11 matches found
CVE-2025-13811 jsnjfz WebStack-Guns PageFactory.java sql injection
A vulnerability was determined in jsnjfz WebStack-Guns 1.0. This vulnerability affects unknown code of the file src/main/java/com/jsnjfz/manage/core/common/constant/factory/PageFactory.java. Executing a manipulation of the argument sort can lead to sql injection. It is possible to launch the atta...
CVE-2020-13811
An issue was discovered in Foxit Studio Photo before 3.6.6.922. It has an out-of-bounds write via a crafted TIFF file...
CVE-2024-13811
The Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'lafkaimportlafka' AJAX actions in all versions up to, and including, 4.5.7. This makes it possible for authenticated attacker...
CVE-2024-13811
creationtimestamp| type| source ---|---|--- 2025-03-05 09:36:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6526 2025-03-05 12:45:55+00:00| seen| https://t.me/cvedetector/19615...
CVE-2024-13811 Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme <= 4.5.7 - Missing Authorization to Authenticated (Subscriber+) Demo Import
The Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'lafkaimportlafka' AJAX actions in all versions up to, and including, 4.5.7. This makes it possible for authenticated attacker...
CVE-2024-13811 Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme <= 4.5.7 - Missing Authorization to Authenticated (Subscriber+) Demo Import
The Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'lafkaimportlafka' AJAX actions in all versions up to, and including, 4.5.7. This makes it possible for authenticated attacker...
CVE-2020-13811
CVE-2020-13811 affects Foxit Studio Photo prior to version 3.6.6.922. The issue is an out-of-bounds write triggered by a crafted TIFF file, indicating a memory boundary validation problem in TIFF handling. Documented impact includes potential control of affected memory regions; no public exploit ...
CVE-2018-13811
A vulnerability has been identified in SIMATIC STEP 7 TIA Portal All Versions V15.1. Password hashes with insufficient computational effort could allow an attacker to access to a project file and reconstruct passwords. The vulnerability could be exploited by an attacker with local access to the...
CVE-2018-13811
CVE-2018-13811 affects Siemens SIMATIC STEP 7 (TIA Portal) before 15.1. The issue is unprotected storage of credentials: password hashes with insufficient computational effort can let an attacker with local access to a project file reconstruct passwords. Exploitation requires local access; no use...
CVE-2017-13811
creationtimestamp| type| source ---|---|--- 2017-11-23 16:14:06+00:00| published-proof-of-concept| https://t.me/dataleak/13...
CVE-2017-13811
CVE-2017-13811 affects macOS before 10.13.1, involving the fsck_msdos component. The issue is a memory corruption vulnerability that could allow an attacker to execute arbitrary code with system privileges or cause a denial of service via a crafted app. Apple addresses this by releasing macOS Hig...