Threats tagged 'web'

380 threats

Severity	CVSS	Threat	Source	Published
Medium	–	Anchor CMS 0.12.7 · Stored Cross Site Scripting (XSS) Medium2025-06-15Exploit-DB RSS Feed Anchor CMS 0.12.7 - Stored Cross Site Scripting (XSS) Exploit #web #xss #exploit	Exploit-DB RSS Feed	2025-06-15
High	–	Litespeed Cache WordPress Plugin 6.3.0.1 · Privilege Escalation High2025-06-15Exploit-DB RSS Feed Litespeed Cache WordPress Plugin 6.3.0.1 - Privilege Escalation Exploit #web #exploit #wordpress	Exploit-DB RSS Feed	2025-06-15
Critical	–	PHP CGI Module 8.3.4 · Remote Code Execution (RCE) Critical2025-06-15Exploit-DB RSS Feed PHP CGI Module 8.3.4 - Remote Code Execution (RCE) Exploit #remote #web #rce	Exploit-DB RSS Feed	2025-06-15
Critical	–	WebDAV Windows 10 · Remote Code Execution (RCE) Critical2025-06-15Exploit-DB RSS Feed WebDAV Windows 10 - Remote Code Execution (RCE) Exploit #windows #remote #web	Exploit-DB RSS Feed	2025-06-15
Critical	–	Skyvern 0.1.85 · Remote Code Execution (RCE) via SSTI Critical2025-06-15Exploit-DB RSS Feed Skyvern 0.1.85 - Remote Code Execution (RCE) via SSTI Exploit #remote #web #rce	Exploit-DB RSS Feed	2025-06-15
Critical	–	Roundcube 1.6.10 · Remote Code Execution (RCE) Critical2025-06-13Exploit-DB RSS Feed Roundcube 1.6.10 - Remote Code Execution (RCE) Exploit #remote #web #rce	Exploit-DB RSS Feed	2025-06-13
Medium	–	Laravel Pulse 1.3.1 · Arbitrary Code Injection Medium2025-06-09Exploit-DB RSS Feed Laravel Pulse 1.3.1 - Arbitrary Code Injection Exploit #web #exploit	Exploit-DB RSS Feed	2025-06-09
Medium	–	CloudClassroom PHP Project 1.0 · SQL Injection Medium2025-06-05Exploit-DB RSS Feed CloudClassroom PHP Project 1.0 - SQL Injection Exploit #web #php #exploit	Exploit-DB RSS Feed	2025-06-05
Medium	–	WordPress Digits Plugin 8.4.6.1 · Authentication Bypass via OTP Bruteforcing Medium2025-05-29Exploit-DB RSS Feed WordPress Digits Plugin 8.4.6.1 - Authentication Bypass via OTP Bruteforcing Exploit #web #exploit #wordpress	Exploit-DB RSS Feed	2025-05-29
Medium	–	Campcodes Online Hospital Management System 1.0 · SQL Injection Medium2025-05-29Exploit-DB RSS Feed Campcodes Online Hospital Management System 1.0 - SQL Injection Exploit #web #exploit	Exploit-DB RSS Feed	2025-05-29
Medium	–	WordPress User Registration & Membership Plugin 4.1.2 · Authentication Bypass Medium2025-05-25Exploit-DB RSS Feed WordPress User Registration & Membership Plugin 4.1.2 - Authentication Bypass Exploit #web #exploit #wordpress	Exploit-DB RSS Feed	2025-05-25
Medium	–	Java-springboot-codebase 1.1 - Arbitrary File Read Medium2025-05-25Exploit-DB RSS Feed Java-springboot-codebase 1.1 - Arbitrary File Read Exploit #web #java #exploit	Exploit-DB RSS Feed	2025-05-25
Medium	–	Kentico Xperience 13.0.178 · Cross Site Scripting (XSS) Medium2025-05-13Exploit-DB RSS Feed Kentico Xperience 13.0.178 - Cross Site Scripting (XSS) Exploit #web #xss #exploit	Exploit-DB RSS Feed	2025-05-13
High	–	WordPress Frontend Login and Registration Blocks Plugin 1.0.7 · Privilege Escalation High2025-05-13Exploit-DB RSS Feed WordPress Frontend Login and Registration Blocks Plugin 1.0.7 - Privilege Escalation Exploit #web #exploit #wordpress	Exploit-DB RSS Feed	2025-05-13
Medium	–	WordPress Depicter Plugin 3.6.1 · SQL Injection Medium2025-05-09Exploit-DB RSS Feed WordPress Depicter Plugin 3.6.1 - SQL Injection Exploit #web #exploit #wordpress	Exploit-DB RSS Feed	2025-05-09
High	–	SureTriggers OttoKit Plugin 1.0.82 · Privilege Escalation High2025-05-09Exploit-DB RSS Feed SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation Exploit #web #exploit	Exploit-DB RSS Feed	2025-05-09
Medium	–	Casdoor 1.901.0 - Cross-Site Request Forgery (CSRF) Medium2025-05-06Exploit-DB RSS Feed Casdoor 1.901.0 - Cross-Site Request Forgery (CSRF) Exploit #web #csrf #exploit	Exploit-DB RSS Feed	2025-05-06
Medium	–	Grokability Snipe-IT 8.0.4 - Insecure Direct Object Reference (IDOR) Medium2025-05-06Exploit-DB RSS Feed Grokability Snipe-IT 8.0.4 - Insecure Direct Object Reference (IDOR) Exploit #web #exploit	Exploit-DB RSS Feed	2025-05-06
Medium	–	ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF) Medium2025-05-06Exploit-DB RSS Feed ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF) Exploit #web #csrf #exploit	Exploit-DB RSS Feed	2025-05-06
Medium	–	WordPress Core 6.2 · Directory Traversal Medium2025-04-22Exploit-DB RSS Feed WordPress Core 6.2 - Directory Traversal Exploit #web #exploit #wordpress	Exploit-DB RSS Feed	2025-04-22

Page 19 of 19