A flawed TLS handshake implementation affects Viber Proxy in multiple platforms

Overview The Rakuten Viber messaging app for Android V25.7.2.0g and Windows V25.6.0.0-V25.8.1.0, has a flaw in its TLS handshake implementation when using the Cloak proxy configuration. This flaw allows for easy identification of proxy usage, potentially compromising user anonymity. Description...

CVE-2024-13476

creationtimestamp| type| source ---|---|--- 2025-02-20 12:41:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3limctgpjo32c 2025-02-20 13:09:07+00:00| seen| https://t.me/cvedetector/18532...

CVE-2024-13476

The LTL Freight Quotes – GlobalTranz Edition plugin for WordPress is vulnerable to SQL Injection via the 'engtzwdsavedropship' AJAX endpoint in all versions up to, and including, 2.3.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing...

CVE-2024-13476 LTL Freight Quotes – GlobalTranz Edition <= 2.3.11 - Unauthenticated SQL Injection

The LTL Freight Quotes – GlobalTranz Edition plugin for WordPress is vulnerable to SQL Injection via the 'engtzwdsavedropship' AJAX endpoint in all versions up to, and including, 2.3.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing...

CVE-2020-13476

NCH Express Invoice 8.06 to 8.24 is vulnerable to Reflected XSS in the Quotes List module...

CVE-2020-13476

The CVE-2020-13476 entry describes a Reflected XSS in the Quotes List module of NCH Express Invoice versions 8.06–8.24. Affected software is the NCH Express Invoice product (Invoice software). According to the NVD entry, the vulnerability is network-accessible with MEDIUM overall risk (CVSS v3.1 ...

CentOS 7.6.1810 Control Web Panel 0.9.8.837 Cross Site Scripting Vulnerability

Exploit for linux platform in category web applications ==================================================================== Information ==================================================================== Product : CWP Control Web Panel version : 0.9.8.837 Fixed on : 0.9.8.851 Test on : CentOS...

CVE-2019-13476

CVE-2019-13476 affects CentOS Web Panel (CWP) 0.9.8.837. A stored cross-site scripting (XSS) vulnerability in the domain parameter on the email list page allows a low-privilege user to escalate to root access. The issue is documented across multiple sources, including Red Hat, CNVD, CVE records, ...