431 matches found
Yellow Pencil Visual Theme Customizer < 7.2.1 - Privilege Escalation
The WaspThemes Visual CSS Style Editor aka yellow-pencil-visual-theme-customizer plugin before 7.2.1 for WordPress allows ypoptionupdate CSRF, as demonstrated by use of ypremoteget to obtain admin access. id: CVE-2019-11886 info: name: Yellow Pencil Visual Theme Customizer 7.2.1 - Privilege...
Yellow-Key-Check
इस रिपॉजिटरी में README नहीं है।...
yellow
root@kitploit: | | | | | | |/ \ | |/ \ \ /\ / / | || | / | | \ V V / , ||||/ // |/ - Just add blue. yellow - 파란색만 더하면 됩니다 바이너리가 실행될 때 canarytoken을 트리거하는 간단한 바이너리 변조 도구입니다. 공격자에 대비해 프로덕션 시스템에 부비트랩을 설치하는 데 이상적입니다. 현재 네 가지 방법이 있습니다: yellow는 선택한 파일 확장자를 기반으로 토큰을 트리거한 다음 실제 바이너리를 실행하는 바이너리를 사용하는...
CVE-2026-8424
The Remove Yellow BGBOX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the 'rybbapisettings' page. This makes it possible for unauthenticated attackers to reset the plugin's stored...
CVE-2026-8424
The Remove Yellow BGBOX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the 'rybbapisettings' page. This makes it possible for unauthenticated attackers to reset the plugin's stored...
WordPress plugin Remove Yellow BGBOX 跨站请求伪造漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
WordPress Remove Yellow BGBOX plugin <= 1.0 - Cross-Site Request Forgery vulnerability
Cross-Site Request Forgery vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin Remove Yellow BGBOX versions = 1.0...
Security-Team---Workspace-
🛡️ Security Team Workspace El primer framework de cibersegur...
CVE-2018-10726
A stored XSS vulnerability was found in Datenstrom Yellow 0.7.3 via an "Edit page" action. NOTE: the vendor disputes the relevance of this report because an installation accessible to untrusted users is supposed to have parserSafeMode=1 in system/config/config.ini to prevent XSS...
EUVD-2025-120021
Malicious code in imperialchipmunkyellow-21 npm...
Malicious code in massive-yellow-marten (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 347c0a4bc6c6dc50164f4938053abfe0fb420772bc5eb18e843d0551531f3155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117504
Malicious code in bright-yellow-ermine npm...
EUVD-2025-117146
Malicious code in puzzled-yellow-sole npm...
EUVD-2025-117494
Malicious code in chemical-yellow-gazelle npm...
EUVD-2025-117079
Malicious code in spare-yellow-cow npm...
Malicious code in spare-yellow-cow (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac9fe13b222cf34787fe46db80eee50175081d57e34c9adecc138f5c77cbfda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117211
Malicious code in neat-yellow-flyingfish npm...
EUVD-2025-117242
Malicious code in massive-yellow-marten npm...