CVE-2025-23911

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in solidres Solidres – Hotel booking plugin solidres allows SQL Injection.This issue affects Solidres – Hotel booking plugin: from n/a through = 0.9.4...

CVE-2025-23911

CVE-2025-23911 refers to an SQL Injection vulnerability in Solidres – Hotel booking plugin for WordPress. The description (and the Red Hat entry) indicate the issue is caused by improper neutralization of input used in SQL commands, enabling injection. Affected versions are Solidres – Hotel booki...

WordPress Solidres – Hotel booking plugin for WordPress Plugin <= 0.9.4 - SQL Injection vulnerability

SQL Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Solidres – Hotel booking plugin versions = 0.9.4...

WordPress Site Launcher Plugin <= 0.9.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Site Launcher versions = 0.9.4...

WordPress plugin Solidres SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

Incorrect Authorization

Overview opencanary is an OpenCanary daemon Affected versions of this package are vulnerable to Incorrect Authorization through the configuration file. An attacker can escalate privileges by modifying the configuration file, which is executed by the daemon running as root. Remediation Upgrade...

CVE-2024-48911

OpenCanary, a multi-protocol network honeypot, directly executed commands taken from its config file. Prior to version 0.9.4, where the config file is stored in an unprivileged user directory but the daemon is executed by root, it’s possible for the unprivileged user to change the config file and...

CVE-2024-48911 OpenCanary Executes Commands From Potentially Writable Config File

OpenCanary, a multi-protocol network honeypot, directly executed commands taken from its config file. Prior to version 0.9.4, where the config file is stored in an unprivileged user directory but the daemon is executed by root, it’s possible for the unprivileged user to change the config file and...

OpenCanary 安全漏洞

OpenCanary is an open source multi-protocol network honeypot from Thinkst Applied Research. A security vulnerability exists in OpenCanary prior to version 0.9.4 that stems from a configuration file being stored in the unprivileged user directory, but the daemon is executed by root, thus allowing ...

jose4j Security Vulnerabilities

jose4j is a powerful and easy-to-use open source implementation of the JSON Web Token JWT and JOSE specification suite JWS, JWE, and JWK open sourced from Bitbucket . A security vulnerability exists in jose4j versions prior to 0.9.4, which stems from a vulnerability that allows an attacker to cau...

CVE-2023-32091

Cross-Site Request Forgery CSRF vulnerability in POEditor plugin = 0.9.4 versions...

CVE-2023-32091

Cross-Site Request Forgery CSRF vulnerability in POEditor plugin = 0.9.4 versions...

WordPress POEditor Plugin <= 0.9.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software POEditor Type Plugin Vulnerable versions = 0.9.4 Fixed in 0.9.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-32091 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 93cce2a104f7 Credits Elliot Required privilege...

WordPress plugin Solidres 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers. uninstall is a plugin used to completely uninstall WordPress. relevant is a plugin...

CVE-2023-1374

The Solidres plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'currencyname' parameter in versions up to, and including, 0.9.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administrator privileges to...

Solidres <= 0.9.4 - Multiple Reflected XSS

The plugin does not sanitise and escape numerous parameter before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin Make a logged in admin open...

SUSE CVE-2017-5853

Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

SUSE CVE-2017-5886

Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

SUSE CVE-2017-6843

Heap-based buffer overflow in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

SUSE CVE-2017-6846

The GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace function in graphicsstack.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...