90 matches found
CVE-2026-0579
creationtimestamp| type| source ---|---|--- 2026-01-04 14:00:17+00:00| published-proof-of-concept| Telegram/X53ZZHRctCgwH5oYBXkboOV2leZaKRm0jOpUQjmSVINJ2s4 2026-01-04 16:28:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbmdrsovy62u...
CVE-2026-0579 code-projects Online Product Reservation System POST Parameter edit.php sql injection
A vulnerability was found in code-projects Online Product Reservation System 1.0. This affects an unknown part of the file /handgunner-administrator/edit.php of the component POST Parameter Handler. The manipulation of the argument prodid/name/price/model/serial results in sql injection. The atta...
EUVD-2026-0579
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
CVE-2022-0579
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9...
CVE-2025-0579
A vulnerability was found in Shiprocket Module 3/4 on OpenCart. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php?route=extension/shiprocket/module/restapi of the component REST API Module. The manipulation of the argument x-userna...
CVE-2025-0579
creationtimestamp| type| source ---|---|--- 2025-01-20 03:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg5eq7y7ib2b 2025-01-20 03:54:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lg5gwbnees2w 2025-01-20 04:01:35+00:00| seen|...
CVE-2025-0579
A vulnerability was found in Shiprocket Module 3/4 on OpenCart. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php?route=extension/shiprocket/module/restapi of the component REST API Module. The manipulation of the argument x-userna...
CVE-2025-0579 Shiprocket Module REST API Module restapi sql injection
A vulnerability was found in Shiprocket Module 3/4 on OpenCart. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php?route=extension/shiprocket/module/restapi of the component REST API Module. The manipulation of the argument x-userna...
Photon OS 4.0: Vim PHSA-2023-4.0-0467
An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0467. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20457...
RHSA-2024:0579
creationtimestamp| type| source ---|---|--- 2024-01-30 14:21:41+00:00| seen| https://t.me/ctinow/175919...
CVE-2024-0579
CVE-2024-0579 targets Totolink X2000R 1.0.0-B20221212.1452. The vulnerability resides in the function formMapDelDevice of the file /boafrm/formMapDelDevice , where improper handling of the macstr argument enables remote command injection . Exploitation can be performed remotely, and public disclo...
CVE-2024-0579 Totolink X2000R formMapDelDevice command injection
A vulnerability classified as critical was found in Totolink X2000R 1.0.0-B20221212.1452. Affected by this vulnerability is the function formMapDelDevice of the file /boafrm/formMapDelDevice. The manipulation of the argument macstr leads to command injection. The attack can be launched remotely...
CVE-2023-0579
The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscribers to perform SQL Injection attacks...
CVE-2023-0579
The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscribers to perform SQL Injection attacks...
CVE-2023-0579 YARPP - Yet Another Related Posts Plugin < 5.30.3 - Subscriber+ SQLi
The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscribers to perform SQL Injection attacks...
CVE-2023-0579 YARPP - Yet Another Related Posts Plugin < 5.30.3 - Subscriber+ SQLi
The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscribers to perform SQL Injection attacks...
CVE-2023-0579
CVE-2023-0579 affects the YARPP (Yet Another Related Posts Plugin) for WordPress, with versions prior to 5.30.3 vulnerable. The issue is that the plugin does not validate and escape certain shortcode attributes before interpolating them into SQL statements, enabling SQL injection by any authentic...
Critical Photon OS Security Update - PHSA-2023-3.0-0579
Updates of 'nss' packages of Photon OS have been released...
SUSE CVE-2006-0579
Multiple integer overflows in 1 the newdemuxpacket function in demuxer.h and 2 the demuxasfreadpacket function in demuxasf.c in MPlayer 1.0pre7try2 and earlier allow remote attackers to execute arbitrary code via an ASF file with a large packet length value. NOTE: the provenance of this informati...
CVE-2022-0579
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9...