1715 matches found
PT-2023-30063 · Unknown · Pwncyn Yxbookcms
Name of the Vulnerable Software and Affected Versions: PwnCYN YXBOOKCMS version 1.0.2 Description: A Cross Site Scripting XSS issue allows an attacker to execute arbitrary code via the library name function in the general settings component. This can be exploited by a physically proximate attacke...
CVE-2023-45641 WordPress Caret Country Access Limit Plugin <= 1.0.2 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Caret Inc. Caret Country Access Limit plugin = 1.0.2 versions...
CVE-2023-5375
Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2...
CVE-2023-5375 Open Redirect in mosparo/mosparo
Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2...
CVE-2023-5375 Open Redirect in mosparo/mosparo
Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2...
CVE-2023-5375 Open Redirect in mosparo/mosparo
Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2...
mosparo Input Validation Error Vulnerability
mosparo is modern spam protection. An input validation error vulnerability exists in mosparo versions prior to 1.0.2, which stems from an open redirection issue...
WordPress plugin FileOrganizer Access Control Error Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An Access Control Error vulnerability exist...
CVE-2023-41031
Command injection in homemng.htm in Juplink RX4-1500 versions V1.0.2, V1.0.3, V1.0.4, and V1.0.5 allows remote authenticated attackers to execute commands via specially crafted requests to the vulnerable endpoint...
CVE-2023-41029
Command injection vulnerability in the homemng.htm endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.2, V1.0.3, V1.0.4, and V1.0.5 allows authenticated remote attackers to execute commands as root via specially crafted HTTP requests to the vulnerable endpoint...
Malicious code in @csmsce/msx-types (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0fc7c362db232e6c3dff94d78d7360704684a2c76d019283f6f1d3e86b3e6e8 The OpenSSF Package Analysis project identified '@csmsce/msx-types' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...
Malicious code in @cosell/accountplan (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2a11852a87ae441dfe39ecf58cf593108ae7c4caba3814a4b3ab352b91e350c0 The OpenSSF Package Analysis project identified '@cosell/accountplan' @ 1.0.2 npm as malicious. It is considered malicious because: - The packag...
Malicious code in callhtmcall (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 03a873d8d4db0e3281e619370cee727f1dd276f0d0bb095bf180589e02d15a78 The OpenSSF Package Analysis project identified 'callhtmcall' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...
PT-2023-27751 · Unknown · Juplink Rx4-1500
Name of the Vulnerable Software and Affected Versions: Juplink RX4-1500 versions V1.0.2 through V1.0.5 Description: The issue allows remote authenticated attackers to execute commands via specially crafted requests to the vulnerable endpoint "homemng.htm". This enables attackers to inject command...
Juplink RX4-1500 Command Injection Vulnerability
Juplink RX4-1500 is a wireless router from Juplink. A security vulnerability exists in the Juplink RX4-1500 Wifi router that originates from a command injection vulnerability in the homemng.htm endpoint. An attacker can exploit the vulnerability by sending a specially crafted request to execute...
Juplink RX4-1500 Command Injection Vulnerability
Juplink RX4-1500 is a wireless router from Juplink. A security vulnerability exists in the Juplink RX4-1500 Wifi router that stems from a command injection vulnerability in the homemng.htm endpoint. An attacker can exploit the vulnerability by sending a specially crafted HTTP request to execute...
CVE-2023-41030
Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or telnet service as the 'user' user...
Juplink RX4-1500 Trust Management Issue Vulnerability
The Juplink RX4-1500 is a wireless router from Juplink. A security vulnerability exists in the Juplink RX4-1500 versions V1.0.2 through V1.0.5, which stems from the use of hard-coded credentials, which allows an attacker to log in to the web interface or Telnet service as the user user...
PT-2023-25647 · WordPress · Fileorganizer
Name of the Vulnerable Software and Affected Versions: FileOrganizer WordPress plugin versions 1.0.2 and earlier Description: The issue allows site admins to gain full control over the server in multisite instances due to a lack of functionality restriction. This can potentially lead to attackers...