5033 matches found
WordPress Conditional Fields for Contact Form 7 Plugin <= 2.4.13 is vulnerable to Cross Site Request Forgery (CSRF)
Software Conditional Fields for Contact Form 7 Type Plugin Vulnerable versions = 2.4.13 Fixed in 2.4.14 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-5804 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID e1825173a8a1...
WordPress ListingPro Plugin <= 2.9.4 is vulnerable to SQL Injection
Software ListingPro Type Plugin Vulnerable versions = 2.9.4 Fixed in 2.9.5 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-39620 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID b93d0cfbae0f Credits Rafie Muhammad Patchstack Required privilege...
WordPress MasterStudy LMS Plugin < 3.3.24 is vulnerable to Privilege Escalation
Software MasterStudy LMS Type Plugin Vulnerable versions 3.3.24 Fixed in 3.3.24 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-5973 Patch priority High CVSS severity High 7.6 Developer Claim ownership PSID 2f024467e854 Credits Jaime F...
CVE-2024-39090
creationtimestamp| type| source ---|---|--- 2024-07-18 22:38:53+00:00| seen| https://t.me/cvedetector/1177 2024-11-29 01:05:02+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9224 2024-11-29 17:35:07+00:00| published-proof-of-concept| https://t.me/xxexm/1674 2024-12-20 18:02:36+00:0...
CVE-2023-52291
creationtimestamp| type| source ---|---|--- 2024-07-17 12:22:00+00:00| seen| https://t.me/cvedetector/1071...
eLinkSmart Hidden Smart Cabinet Lock Security Vulnerability
eLinkSmart Hidden Smart Cabinet Lock is a hidden smart cabinet lock from China eLinkSmart. A security vulnerability exists in eLinkSmart Hidden Smart Cabinet Lock version 2024-05-22, which stems from the presence of an access control error and authorization check failure...
CVE-2024-36438
eLinkSmart Hidden Smart Cabinet Lock 2024-05-22 has Incorrect Access Control and fails to perform an authorization check which can lead to card duplication and other attacks...
CVE-2024-39250
creationtimestamp| type| source ---|---|--- 2024-07-13 20:31:48+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7974 2024-07-22 22:50:52+00:00| seen| https://t.me/cvedetector/1478...
AZL-71317 CVE-2024-6485 affecting package reaper for versions less than 3.1.1-22
A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...
CVE-2024-2602
CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could result in remote code execution when an authenticated user executes a saved project file that has been tampered by a malicious actor...
CVE-2024-2602
CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could result in remote code execution when an authenticated user executes a saved project file that has been tampered by a malicious actor...
CVE-2024-22280
creationtimestamp| type| source ---|---|--- 2024-07-11 05:53:00+00:00| seen| https://t.me/thehackernews/5237 2024-07-11 07:51:48+00:00| seen| https://t.me/cvedetector/632 2024-07-11 20:47:28+00:00| seen| https://t.me/truesecator/5961 2024-07-11 22:32:12+00:00| seen| https://t.me/cKure/13263...
CVE-2024-6421
creationtimestamp| type| source ---|---|--- 2024-07-10 10:54:42+00:00| seen| https://t.me/cvedetector/524...
CVE-2024-28751
creationtimestamp| type| source ---|---|--- 2024-07-09 09:44:02+00:00| seen| https://t.me/cvedetector/259...
GHSA-WM4W-7H2Q-3PF7
creationtimestamp| type| source ---|---|--- 2024-07-05 22:06:55+00:00| seen| https://t.me/cvedetector/128...
Fedoraproject Fedora SEoL (22.x)
According to its version, Fedoraproject Fedora is 22.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 ...
AZL-42942 CVE-2024-6104 affecting package keda for versions less than 2.4.0-22
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7...
CVE-2024-4619
creationtimestamp| type| source ---|---|--- 2024-06-22 22:28:25+00:00| seen| https://t.me/cultofwire/1294...
relaisjuliette.it Cross Site Scripting vulnerability OBB-3937670
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
