374 matches found
VulnCheck KEV: CVE-2013-0213
The Samba Web Administration Tool SWAT in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to conduct clickjacking attacks via a 1 FRAME or 2 IFRAME element...
Grocy <=4.0.2 - CSRF
Exploit Title: Grocy history.pushState'','', '/'; document.forms0.submit; If a user is logged into the Grocy Webapp at time of execution, a new user will be created in the app with the following credentials Username: hacker Password: test Note: In order for this to work, the target must have Crea...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Eyal Fitoussi GEO my WordPress.This issue affects GEO my WordPress: from n/a through 4.0.2...
WordPress GEO my WordPress Plugin <= 4.0.2 is vulnerable to SQL Injection
Software GEO my WordPress Type Plugin Vulnerable versions = 4.0.2 Fixed in 4.0.3 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-52134 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID fc0434c42d54 Credits Muhammad Daffa Required privilege Administrator...
UBUNTU-CVE-2022-48614
Special:Ask in Semantic MediaWiki before 4.0.2 allows Reflected XSS...
PT-2023-15881 · Unknown · Semantic Mediawiki
Name of the Vulnerable Software and Affected Versions: Semantic MediaWiki versions prior to 4.0.2 Description: The issue allows for Reflected XSS in Special:Ask. Recommendations: For versions prior to 4.0.2, update to version 4.0.2 or later to resolve the issue...
AZL-43840 CVE-2023-48106 affecting package minizip 2.10.1-2
Buffer Overflow vulnerability in zlib-ng minizip-ng v.4.0.2 allows an attacker to execute arbitrary code via a crafted file to the mzpathresolve function in the mzos.c file...
CVE-2023-48107
CVE-2023-48107 is a Buffer Overflow in zlib-ng minizip-ng v4.0.2 that allows arbitrary code execution via a crafted file targeting mz_path_has_slash() in mz_os.c. The NVD entry documents a high-severity, network-exploitable issue with a CVSS v3.1 base score of 8.8 (C:H, I:H, A:H; AV:N/AC:L/PR:N/U...
PT-2023-8865 · Unknown +1 · Minizip-Ng +1
Name of the Vulnerable Software and Affected Versions: minizip-ng version 4.0.2 Description: The issue is related to a Buffer Overflow in the mz path resolve function, located in the mz os.c file, which can be exploited by an attacker using a crafted file. This could allow a remote attacker to...
Cross site request forgery (csrf)
Grocy = 4.0.2 is vulnerable to Cross Site Request Forgery CSRF...
PT-2023-28304 · Grocy · Grocy
Name of the Vulnerable Software and Affected Versions: Grocy versions 4.0.2 and earlier Description: The issue is related to Cross Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. Recommendations: For Grocy versions...
org.craftercms:crafter-studio (>=4.0.1 <=4.0.2) potentially affected by CVE-2023-4136 via org.craftercms:crafter-engine (>=4.0.1 <=4.0.2)
org.craftercms:crafter-engine MAVEN version =4.0.1, =4.0.1, =4.0.2 Source cves: CVE-2023-4136 Source advisory: SNYK:JAVA-ORGCRAFTERCMS-8722255...
GHSA-JFM4-3VV3-FM4V Cross-site Scripting (XSS) in CrafterCMS
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CrafterCMS Engine on Windows, MacOS, Linux, x86, ARM, 64 bit allows Reflected XSS.This issue affects CrafterCMS: from 4.0.0 through 4.0.2, from 3.1.0 through 3.1.27...
CVE-2023-4136
CrafterCMS Engine is vulnerable to reflected XSS (CVE-2023-4136). The nuclei template shows exploitation via the transformerName parameter in the /api/1/site/url/transform endpoint, enabling an unauthenticated attacker to inject arbitrary JavaScript in the user context and potentially steal crede...
WordPress Enable Media Replace Plugin < 4.0.2 Arbitrary File Upload Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:shortpixel:enablemediareplace"; if description...
Security Bulletin: IBM TRIRIGA Application Platform is vulneraible to multiple vunerabilities [CVE-2016-0003], [CVE-2016-1000031] and [CVE-2016-0248]
Summary IBM TRIRIGA Application Platform updated the apache commons open source to latest version to fix the fulnerabilities in CVE-2016-0003, CVE-2016-1000031 and CVE-2016-0248. Vulnerability Details CVEID:CVE-2016-0003 DESCRIPTION: Microsoft Edge could allow a remote attacker to execute arbitra...
CVE-2023-3982
Cross-site Scripting XSS - Stored in GitHub repository omeka/omeka-s prior to 4.0.2...
CVE-2023-3981
Server-Side Request Forgery SSRF in GitHub repository omeka/omeka-s prior to 4.0.2...
