PT-2025-5981 · D Link · D-Link Dhp-W310Av

Name of the Vulnerable Software and Affected Versions: D-Link DHP-W310AV version 1.04 Description: A critical issue has been found, affecting unknown code and leading to authentication bypass by spoofing. The attack can be initiated remotely. Recommendations: For D-Link DHP-W310AV version 1.04, a...

CVE-2024-12451

The HTML5 chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'HTML5CHAT' shortcode in all versions up to, and including, 1.04 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

WordPress HTML5 chat plugin <= 1.07 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis in WordPress Plugin HTML5 chat versions = 1.07...

WordPress plugin HTML5 chat 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-1853 · WordPress · Html5 Chat Plugin

Name of the Vulnerable Software and Affected Versions: HTML5 Chat Plugin for WordPress versions 1.04 and earlier Description: The issue concerns a Stored Cross-Site Scripting vulnerability in the HTML5 chat plugin for WordPress. This vulnerability is due to insufficient input sanitization and...

CVE-2024-45372

MZK-DP300N firmware versions 1.04 and earlier contains a cross-site request forger vulnerability. Viewing a malicious page while logging in to the web management page of the affected product may lead the user to perform unintended operations such as changing the login password, etc...

PT-2024-31585 · Planex · Planex Mzk-Dp300N

Name of the Vulnerable Software and Affected Versions: PLANEX MZK-DP300N firmware versions 1.04 and earlier Description: The issue is related to a cross-site request forgery vulnerability. Viewing a malicious page while logging in to the web management page of the affected product may lead the us...

Planex MZK-MF300N 安全漏洞

The Planex MZK-MF300N is a world's smallest class wireless LAN multi-pocket router from Planex Japan. A security vulnerability exists in Planex MZK-MF300N version 1.04 and earlier. An attacker can exploit this vulnerability to perform a cross-site request forgery attack...

WordPress Simple Buttons Creator plugin <= 1.04 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Simple Buttons Creator versions = 1.04...

CVE-2024-2858

The Simple Buttons Creator WordPress plugin through 1.04 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

WordPress Plugin Simple Buttons Creator 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

WordPress Plugin Simple Buttons Creator 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

CVE-2024-22651

There is a command injection vulnerability in the ssdpcgimain function of cgibin binary in D-Link DIR-815 router firmware v1.04...

Acritum Femitter Server Path Traversal Vulnerability

Acritum Femitter Server is an easy-to-use HTTP and FTP server application for Windows from Acritum. A path traversal vulnerability exists in Acritum Femitter Server version 1.04, which stems from the presence of a path traversal vulnerability...

PT-2024-19522 · D Link · D-Link Dir-815

Name of the Vulnerable Software and Affected Versions: D-Link DIR-815 router firmware version 1.04 Description: There is a command injection issue in the ssdpcgi main function of the cgibin binary. This affects the D-Link DIR-815 router firmware. Recommendations: For D-Link DIR-815 router firmwar...

CVE-2023-37564

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary OS command with a root privilege by sending a specially crafted request. Affected products and versions are as follows: WRC-1167GHBK-S v1.03 and earlier,...

PT-2023-26021 · Elecom · Elecom Wrc-1167Febk-A +11

Name of the Vulnerable Software and Affected Versions: ELECOM wireless LAN routers versions v1.03 and earlier ELECOM WRC-1167GHBK-S versions v1.03 and earlier ELECOM WRC-1167GEBK-S versions v1.03 and earlier ELECOM WRC-1167FEBK-S versions v1.04 and earlier ELECOM WRC-1167GHBK3-A versions v1.24 an...

PT-2022-23492 · D Link · D-Link Dap-1650

Name of the Vulnerable Software and Affected Versions: D-Link DAP1655 is not mentioned, instead DAP1650 version 1.04 is listed, however the correct model is not clear from the description, assuming DAP1650 is correct: D-Link DAP1650 version 1.04 Description: The issue is caused by a buffer overfl...

PHP Timeclock 1.04 - (Multiple) Cross Site Scripting Vulnerability

Exploit Title: PHP Timeclock 1.04 - 'Multiple' Cross Site Scripting XSS Exploit Author: Tyler Butler Vendor Homepage: http://timeclock.sourceforge.net Software Link: https://sourceforge.net/projects/timeclock/files/PHP%20Timeclock/PHP%20Timeclock%201.04/ Version: 1.04 Tested on: PHP 4.4.9/5.3.3...

PHP Timeclock 1.04 Cross Site Scripting

Exploit Title: PHP Timeclock 1.04 - 'Multiple' Cross Site Scripting XSS Date: May 3rd 2021 Exploit Author: Tyler Butler Vendor Homepage: http://timeclock.sourceforge.net Software Link: https://sourceforge.net/projects/timeclock/files/PHP%20Timeclock/PHP%20Timeclock%201.04/ Version: 1.04 Tested on...