WordPress plugin Exclusive Addons for Elementor 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

CVE-2024-50577

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via Angular template injection in Hub settings...

CVE-2024-50577

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via Angular template injection in Hub settings...

EUVD-2024-44958

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via Angular template injection in Hub settings...

CVE-2024-50577

JetBrains YouTrack is affected prior to version 2024.3.47707. The CVE-2024-50577 issue is described as a stored XSS vulnerability caused by Angular template injection in Hub settings. Impact is cross-site scripting via Hub settings, with overall security values indicating confidentiality/integrit...

CVE-2024-50577

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via Angular template injection in Hub settings...

CVE-2024-50577

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via Angular template injection in Hub settings...

PT-2024-7634 · Jetbrains · Youtrack

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.3.47707 Description: The issue is related to a stored XSS vulnerability via Angular template injection in Hub settings. This could allow an attacker to perform cross-site scripting attacks. The...

Exploit for Code Injection in Sqlpad

SQLPad 6.10.0 Exploit CVE-2022-0944 This Bash script exploi...

Exploit for Code Injection in Sqlpad

SQLPad 6.10.0 Exploit CVE-2022-0944 This Bash script exploi...

CVE-2024-9772

creationtimestamp| type| source ---|---|--- 2024-10-26 13:08:52+00:00| seen| https://t.me/cvedetector/9029 2025-09-17 10:20:57+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-9772.yaml 2025-09-19 21:02:37+00:00| seen|...

CVE-2024-37846

MangoOS before 5.2.0 was discovered to contain a Client-Side Template Injection CSTI vulnerability via the Platform Management Edit page...

CVE-2024-37846

MangoOS before 5.2.0 was discovered to contain a Client-Side Template Injection CSTI vulnerability via the Platform Management Edit page...

CVE-2024-49357

creationtimestamp| type| source ---|---|--- 2024-10-25 01:12:02+00:00| seen| https://t.me/cvedetector/8874 2026-04-06 02:39:24+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-49357.yaml 2026-04-06 21:03:14+00:00| seen|...

PT-2024-27780 · Mangoos · Mangoos

Name of the Vulnerable Software and Affected Versions: MangoOS versions prior to 5.2.0 Description: The issue is related to a Client-Side Template Injection CSTI vulnerability. This vulnerability can be exploited via the Platform Management Edit page. Recommendations: For versions prior to 5.2.0,...

MangoOS 安全漏洞

MangoOS is an open source JavaScript object-oriented programming library from Automattic. A security vulnerability exists in MangoOS versions prior to 5.2.0, which stems from a client-side template injection that can be achieved through the platform's administrative edit page...

CVE-2024-37846

MangoOS before 5.2.0 was discovered to contain a Client-Side Template Injection CSTI vulnerability via the Platform Management Edit page...

OpenRefine's error page lacks escaping, leading to potential Cross-site Scripting on import of malicious project

Summary The built-in "Something went wrong!" error page includes the exception message and exception traceback without escaping HTML tags, enabling injection into the page if an attacker can reliably produce an error with an attacker-influenced message. It appears that the only way to reach this...

CVE-2024-10313

CVE-2024-10313 affects iniNet Solutions SpiderControl SCADA PC HMI Editor. The vulnerability is an improper restriction of a pathname to a restricted directory (path traversal) that is triggered when loading a malicious ‘ems’ project template, allowing writing files to arbitrary directories. Repo...

Security update for go1.21-openssl

This update for go1.21-openssl fixes the following issues: CVE-2024-24791: Fixed denial of service due to improper 100-continue handling bsc1227314 CVE-2024-24789: Fixed mishandling of corrupt central directory record in archive/zip bsc1225973 CVE-2024-24790: Fixed unexpected behavior from Is...