267 matches found
CVE-2024-23334
CVE-2024-23334 :; 他人的漏洞利用分析 审查他人发布的漏洞利用 滥用时本人负责 滥用后果自负 https://nvd.nist.gov/vuln/detail/CVE-2024-23334 安装install python -m pip install --upgrade pip requirements.txt aiohttp==3.9.1 pip install -r requirements.txt pip show aiohttp test version Version 3.9.1 点击图片即可播放 YouTube 再现视频 Play...
MStore API <= 3.9.1 - Authentication Bypass
The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.9.1. This is due to insufficient verification on the user being supplied during the cart sync from mobile REST API request through the plugin. This makes it possible for unauthenticated...
CVE-2026-11977
The affected software is the WordPress plugin WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars . The vulnerability is a generic SQL Injection via the parameter wpma_metabox_authors_list in all versions up to and including 3.9.1, caused by insufficient escaping and lac...
WordPress WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars plugin <= 3.9.1 - Authenticated (Author+) SQL Injection vulnerability
Authenticated Author+ SQL Injection vulnerability discovered by Ryoma Nishioka in WordPress Plugin WP Post Author versions = 3.9.1...
CVE-2026-17580
The Advanced Views – Display Custom Fields ACF, Pods, MetaBox, Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.9.1 via the registerrestroutes. This makes it...
CLEANSTART-2026-WM49865 Security fixes in prometheus 3.9.1-r2
Package prometheus version 3.9.1-r2 fixes 3 vulnerabilities: CVE-2026-33186, CVE-2026-32285, ghsa-p77j-4mvh-x3m3...
CLEANSTART-2026-XP71510 Security fixes in prometheus 3.9.1-r1
Package prometheus version 3.9.1-r1 fixes 3 vulnerabilities: CVE-2026-33186, CVE-2026-32285, ghsa-p77j-4mvh-x3m3...
CLEANSTART-2026-ZL52487 Security fixes in prometheus 3.9.1-r8
Package prometheus version 3.9.1-r8 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...
CLEANSTART-2026-KL21881 Security fixes for CVE-2026-39822, CVE-2026-42505, CVE-2026-46600, CVE-2026-56852 applied in versions: 3.9.1-r7, 3.9.1-r8
Multiple security vulnerabilities affect the prometheus package. These issues are resolved in later releases. See references for individual vulnerability details...
PYSEC-2026-804 Django REST framework XSS Vulnerability
Django REST framework aka django-rest-framework before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoescaping...
CVE-2026-58519
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS. This issue affects Mediawiki - Cargo Extension: from before 3.9.1...
CVE-2026-58519 Stored XSS through Cargo's map format
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS. This issue affects Mediawiki - Cargo Extension: from before 3.9.1...
EUVD-2026-40901
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS. This issue affects Mediawiki - Cargo Extension: from before 3.9.1...
CVE-2026-58519 Stored XSS through Cargo's map format
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS. This issue affects Mediawiki - Cargo Extension: from before 3.9.1...
CVE-2026-58519
CVE-2026-58519 describes an Stored XSS in The Wikimedia Foundation MediaWiki Cargo Extension caused by improper neutralization of input during web page generation. Affected software is MediaWiki Cargo Extension prior to version 3.9.1. The connected sources confirm the vulnerability and its scope ...
PT-2026-54481
Name of the Vulnerable Software and Affected Versions Mediawiki - Cargo Extension versions prior to 3.9.1 Description Improper neutralization of input during web page generation leads to a Stored Cross-Site Scripting XSS issue. Stored XSS occurs when an application receives data from a user and...
CVE-2026-57643
Contributor SQL Injection in WP Post Author = 3.9.1 versions...
EUVD-2026-39758
Contributor SQL Injection in WP Post Author = 3.9.1 versions...