Threats tagged 'web'

380 threats

Severity	CVSS	Threat	Source	Published
Critical	–	Simple File List WordPress Plugin 4.2.2 · File Upload to RCE Critical2025-07-22Exploit-DB RSS Feed Simple File List WordPress Plugin 4.2.2 - File Upload to RCE Exploit #web #rce #exploit	Exploit-DB RSS Feed	2025-07-22
Medium	–	Joomla JS Jobs plugin 1.4.2 · SQL injection Medium2025-07-22Exploit-DB RSS Feed Joomla JS Jobs plugin 1.4.2 - SQL injection Exploit #web #exploit	Exploit-DB RSS Feed	2025-07-22
Medium	–	Discourse 3.1.1 · Unauthenticated Chat Message Access Medium2025-07-22Exploit-DB RSS Feed Discourse 3.1.1 - Unauthenticated Chat Message Access Exploit #web #exploit	Exploit-DB RSS Feed	2025-07-22
Medium	–	LiveHelperChat 4.61 · Stored Cross Site Scripting (XSS) via Telegram Bot Username Medium2025-07-22Exploit-DB RSS Feed LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Telegram Bot Username Exploit #web #xss #exploit	Exploit-DB RSS Feed	2025-07-22
Medium	–	LiveHelperChat 4.61 · Stored Cross Site Scripting (XSS) via Operator Surname Medium2025-07-22Exploit-DB RSS Feed LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Operator Surname Exploit #web #xss #exploit	Exploit-DB RSS Feed	2025-07-22
Medium	–	LiveHelperChat 4.61 · Stored Cross Site Scripting (XSS) via Facebook Integration Page Name Field Medium2025-07-22Exploit-DB RSS Feed LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Facebook Integration Page Name Field Exploit #web #xss #exploit	Exploit-DB RSS Feed	2025-07-22
Medium	–	LiveHelperChat 4.61 · Stored Cross Site Scripting (XSS) via Personal Canned Messages Medium2025-07-22Exploit-DB RSS Feed LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Personal Canned Messages Exploit #web #xss #exploit	Exploit-DB RSS Feed	2025-07-22
Medium	–	LiveHelperChat 4.61 · Stored Cross Site Scripting (XSS) via the Chat Transfer Function Medium2025-07-22Exploit-DB RSS Feed LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via the Chat Transfer Function Exploit #web #xss #exploit	Exploit-DB RSS Feed	2025-07-22
Medium	–	LiveHelperChat 4.61 · Stored Cross Site Scripting (XSS) via Department Assignment Alias Nick Field Medium2025-07-22Exploit-DB RSS Feed LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Department Assignment Alias Nick Field Exploit #web #xss #exploit	Exploit-DB RSS Feed	2025-07-22
Critical	–	PivotX 3.0.0 RC3 · Remote Code Execution (RCE) Critical2025-07-16Exploit-DB RSS Feed PivotX 3.0.0 RC3 - Remote Code Execution (RCE) Exploit #remote #web #rce	Exploit-DB RSS Feed	2025-07-16
Critical	–	Langflow 1.2.x · Remote Code Execution (RCE) Critical2025-07-16Exploit-DB RSS Feed Langflow 1.2.x - Remote Code Execution (RCE) Exploit #remote #web #rce	Exploit-DB RSS Feed	2025-07-16
Medium	–	SugarCRM 14.0.0 · SSRF/Code Injection Medium2025-07-16Exploit-DB RSS Feed SugarCRM 14.0.0 - SSRF/Code Injection Exploit #web #exploit	Exploit-DB RSS Feed	2025-07-16
Medium	–	White Star Software Protop 4.4.2-2024-11-27 - Local File Inclusion (LFI) Medium2025-07-16Exploit-DB RSS Feed White Star Software Protop 4.4.2-2024-11-27 - Local File Inclusion (LFI) Exploit #local #web #exploit	Exploit-DB RSS Feed	2025-07-16
Medium	–	WP Publications WordPress Plugin 1.2 · Stored XSS Medium2025-07-16Exploit-DB RSS Feed WP Publications WordPress Plugin 1.2 - Stored XSS Exploit #web #xss #exploit	Exploit-DB RSS Feed	2025-07-16
Medium	–	Stacks Mobile App Builder 5.2.3 · Authentication Bypass via Account Takeover Medium2025-07-08Exploit-DB RSS Feed Stacks Mobile App Builder 5.2.3 - Authentication Bypass via Account Takeover Exploit #web #mobile #exploit	Exploit-DB RSS Feed	2025-07-08
Medium	–	Discourse 3.2.x · Anonymous Cache Poisoning Medium2025-07-08Exploit-DB RSS Feed Discourse 3.2.x - Anonymous Cache Poisoning Exploit #web #exploit	Exploit-DB RSS Feed	2025-07-08
Critical	–	Moodle 4.4.0 · Authenticated Remote Code Execution Critical2025-07-02Exploit-DB RSS Feed Moodle 4.4.0 - Authenticated Remote Code Execution Exploit #remote #web #exploit	Exploit-DB RSS Feed	2025-07-02
Critical	–	Sitecore 10.4 · Remote Code Execution (RCE) Critical2025-06-26Exploit-DB RSS Feed Sitecore 10.4 - Remote Code Execution (RCE) Exploit #remote #web #rce	Exploit-DB RSS Feed	2025-06-26
Critical	–	Social Warfare WordPress Plugin 3.5.2 · Remote Code Execution (RCE) Critical2025-06-26Exploit-DB RSS Feed Social Warfare WordPress Plugin 3.5.2 - Remote Code Execution (RCE) Exploit #remote #web #rce	Exploit-DB RSS Feed	2025-06-26
Critical	–	Pterodactyl Panel 1.11.11 · Remote Code Execution (RCE) Critical2025-06-26Exploit-DB RSS Feed Pterodactyl Panel 1.11.11 - Remote Code Execution (RCE) Exploit #remote #web #rce	Exploit-DB RSS Feed	2025-06-26

Page 18 of 19