66 matches found
CVE-2025-61603 WeGIA: SQL Injection (Blind Time-Based) Vulnerability in API `descricao` Parameter
WeGIA is a Web manager for charitable institutions. Versions 3.4.12 and below include an SQL Injection vulnerability which was identified in the /controle/control.php endpoint, specifically in the descricao parameter. This vulnerability allows attackers to execute arbitrary SQL commands,...
CVE-2025-61603
WeGIA (web manager for charitable institutions) versions 3.4.12 and earlier contain an SQL Injection in /controle/control.php via the descricao parameter, enabling attackers to execute arbitrary SQL commands and compromise database confidentiality, integrity, and availability. The issue is fixed ...
WeGIA 安全漏洞
WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA 3.4.12 and earlier versions, which stems from incorrect manipulation of the parameter idpet in the file /pet/profilepet.php, which could lead to a SQL injection...
PT-2025-40427
Name of the Vulnerable Software and Affected Versions WeGIA versions 3.4.12 and below Description WeGIA is a web manager designed for charitable institutions. An Open Redirect issue exists in the control.php endpoint, specifically through the nextPage parameter...
WeGIA 安全漏洞
WeGIA is a web manager for welfare organizations by Nilson Lazarin Individual Developer. A security vulnerability exists in WeGIA 3.4.12 and prior versions that stems from improper access control and could allow an unauthenticated attacker to gain direct access to sensitive information...
CVE-2025-24733 WordPress Post Grid Master plugin <= 3.4.12 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AddonMaster Post Grid Master allows PHP Local File Inclusion. This issue affects Post Grid Master: from n/a through 3.4.12...
WordPress Post Grid Master plugin <= 3.4.12 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Post Grid Master versions = 3.4.12...
PT-2025-5547 · Unknown · Addonmaster Post Grid Master
Name of the Vulnerable Software and Affected Versions: AddonMaster Post Grid Master versions 3.4.12 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows P...
PT-2025-4786 · Github · Github Desktop
Name of the Vulnerable Software and Affected Versions: GitHub Desktop versions prior to 3.4.12 Description: An attacker can access a user's credentials by convincing them to clone a repository directly or through a submodule using a maliciously crafted remote URL. GitHub Desktop relies on Git for...
GitHub Desktop 安全漏洞
GitHub Desktop is a GitHub desktop version of GitHub Desktop open source. A security vulnerability exists in GitHub Desktop versions prior to 3.4.12, which stems from an attacker inducing a user to clone a repository, either directly or through a submodule, which could allow an attacker to access...
CVE-2024-11642
The Post Grid Master – Custom Post Types, Taxonomies & Ajax Filter Everything with Infinite Scroll, Load More, Pagination & Shortcode Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.4.12 via the 'locatetemplate' function. This makes it...
WordPress Post Grid Master plugin <= 3.4.12 - Missing Authorization to Unauthenticated Local PHP File Inclusion vulnerability
Missing Authorization to Unauthenticated Local PHP File Inclusion vulnerability discovered by 1337Wannabe in WordPress Plugin Post Grid Master versions = 3.4.12...
WordPress Post Grid Master Plugin <= 3.4.12 is vulnerable to Cross Site Scripting (XSS)
Software Post Grid Master Type Plugin Vulnerable versions = 3.4.12 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34390 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6ac8a85df075 Credits Yudistira Arya Required privilege...
Path traversal
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when building a GitHub Pages site. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the instance. This vulnerability was fixed in...
GHSA-M3XV-X3PH-MQ22 Server-side Template Injection in nystudio107/craft-seomatic
A Server-side Template Injection SSTI vulnerability exists in Nystudio107 Seomatic prior to 3.4.12 in src/helpers/UrlHelper.php via the host header...
Server-side Template Injection in nystudio107/craft-seomatic
A Server-side Template Injection SSTI vulnerability exists in Nystudio107 Seomatic prior to 3.4.12 in src/helpers/UrlHelper.php via the host header...
CVE-2021-44618
A Server-side Template Injection SSTI vulnerability exists in Nystudio107 Seomatic 3.4.12 in src/helpers/UrlHelper.php via the host header...
CVE-2021-44618
A Server-side Template Injection SSTI vulnerability exists in Nystudio107 Seomatic 3.4.12 in src/helpers/UrlHelper.php via the host header...
