354 matches found
WordPress AA Cash Calculator plugin <= 1.0 - Reflected Cross-Site Scripting via invoice vulnerability
Reflected Cross-Site Scripting via invoice vulnerability discovered by Nathaniel Oh 0x4n3 in WordPress Plugin AA Cash Calculator versions = 1.0...
WordPress AA Cash Calculator Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
Software AA Cash Calculator Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0848 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 0f4d37bdc2c4 Credits Nathaniel Oh 0x4n3...
CVE-2024-33544
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team WZone allows SQL Injection.This issue affects WZone: from n/a through 14.0.10...
CVE-2024-33546
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team WZone allows SQL Injection.This issue affects WZone: from n/a through 14.0.10...
CVE-2024-33544
CVE-2024-33544 is an unauthenticated SQL injection in the WooCommerce Amazon Affiliates plugin (WooZone) for WordPress, affecting versions up to 14.0.10. The vulnerability stems from improper neutralization of input in SQL commands, enabling potential arbitrary database access. The provided conne...
CVE-2024-33546
CVE-2024-33546 is an unauthenticated SQL Injection in the WooCommerce Amazon Affiliates/WooZone plugin for WordPress, affecting WZone up to version 14.0.10. The CVSS v3.1 base vector indicates network access (AV:N) with low attack complexity (AC:L) and requires low privileges (PR:L) with no user ...
CVE-2024-33548 WordPress WZone plugin <= 14.0.10 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA-Team WZone allows Reflected XSS.This issue affects WZone: from n/a through 14.0.10...
CVE-2024-33548
A Reflected Cross-Site Scripting (XSS) vulnerability exists in the AA-Team WZone plugin (affecting versions up to 14.0.10 ) due to the Improper Neutralization of Input During Web Page Generation . This flaw allows an attacker to reflect malicious scripts in the web page generation process. The vu...
CVE-2024-33548: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA-Team WZone allows Reflected XSS.This issue affects WZone: from n/a through 14.0.10...
CVE-2024-33546: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team WZone allows SQL Injection.This issue affects WZone: from n/a through 14.0.10...
AA Cash Calculator <= 1.0 - Reflected Cross-Site Scripting via invoice
Description The AA Cash Calculator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘invoice’ parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2024-33544: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team WZone allows SQL Injection.This issue affects WZone: from n/a through 14.0.10...
PT-2024-25315
Name of the Vulnerable Software and Affected Versions AA-Team WZone versions through 14.0.10 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This can potentially affect a large numbe...
VulnCheck KEV: CVE-2024-33548
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA-Team WZone allows Reflected XSS.This issue affects WZone: from n/a through 14.0.10...
aa-law.com Cross Site Scripting vulnerability OBB-3854423
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2024-2006
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.7.0-rc2-dirty 16 Description The vulnerability is related to the apparmor module in the Linux kernel. When processing a packed profile in unpack profile, a string ":samba-dcerpcd" is unpacked as a fully-qualifi...
Use of tx.origin breaks interoperability with AA wallets.
Lines of code Vulnerability details In OptionPositionMananger, several functions like close and sellOptions, need to call PMWithdraw, which calls PMTransfer. Then it is checked that tx.origin != user. However, smart contract wallet cannot be tx.origin, which means AA wallets will not be able to...
aa-charlink (>=0.1.1, <=1.0.0), aa-drifters (0.1.0a0) +271 more potentially affected by CVE-2023-31047 via django (>=4.0.0, <=4.1.8)
django PYPI version =4.0.0, =0.1.1, =1.0.0b1, =0.1.0a0, =0.11.0a0, =0.1.1, =1.1.0, =0.1.0, =0.0.3, =4.0.9.0, =3.1.1, =3.6.4, =0.10.0, =1.1.2, =1.13.0 - annalist 0.5.18 and more Source cves: CVE-2023-31047 Source advisory: OSV:PYSEC-2023-61...
SUSE CVE-2011-1016
The Radeon GPU drivers in the Linux kernel before 2.6.38-rc5 do not properly validate data related to the AA resolve registers, which allows local users to write to arbitrary memory locations associated with 1 Video RAM aka VRAM or 2 the Graphics Translation Table GTT via crafted values...
