19 matches found
CVE-2025-13404
The atec Duplicate Page & Post plugin for WordPress is vulnerable to unauthorized post duplication due to missing authorization validation on the duplicatepost function in all versions up to, and including, 1.2.20. This makes it possible for authenticated attackers, with Contributor-level access...
CVE-2025-13404
creationtimestamp| type| source ---|---|--- 2025-11-25 09:13:06+00:00| seen| https://gist.github.com/Darkcrai86/c5f531480f38ded5dcab4d547fa56ca5...
CVE-2025-13404
The atec Duplicate Page & Post plugin for WordPress is vulnerable to unauthorized post duplication due to missing authorization validation on the duplicatepost function in all versions up to, and including, 1.2.20. This makes it possible for authenticated attackers, with Contributor-level access...
CVE-2019-13404
The MSI installer for Python through 2.7.16 on Windows defaults to the C:\Python27 directory, which makes it easier for local users to deploy Trojan horse code. This also affects old 3.x releases before 3.5. NOTE: the vendor's position is that it is the user's responsibility to ensure C:\Python27...
CVE-2024-13404
creationtimestamp| type| source ---|---|--- 2025-01-21 09:27:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113865629841252103 2025-01-21 10:01:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2381 2025-01-21 10:15:33+00:00| seen|...
CVE-2024-13404 Link Library <= 7.7.2 - Reflected Cross-Site Scripting
The Link Library plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'searchll' parameter in all versions up to, and including, 7.7.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2024-13404 Link Library <= 7.7.2 - Reflected Cross-Site Scripting
The Link Library plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'searchll' parameter in all versions up to, and including, 7.7.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2024-13404
CVE-2024-13404 concerns the WordPress Link Library plugin. Affected: Link Library (WordPress) up to version 7.7.2. Issue: Reflected Cross-Site Scripting via the searchll parameter caused by insufficient input sanitization and output escaping. Impact: unauthenticated attackers could inject web scr...
CVE-2021-34319
A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The BMPloader.dll library in affected applications lacks proper validation of user-supplied data when parsing SGI files. This could result in an out of bounds write past the end of an...
Atos Magento Command Injection (CVE-2020-13404)
A command injection vulnerability exists in Atos Magento. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
CVE-2020-13404
creationtimestamp| type| source ---|---|--- 2020-08-06 00:55:12+00:00| seen| https://t.me/cibsecurity/13917 2024-10-28 16:00:05+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1262...
CVE-2020-13404
The ATOS/Sips aka Atos-Magento community module 3.0.0 to 3.0.5 for Magento allows command injection...
CVE-2020-13404
The CVE-2020-13404 vulnerability affects the ATOS/Sips (Atos-Magento) community module for Magento, version 3.0.0 through 3.0.5. The issue is a command injection vulnerability in the module that could enable remote code execution on the affected Magento site. The reported CVSS metrics indicate a ...
CVE-2019-13404
creationtimestamp| type| source ---|---|--- 2019-07-08 03:59:52+00:00| seen| https://t.me/cveNotify/298...
CVE-2019-13404
The MSI installer for Python through 2.7.16 on Windows defaults to the C:\Python27 directory, which makes it easier for local users to deploy Trojan horse code. This also affects old 3.x releases before 3.5. NOTE: the vendor's position is that it is the user's responsibility to ensure C:\Python27...
CVE-2019-13404
The CVE-2019-13404 entry concerns the MSI installer for Python <2.7.17 (and 3.x
CVE-2018-13404
CVE-2018-13404 affects Atlassian Jira Server/Data Center: VerifyPopServerConnection SSRF allows remote administrators to determine internal hosts/ports and, in some cases, obtain service information from internal network resources. Impact occurs on Jira versions: 7.6.x prior to 7.6.10, 7.7.x prio...
The VerifyPopServerConnection resource was vulnerable to SSRF - CVE-2018-13404
The VerifyPopServerConnection resource in Atlassian Jira before version 7.6.10, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3, from version 7.11.0 before version 7.11.3, from...
The VerifyPopServerConnection resource was vulnerable to SSRF - CVE-2018-13404
The VerifyPopServerConnection resource in Atlassian Jira before version 7.6.10, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3, from version 7.11.0 before version 7.11.3, from...