Opti Marketing <= 2.0.9 - SQL Injection

The Opti Marketing plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 2.0.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to appe...

MINI-J947-WHM3-6928

Bulletin has no description...

MINI-RP9V-CGJ5-6928

Bulletin has no description...

CVE-2023-6928

EuroTel ETL3100 versions v01c01 and v01x37 does not limit the number of attempts to guess administrative credentials in remote password attacks to gain full control of the system...

CVE-2024-6928

creationtimestamp| type| source ---|---|--- 2024-09-08 08:43:00+00:00| seen| https://t.me/cvedetector/5068...

CVE-2024-6928 Opti Marketing <= 2.0.9 - Unauthenticated SQLi

The Opti Marketing WordPress plugin through 2.0.9 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

WordPress Opti Marketing Plugin <= 2.0.9 is vulnerable to SQL Injection

Software Opti Marketing Type Plugin Vulnerable versions = 2.0.9 Fixed in N/A OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-6928 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID 20bcbe97a70a Credits Project Black Required privilege Unauthenticated...

Ubuntu 20.04 LTS / 22.04 LTS : Python vulnerabilities (USN-6928-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6928-1 advisory. It was discovered that the Python ssl module contained a memory race condition when handling the APIs to obtain the CA certificates and...

CVE-2023-6928

creationtimestamp| type| source ---|---|--- 2023-12-20 13:53:26+00:00| seen| https://t.me/ctinow/156991 2024-01-13 09:16:46+00:00| seen| https://t.me/ctinow/167758...

CVE-2023-6928

EuroTel ETL3100 versions v01c01 and v01x37 does not limit the number of attempts to guess administrative credentials in remote password attacks to gain full control of the system...

CVE-2023-6928

Summary (supported by provided documents): CVE-2023-6928 affects EuroTel ETL3100 transmitter versions v01c01 and v01x37. The vulnerability is an improper restriction of excessive authentication attempts (CWE-307), enabling a remote attacker to perform brute-force-like password guessing for admini...

SUSE CVE-2017-6928

Drupal core 7.x versions before 7.57 when using Drupal's private file system, Drupal will check to make sure a user has access to a file before allowing the user to view or download it. This check fails under certain conditions in which one module is trying to grant access to the file and another...

Fedora Update for drupal7 FEDORA-2018-2359c2ae0e

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for drupal7 FEDORA-2018-b9ad458866

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for drupal8 FEDORA-2018-6e6d8c314b

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for drupal8 FEDORA-2018-922cc2fbaa

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-1295-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-6928

Drupal core 7.x versions before 7.57 when using Drupal's private file system, Drupal will check to make sure a user has access to a file before allowing the user to view or download it. This check fails under certain conditions in which one module is trying to grant access to the file and another...

CVE-2017-6928

Drupal core 7.x before 7.57 with the private file system is vulnerable to an access bypass where one module grants access to a file while another denies it, due to a conflicting access check. This is mitigated by unusual site configurations but not guaranteed. The issue is addressed in Drupal 7.5...

Drupal 7.x < 7.57 Multiple Vulnerabilities (SA-CORE-2018-001)

According to its self-reported version, the instance of Drupal running on the remote web server is 7.x prior to 7.57. It is, therefore, affected by multiple vulnerabilities : - A flaw exists with the Drupal.checkPlain function due to improper handling of HTML injection. A remote attacker, with a...