CVE-2025-2165 SH Email Alert <= 1.0 - Reflected Cross-Site Scripting

The SH Email Alert plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'mid' parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...

WordPress SH Email Alert plugin <= 1.0 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin SH Email Alert versions = 1.0...

DEBIAN-CVE-2022-49444

In the Linux kernel, the following vulnerability has been resolved: module: fix eshstrndx.shsize=0 OOB access It is trivial to craft a module to trigger OOB access in this line: if info-secstringsstrhdr-shsize - 1 != '\0' BUG: unable to handle page fault for address: ffffc90000aa0fff PGD 10000006...

CVE-2024-51632

Cross-Site Request Forgery CSRF vulnerability in Sam Hoe SH Slideshow sh-slideshow allows Stored XSS.This issue affects SH Slideshow: from n/a through = 4.3...

MAL-2025-835 Malicious code in hoppscotch-sh-admin (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in hoppscotch-sh-admin (npm)

--- -= Per source details. Do not edit below this line.=-...

PT-2025-3794 · Provision Isr · Provision-Isr Sh-16200A-2 +5

Name of the Vulnerable Software and Affected Versions: Provision-ISR SH-4050A-2 Provision-ISR SH-4100A-2LMM Provision-ISR SH-8100A-2LMM Provision-ISR SH-16200A-21U Provision-ISR SH-16200A-51U Provision-ISR NVR5-8200PX up to 20241220 Description: A vulnerability was found in Provision-ISR devices,...

Provision-ISR多款产品 访问控制错误漏洞

Provision-ISR SH-4050A-2 and others are a high quality dynamic hybrid digital video recorder from Provision-ISR. An access control error vulnerability exists in various Provision-ISR products. An attacker could exploit the vulnerability to disclose sensitive information. The following products ar...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from a post-release reuse issue with the intc controller in the sh architecture...

CVE-2024-54082

home 5G HR02 and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the configuration restore function. An arbitrary OS command may be executed with the root privilege by an administrative user...

CVE-2024-54082

The CVE-2024-54082 issue affects SHARP-driven home/router devices (home 5G HR02 and Wi‑Fi STATION SH-54C). It is an OS command injection in the configuration restore function that can allow an administrator to execute arbitrary commands with root privileges. Affected versions include home 5G HR02...

Sharp SH-05L、SH-52B、SH-54C和HR02 安全漏洞

The Sharp HR02 and others are products of Sharp Corporation of Japan.The Sharp HR02 is a home router.The Sharp SH-52B is a wireless LAN connectivity station.The Sharp SH-54C is a wireless LAN connectivity station. A security vulnerability exists in the Sharp SH-05L, SH-52B, SH-54C, and HR02 that...

PT-2024-36023 · Unknown · Home 5G Hr02 +1

Name of the Vulnerable Software and Affected Versions: home 5G HR02 and Wi-Fi STATION SH-54C affected versions not specified Description: The issue is an OS command injection vulnerability in the configuration restore function. This allows an arbitrary OS command to be executed with root privileg...

PT-2024-31740 · Unknown · Home 5G Hr02 +2

Name of the Vulnerable Software and Affected Versions: home 5G HR02 affected versions not specified Wi-Fi STATION SH-52B affected versions not specified Wi-Fi STATION SH-54C affected versions not specified Description: The issue is an OS command injection vulnerability found in the HOST name...

Sharp SH-54C 操作系统命令注入漏洞

The Sharp SH-54C is a wireless LAN connectivity station from Sharp Japan. Operating system command injection vulnerability exists in Sharp SH-54C S6.60.00 and earlier versions.The vulnerability stems from an operating system command injection vulnerability in the configuration recovery function,...

CVE-2024-51632

Cross-Site Request Forgery CSRF vulnerability in Sam Hoe SH Slideshow sh-slideshow allows Stored XSS.This issue affects SH Slideshow: from n/a through = 4.3...

CVE-2024-51632

CVE-2024-51632: SH Slideshow WordPress plugin

PT-2024-34776 · Unknown · Sh Slideshow

Name of the Vulnerable Software and Affected Versions: SH Slideshow versions prior to 4.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions prior to 4.3, update to a version that includes a fix for this issue. As a...

CVE-2024-51621

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in reza19 Download-Mirror-Counter wp-download-mirror-counter allows SQL Injection.This issue affects Download-Mirror-Counter: from n/a through = 1.1...

CVE-2024-51621 WordPress Download-Mirror-Counter plugin <= 1.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in reza19 Download-Mirror-Counter wp-download-mirror-counter allows SQL Injection.This issue affects Download-Mirror-Counter: from n/a through = 1.1...