7475 matches found
CVE-2022-22289: Improper Authentication
Improper access control vulnerability in S Assistant prior to version 7.5 allows attacker to remotely get senstive information...
Online Veterinary Appointment System 1.0 - 'Multiple' SQL Injection
Exploit Title: Online Veterinary Appointment System 1.0 - 'Multiple' SQL Injection Date: 05/01/20222 Exploit Author: twseptian Vendor Homepage: https://www.sourcecodester.com/php/15119/online-veterinary-appointment-system-using-phpoop-free-source-code.html Software Link:...
CVE-2021-44584
Cross-site scripting XSS vulnerability in index.php in emlog version = pro-1.0.7 allows remote attackers to inject arbitrary web script or HTML via the s parameter...
CVE-2021-44584
Cross-site scripting XSS vulnerability in index.php in emlog version = pro-1.0.7 allows remote attackers to inject arbitrary web script or HTML via the s parameter...
PT-2022-12175
Name of the Vulnerable Software and Affected Versions emlog versions pro-1.0.7 and earlier Description The issue is a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the s parameter in the index.php file. This can be exploited by...
Vodafone H-500-s 3.5.10 - WiFi Password Disclosure Exploit
Exploit Title: Vodafone H-500-s 3.5.10 - WiFi Password Disclosure Exploit Author: Daniel Monzón stark0de Vendor Homepage: https://www.vodafone.es/ Software Link: N/A Version: Firmware version Vodafone-H-500-s-v3.5.10 Hardware model: Sercomm VFH500 The WiFi access point password gets disclosed jus...
WordPress 5.8 < 5.8.3 / 5.7 < 5.7.5 / 5.6 < 5.6.7 / 5.5 < 5.5.8 / 5.4 < 5.4.9 / 5.3 < 5.3.11 / 5.2 < 5.2.14 / 5.1 < 5.1.12 / 5.0 < 5.0.15 / 4.9 < 4.9.19 / 4.8 < 4.8.18 / 4.7 < 4.7.22 / 4.6 < 4.6.22 / 4.5 < 4.5.25 / 4.4 < 4.4.26 / 4.3 < 4.3.27 / 4.2 < 4.2.31 / 4.1 < 4.1.34 / 4.0 < 4.0.34 / 3.9 < 3.9.35 / 3.8 < 3.8.37 / 3.7 < 3.7.37
WordPress versions 5.8 5.8.3 / 5.7 5.7.5 / 5.6 5.6.7 / 5.5 5.5.8 / 5.4 5.4.9 / 5.3 5.3.11 / 5.2 5.2.14 / 5.1 5.1.12 / 5.0 5.0.15 / 4.9 4.9.19 / 4.8 4.8.18 / 4.7 4.7.22 / 4.6 4.6.22 / 4.5 4.5.25 / 4.4 4.4.26 / 4.3 4.3.27 / 4.2 4.2.31 / 4.1 4.1.34 / 4.0 4.0.34 / 3.9 3.9.35 / 3.8 3.8.37 / 3.7 3.7.37...
CVE-2021-44584: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in emlog version = pro-1.0.7 allows remote attackers to inject arbitrary web script or HTML via the s parameter...
lockWithPermit() function allows for replay attacks and signature malleability
Handle jayjonah8 Vulnerability details Impact In XDEFIDistribution.sol the lockWithPermit function calls permit on the XDEFI token. The problem with simply using permit alone for this is the message that is signed by the owner using the ECDSA algorithm. The message only contains the receiver...
Vodafone H-500-s 3.5.10 - WiFi Password Disclosure
Exploit Title: Vodafone H-500-s 3.5.10 - WiFi Password Disclosure Date: 01/01/2022 Exploit Author: Daniel Monzón stark0de Vendor Homepage: https://www.vodafone.es/ Software Link: N/A Version: Firmware version Vodafone-H-500-s-v3.5.10 Hardware model: Sercomm VFH500 The WiFi access point password...
Cross site scripting
The Paid Memberships Pro WordPress plugin before 2.6.6 does not escape the s parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting...
CVE-2021-24979: Improper Neutralization of Input During Web Page Generation
The Paid Memberships Pro WordPress plugin before 2.6.6 does not escape the s parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting...
PT-2021-16390
Name of the Vulnerable Software and Affected Versions: Paid Memberships Pro WordPress plugin versions prior to 2.6.6 Description: The issue concerns a Reflected Cross-Site Scripting problem. It occurs because the s parameter is not properly escaped before being outputted in an attribute on an adm...
PT-2021-27980
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the s hex process, s exD process, and sreadbuf functions. Recommendations At the...
S-CMS cross-site scripting vulnerability in Zibo Shining Network Technology Co.
S-CMS is a PHP and MySQL-based content management system CMS from S-CMS China. A security vulnerability exists in S-CMS Government Station Building System v5.0, which can be exploited by attackers to execute cross-site scripting attack XSS via /function/booksave.php...
S-CMS Cross-Site Scripting Vulnerability in Zibo Shining Network Technology Co.
S-CMS is a PHP and MySQL based content management system CMS from Zibo Shining Network Technology Co., Ltd. in China. A security vulnerability exists in S-CMS Government Station Building System v5.0, which can be exploited by attackers to perform cross-site scripting attacks XSS...
CVE-2020-20426
S-CMS Government Station Building System v5.0 contains a cross-site scripting XSS vulnerability in /function/booksave.php...
CVE-2020-20425
S-CMS Government Station Building System v5.0 contains a cross-site scripting XSS vulnerability in the search function...
