Lucene search
+L

435 matches found

Kitploit
Kitploit
•added 2026/09/26 6:19 a.m.•13 views

yellow

root@kitploit: | | | | | | |/ \ | |/ \ \ /\ / / | || | / | | \ V V / , ||||/ // |/ - Just add blue. yellow - 青を加えるだけ バイナリを実行した際に canarytoken をトリガーする、シンプルなバイナリ改変です。 攻撃者に対する本番システムのブービートラップ化に最適です。 現在、4つの方法があります: yellow は、トークンをトリガーした後、任意のファイル拡張子に基づいて実際のバイナリを実行するバイナリを使った、対象を絞ったアプローチです。 spe...

5.9AI score
SaveExploits0
Nuclei
Nuclei
•added 2026/09/26 2:05 a.m.•24 views

Yellow Pencil Visual Theme Customizer < 7.2.1 - Privilege Escalation

The WaspThemes Visual CSS Style Editor aka yellow-pencil-visual-theme-customizer plugin before 7.2.1 for WordPress allows ypoptionupdate CSRF, as demonstrated by use of ypremoteget to obtain admin access. id: CVE-2019-11886 info: name: Yellow Pencil Visual Theme Customizer 7.2.1 - Privilege...

8.8CVSS7.8AI score0.0189EPSS
SaveExploits1References3
Kitploit
Kitploit
•added 2026/09/21 5:09 a.m.•10 views

Yellow-Key-Check

このリポジトリには README がありません。...

5.7AI score
SaveExploits0
NVD
NVD
•added 2026/05/20 2:16 a.m.•36 views

CVE-2026-8424

The Remove Yellow BGBOX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the 'rybbapisettings' page. This makes it possible for unauthenticated attackers to reset the plugin's stored...

4.3CVSS0.0019EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/05/20 1:25 a.m.•18 views

CVE-2026-8424

The Remove Yellow BGBOX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the 'rybbapisettings' page. This makes it possible for unauthenticated attackers to reset the plugin's stored...

4.3CVSS5.7AI score0.0019EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/05/20 12:00 a.m.•23 views

WordPress plugin Remove Yellow BGBOX 跨站请求伪造漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.3CVSS5.7AI score0.0019EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/20 12:00 a.m.•0 views

CVE-2026-8424: Cross-Site Request Forgery (CSRF)

The Remove Yellow BGBOX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the 'rybbapisettings' page. This makes it possible for unauthenticated attackers to reset the plugin's stored...

4.3CVSS5.6AI score0.0019EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/05/19 12:07 p.m.•30 views

WordPress Remove Yellow BGBOX plugin <= 1.0 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin Remove Yellow BGBOX versions = 1.0...

4.3CVSS5.8AI score0.0019EPSS
SaveExploits0References1Affected Software1
GithubExploit
GithubExploit
•added 2026/05/05 3:26 a.m.•138 views

Security-Team---Workspace-

🛡️ Security Team Workspace El primer framework de cibersegur...

5.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/01/09 12:19 p.m.•15 views

CVE-2018-10726

A stored XSS vulnerability was found in Datenstrom Yellow 0.7.3 via an "Edit page" action. NOTE: the vendor disputes the relevance of this report because an installation accessible to untrusted users is supposed to have parserSafeMode=1 in system/config/config.ini to prevent XSS...

5.4CVSS5.8AI score0.00643EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/12 4:37 a.m.•9 views

EUVD-2025-120021

Malicious code in imperialchipmunkyellow-21 npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/12 3:04 a.m.•6 views

EUVD-2025-117504

Malicious code in bright-yellow-ermine npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/12 3:04 a.m.•13 views

EUVD-2025-117494

Malicious code in chemical-yellow-gazelle npm...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/12 3:04 a.m.•12 views

Malicious code in massive-yellow-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 347c0a4bc6c6dc50164f4938053abfe0fb420772bc5eb18e843d0551531f3155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/12 3:04 a.m.•5 views

EUVD-2025-117146

Malicious code in puzzled-yellow-sole npm...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/12 3:04 a.m.•9 views

Malicious code in spare-yellow-cow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac9fe13b222cf34787fe46db80eee50175081d57e34c9adecc138f5c77cbfda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/12 3:04 a.m.•8 views

EUVD-2025-117079

Malicious code in spare-yellow-cow npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/12 3:04 a.m.•13 views

EUVD-2025-117242

Malicious code in massive-yellow-marten npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/12 3:04 a.m.•6 views

EUVD-2025-117326

Malicious code in historical-yellow-walrus npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/12 3:04 a.m.•5 views

EUVD-2025-117094

Malicious code in silly-yellow-mammal npm...

6.6AI score
SaveExploits0
Rows per page
Query Builder