PT-2024-22501 · Unknown · Youzify - Buddypress Moderation

Name of the Vulnerable Software and Affected Versions: Youzify - Buddypress Moderation versions 1.2.5 and earlier Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting'. This allows for a remote attack...

WordPress Youzify Buddypress Moderation Plugin <= 1.2.5 is vulnerable to Cross Site Scripting (XSS)

Software Youzify Buddypress Moderation Type Plugin Vulnerable versions = 1.2.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-2864 Patch priority High CVSS severity High 7.3 Developer Claim ownership PSID 8372e235157d Credits Esteban Segura Ripoll...

Apache Answer Unrestricted Upload of File with Dangerous Type vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer through 1.2.1. Pixel Flood Attack by uploading large pixel files will cause server out of memory. A logged-in user can cause such an attack by uploading an image when posting content...

Apache Answer Cross-site Scripting vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache Answer. This issue affects Apache Answer through 1.2.1. XSS attack when user enters summary. A logged-in user, when modifying their own submitted question, can input malicious code in the...

Apache Answer Race Condition vulnerability

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Answer. This issue affects Apache Answer through 1.2.1. Repeated submission during registration resulted in the registration of the same user. When users register, if they rapidly...

CVE-2024-23349

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache Answer.This issue affects Apache Answer: through 1.2.1. XSS attack when user enters summary. A logged-in user, when modifying their own submitted question, can input malicious code in the...

WordPress Backuply – Backup, Restore, Migrate and Clone Plugin <= 1.2.5 is vulnerable to Denial of Service Attack

Software Backuply – Backup, Restore, Migrate and Clone Type Plugin Vulnerable versions = 1.2.5 Fixed in 1.2.6 OWASP Top 10 A4: Insecure Design Classification Denial of Service Attack CVE CVE-2024-0842 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 4e1e9a9b266e Credits...

WordPress Plugin Backuply Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

PT-2024-15860 · WordPress · Backuply

Name of the Vulnerable Software and Affected Versions: The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress versions 1.2.5 and earlier Description: The issue is related to a Denial of Service vulnerability. This vulnerability is due to direct access of the backuply/restore ins.p...

WordPress Plugin WP Custom Widget area security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

CVE-2023-49002

An issue in Xenom Technologies sinous Phone Dialer-voice Call Dialer v.1.2.5 allows an attacker to bypass intended access restrictions via interaction with com.funprime.calldialer.ui.activities.OutgoingActivity...

CVE-2023-49002

An issue in Xenom Technologies sinous Phone Dialer-voice Call Dialer v.1.2.5 allows an attacker to bypass intended access restrictions via interaction with com.funprime.calldialer.ui.activities.OutgoingActivity...

PT-2023-31027 · Xenom Technologies · Xenom Technologies Phone Dialer-Voice Call Dialer

Name of the Vulnerable Software and Affected Versions: Xenom Technologies Phone Dialer-voice Call Dialer version 1.2.5 Description: An issue in Xenom Technologies Phone Dialer-voice Call Dialer allows an attacker to bypass intended access restrictions via interaction with...

Phone Dialer-voice Call Dialer Security Vulnerability

Phone Dialer-voice Call Dialer is a voice call dialer that allows you to dial by voice when it is not convenient to dial by hand. A security vulnerability exists in Phone Dialer-voice Call Dialer version v.1.2.5 that originates from a vulnerability that allows an attacker to bypass expected acces...

TinyDir 1.2.5 Buffer Overflow Exploit

Title: Buffer overflow vulnerabilities with long path names in TinyDir Product: TinyDir Date: 2023-12-04 CVE ID: CVE-2023-49287 Severity: High - 7.7 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H Vendor URL: https://github.com/cxong/tinydir Advisory URL:...

WordPress Parallax Slider Block Plugin <= 1.2.5 is vulnerable to Cross Site Scripting (XSS)

Software Parallax Slider Block Type Plugin Vulnerable versions = 1.2.5 Fixed in 1.2.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-49184 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 42f6243bda32 Credits emad Required privilege Author...

CVE-2023-27438

Cross-Site Request Forgery CSRF vulnerability in Evgen Yurchenko WP Translitera plugin = p1.2.5 versions...

WordPress WP Popup Banners Plugin <= 1.2.5 Multiple SQLi Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:accesspressthemes:wppopupbanners"; if description...

SUSE CVE-2023-36811

borgbackup is an opensource, deduplicating archiver with compression and authenticated encryption. A flaw in the cryptographic authentication scheme in borgbackup allowed an attacker to fake archives and potentially indirectly cause backup data loss in the repository. The attack requires an...

GHSA-8FJR-HGHR-4M99 Archive spoofing vulnerability in borgbackup

Impact A flaw in the cryptographic authentication scheme in borgbackup allowed an attacker to fake archives and potentially indirectly cause backup data loss in the repository. The attack requires an attacker to be able to 1. insert files with no additional headers into backups 2. gain write acce...