.52 views

CVE-2025-21552

CVE-2025-21552 affects JD Edwards EnterpriseOne Orchestrator (E1 IOT Orchestrator Security). Connected PT-2025-4274 details a vulnerability due to insufficient input validation in the E1 IOT Orchestrator Security component, with affected versions prior to 9.2.9.2.Impact: low-privilege attacker wi...

6.5CVSS5.8AI score0.00399EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2025/01/17 3:22 p.m.9 views

CGA-9G23-PGWC-P32G

Bulletin has no description...

9.8CVSS9.3AI score0.08191EPSS
Exploits1
Circl
Circl
added 2024/12/31 10:2 p.m.10 views

CVE-2024-13084

creationtimestamp| type| source ---|---|--- 2024-12-31 22:02:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113749691589703038 2024-12-31 22:15:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3len344s7rp25 2024-12-31 23:46:13+00:00| seen|...

9.8CVSS6.2AI score0.00393EPSS
Exploits0References5
GithubExploit
GithubExploit
added 2024/10/10 9:30 a.m.320 views

Exploit for CVE-2024-4439

Exploit CVE-2024-4439 This Python script demonstrates an exp...

7.2CVSS7.1AI score0.70822EPSS
Exploits4
Circl
Circl
added 2024/10/08 5:54 p.m.10 views

CVE-2024-43564

creationtimestamp| type| source ---|---|--- 2024-10-08 17:54:47+00:00| seen| https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review...

8.8CVSS5.7AI score0.01302EPSS
Exploits0References1
OSV
OSV
added 2024/10/07 9:16 a.m.1 views

BELL-CVE-2024-46954

Bulletin has no description...

7.8CVSS5.8AI score0.0055EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2024/05/27 12:0 a.m.14 views

Fedora: Security Advisory (FEDORA-2024-be032e564d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.2CVSS9.6AI score0.00763EPSS
Exploits1References4
CVE
CVE
added 2024/05/02 4:52 p.m.48 views

CVE-2024-1679

Technical details about CVE-2024-1679 are not publicly provided in the connected documents you shared. The initial description notes Stored XSS in the WooCommerce Barcode Labels plugin, but no further technical specifics (affected versions, exploit steps, or fixes) are present here. Monitor for u...

6.4CVSS6.1AI score0.00412EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/14 12:0 a.m.5 views

PT-2023-20379 · Intel · Intel(R) Aptio* V Uefi Firmware Integrator Tools

Name of the Vulnerable Software and Affected Versions: IntelR Aptio V UEFI Firmware Integrator Tools affected versions not specified Description: The issue is related to uncontrolled resource consumption, which may allow an authenticated user to potentially enable denial of service via local...

5.5CVSS5.1AI score0.00205EPSS
Exploits0References3
CVE
CVE
added 2021/12/01 2:15 a.m.42 views

CVE-2021-20860

CVE-2021-20860 is a CSRF vulnerability in ELECOM LAN routers that allows a remote authenticated attacker to hijack administrator authentication via a crafted page. Affected devices span multiple ELECOM families (e.g., WRC-1167GST2, WRC-2533-series, WRC-1750GS, WRC-1900GST, and related EDWRC/WRH/W...

8.8CVSS8.5AI score0.00536EPSS
Exploits0References2Affected Software1
myhack58
myhack58
added 2017/01/17 12:0 a.m.51 views

XSSI: a not famous but the impact of a wide range of Web vulnerabilities-vulnerability warning-the black bar safety net

Find a specific category of vulnerability two key components: vulnerability awareness and find the vulnerability of the difficulty. Cross-site scripting containsXSSIvulnerability in the fact of a common standard i.e.: OWASP TOP 10 and is not mentioned. In addition and there is no disclosure of th...

6.8AI score
Exploits0
seebug.org
seebug.org
added 2009/12/26 12:0 a.m.41 views

TLS Renegotiation Vulnerability: Proof of Concept Code (Python)

No description provided by source. I created a Camtasia Movie some time ago "exploiting" the vulnerability by injecting "/user/profile/E1/" into the first ssl request to "/" http://www.hacking-lab.com/download/ This can help others to understand the vulnerability. Regards Ivan -----Original...

7.1AI score
Exploits0
Rows per page
Query Builder