Lucene search
+L

379 matches found

CNNVD
CNNVD
•added 2025/03/24 12:00 a.m.•11 views

WordPress plugin Replace Default Words 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

7.1CVSS8.2AI score0.00163EPSS
SaveExploits0References1
OSV
OSV
•added 2025/02/10 12:06 a.m.•8 views

OSV-2025-107 Use-of-uninitialized-value in get_words_lossless

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=394980079 Crash type: Use-of-uninitialized-value Crash state: getwordslossless unpacksamples unpacksamplesworkerthread...

7.2AI score
SaveExploits0References1
NVD
NVD
•added 2025/01/02 12:15 p.m.•35 views

CVE-2024-38753

Cross-Site Request Forgery CSRF vulnerability in Labib Ahmed Animated Rotating Words css3-rotating-words allows Cross Site Request Forgery.This issue affects Animated Rotating Words: from n/a through = 5.6...

4.3CVSS0.00195EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/02 12:15 p.m.•14 views

CVE-2023-47187

Missing Authorization vulnerability in Labib Ahmed Animated Rotating Words css3-rotating-words allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animated Rotating Words: from n/a through = 5.4...

5.4CVSS0.0035EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/02 12:01 p.m.•6 views

CVE-2024-38753 WordPress Animated Rotating Words Plugin <= 5.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Labib Ahmed Animated Rotating Words css3-rotating-words allows Cross Site Request Forgery.This issue affects Animated Rotating Words: from n/a through = 5.6...

4.3CVSS5.1AI score0.00195EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/02 12:01 p.m.•36 views

CVE-2024-38753 WordPress Animated Rotating Words Plugin <= 5.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Labib Ahmed Animated Rotating Words css3-rotating-words allows Cross Site Request Forgery.This issue affects Animated Rotating Words: from n/a through = 5.6...

4.3CVSS0.00195EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/02 12:01 p.m.•69 views

CVE-2024-38753

CVE-2024-38753 is a CSRF vulnerability affecting the WordPress plugin Animated Rotating Words (Labib Ahmed) up to version 5.6. The available sources confirm CSRF exposure but do not provide exploit details or remediation specifics. CVSS v3.1 metrics show base score 4.3 (Impact: Integrity Low; Ava...

4.3CVSS5.9AI score0.00195EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/02 12:00 a.m.•12 views

PT-2025-1532 · Unknown · Labib Ahmed Animated Rotating Words

Name of the Vulnerable Software and Affected Versions: Labib Ahmed Animated Rotating Words versions through 5.4 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions...

5.4CVSS9.4AI score0.0035EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/01/02 12:00 a.m.•11 views

WordPress plugin Animated Rotating Words 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.4CVSS8.6AI score0.0035EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/02 12:00 a.m.•10 views

WordPress plugin Animated Rotating Words 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS6.7AI score0.00195EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/19 9:23 p.m.•16 views

CLSA-2024-1734643401 Fix CVE(s): CVE-2024-6923

SECURITY UPDATE: Improper quoting of newlines in email headers - debian/patches/CVE-2024-6923.patch: Fix serialization of display name in originator or destination address fields with both encoded words and special chars - CVE-2024-6923...

6.8AI score0.011EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2024/11/10 3:49 a.m.•8 views

SUSE CVE-2024-50253

In the Linux kernel, the following vulnerability has been resolved: bpf: Check the validity of nrwords in bpfiterbitsnew Check the validity of nrwords in bpfiterbitsnew. Without this check, when multiplication overflow occurs for nrbits e.g., when nrwords = 0x0400-0001, nrbits becomes 64, stack...

5.5CVSS7.9AI score0.00186EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/11/09 12:00 a.m.•13 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a faulty nrwords validity check in the bpfiterbitsnew function...

5.5CVSS6.5AI score0.00186EPSS
SaveExploits0References2
Schneier on Security
Schneier on Security
•added 2024/09/03 4:03 p.m.•18 views

List of Old NSA Training Videos

The NSAs "National Cryptographic School Television Catalogue" from 1991 lists about 600 COMSEC and SIGINT training videos. There are a bunch explaining the operations of various cryptographic equipment, and a few code words I have never heard of before...

7.5AI score
SaveExploits0
Vulnrichment
Vulnrichment
•added 2024/07/15 7:43 p.m.•18 views

CVE-2024-38360 Denial of service via Watched Words in Discourse

Discourse is an open source platform for community discussion. In affected versions by creating replacement words with an almost unlimited number of characters, a moderator can reduce the availability of a Discourse instance. This issue has been addressed in stable version 3.2.3 and in current...

4.9CVSS7.7AI score0.00469EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/07/15 7:43 p.m.•29 views

CVE-2024-38360 Denial of service via Watched Words in Discourse

Discourse is an open source platform for community discussion. In affected versions by creating replacement words with an almost unlimited number of characters, a moderator can reduce the availability of a Discourse instance. This issue has been addressed in stable version 3.2.3 and in current...

4.9CVSS0.00469EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/07/11 1:43 p.m.•11 views

WordPress Animated Rotating Words Plugin <= 5.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Animated Rotating Words versions = 5.6...

4.3CVSS7AI score0.00195EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/07/11 12:00 a.m.•15 views

WordPress Animated Rotating Words Plugin <= 5.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software Animated Rotating Words Type Plugin Vulnerable versions = 5.6 Fixed in 5.7 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-38753 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 7dd7430216b1 Credits Majed Refaea...

6.4AI score0.00195EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2024/06/25 1:51 p.m.•16 views

MAL-2024-6992 Malicious code in moving-words (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:51 p.m.•9 views

Malicious code in moving-words (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References2
Rows per page
Query Builder