Lucene search
+L

148582 matches found

Openbugbounty
Openbugbounty
added 2025/02/27 7:31 p.m.9 views

akucode.com Cross Site Scripting vulnerability OBB-4030721

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2025/02/27 5:14 p.m.10 views

jaguar.in Cross Site Scripting vulnerability OBB-4030715

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2025/02/27 3:28 p.m.12 views

eskdaleside-cum-ugglebarnby-pc.org.uk Cross Site Scripting vulnerability OBB-4030709

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/27 2:30 p.m.19 views

CVE-2024-54444

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Elementor Elementor Website Builder elementor allows Stored XSS.This issue affects Elementor Website Builder: from n/a through = 3.25.10...

6.5CVSS7.2AI score0.00283EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2025/02/27 2:30 p.m.6 views

telugushaadi.com Cross Site Scripting vulnerability OBB-4030696

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2025/02/27 10:59 a.m.10 views

emacs: Shell Injection Vulnerability in GNU Emacs via Custom "man" URI Scheme

A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect...

8.8CVSS6.1AI score0.02581EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/02/27 10:08 a.m.16 views

emacs: Shell Injection Vulnerability in GNU Emacs via Custom "man" URI Scheme

A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect...

8.8CVSS6.1AI score0.02581EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2025/02/26 12:00 a.m.14 views

The vulnerability of the Adobe Experience Manager content and media data management system lies in the insufficient protection of website structures, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.2AI score0.00262EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2025/02/25 3:15 p.m.19 views

CVE-2024-54444

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Elementor Elementor Website Builder elementor allows Stored XSS.This issue affects Elementor Website Builder: from n/a through = 3.25.10...

6.5CVSS0.00283EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/25 3:15 p.m.7 views

CVE-2024-54444

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Elementor Elementor Website Builder allows Stored XSS. This issue affects Elementor Website Builder: from n/a through 3.25.10...

5.4CVSS7.3AI score0.00283EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/25 2:17 p.m.143 views

CVE-2024-54444

CVE-2024-54444 is a stored Cross-Site Scripting vulnerability in the WordPress plugin Elementor Website Builder (affected:

6.5CVSS7.2AI score0.00283EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/02/25 12:00 a.m.9 views

WordPress plugin Elementor Website Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

6.5CVSS7.6AI score0.00283EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/02/24 9:14 a.m.9 views

WordPress Elementor plugin <= 3.25.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Elementor Website Builder versions = 3.25.10...

6.5CVSS6.1AI score0.00283EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/24 12:00 a.m.13 views

The vulnerability in the open-source e-commerce web application PrestaShop relates to the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks.

The vulnerability in the open-source e-commerce web application PrestaShop relates to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

10CVSS7.5AI score0.5617EPSS
SaveExploits2References4Affected Software1
Hacker One
Hacker One
added 2025/02/23 5:54 p.m.9 views

U.S. Dept Of Defense: Exposed Sensitive PDF: Misconfigured Access Controls Leading to Information Disclosure

A sensitive PDF document marked "UNCLASSIFIED // NOT APPROVED FOR PUBLIC RELEASE // FOR OFFICIAL USE ONLY" was found to be publicly accessible on the ACC website due to a misconfigured access control. This resulted in an unintended disclosure of internal information...

6.5AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2025/02/21 1:36 p.m.15 views

sendabienesraices.com Improper Access Control vulnerability OBB-4027564

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2025/02/21 6:17 a.m.17 views

valuenews.com Open Redirect vulnerability OBB-4027453

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
OpenVAS
OpenVAS
added 2025/02/21 12:00 a.m.15 views

Ubuntu: Security Advisory (USN-7279-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.02902EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/02/21 12:00 a.m.17 views

The vulnerability of the task and project management service WEEEK lies in the lack of measures taken to protect the website structure, allowing a perpetrator to execute arbitrary JavaScript code.

The vulnerability of the WEEEK task and project management service is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a remote attacker to execute arbitrary JavaScript code...

8.9CVSS5.9AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/21 12:00 a.m.12 views

The vulnerability of the task and project management service WEEEK, related to the failure to protect the structure of the web page, allows a violator to execute arbitrary code.

The vulnerability of the WEEEK task and project management service is related to the lack of measures taken to protect the website structure, allowing a hacker to execute arbitrary code in the field by injecting specially crafted HTML code...

8.9CVSS6AI score
SaveExploits0Affected Software1
Rows per page
Query Builder