19 matches found
CVE-2025-9593
A flaw has been found in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/unitstatusinfo.php. Executing manipulation of the argument usid can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...
CVE-2020-9593
Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an invalid memory access vulnerability. Successful exploitation could lead to information disclosure...
CVE-2024-9593
creationtimestamp| type| source ---|---|--- 2024-10-18 21:05:49+00:00| seen| https://t.me/cvedetector/8336 2024-10-28 23:29:26+00:00| published-proof-of-concept| Telegram/5V-jKlBJfJI2moCMY3KyeJBQnJ-uAslbzUqrH-FcOJ6dg 2024-10-28 23:29:35+00:00| published-proof-of-concept| https://t.me/CNArsenal/33...
CVE-2024-9593 Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution
The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 for Time Clock and 1.1.4 for Time Clock Pro via the 'etimeclockwploadfunctioncallback' function. This allows unauthenticated attackers to execute code on t...
CVE-2024-9593 Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution
The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 for Time Clock and 1.1.4 for Time Clock Pro via the 'etimeclockwploadfunctioncallback' function. This allows unauthenticated attackers to execute code on t...
Exploit for Code Injection in Wpplugin Time_Clock
CVE-2024-9593 Time Clock = 1.2.2 & Time Clock Pro...
WordPress Time Clock Plugin <= 1.2.2 is vulnerable to Remote Code Execution (RCE)
Software Time Clock Type Plugin Vulnerable versions = 1.2.2 Fixed in 1.2.3 OWASP Top 10 A3: Injection Classification Remote Code Execution RCE CVE CVE-2024-9593 Patch priority High CVSS severity High 8.3 Developer Claim ownership PSID ba1ac64c553d Credits István Márton Required privilege...
WordPress Time Clock Pro Plugin <= 1.1.4 is vulnerable to Remote Code Execution (RCE)
Software Time Clock Pro Type Plugin Vulnerable versions = 1.1.4 Fixed in 1.1.5 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2024-9593 Patch priority High CVSS severity High 8.3 Developer Claim ownership PSID 9837dd0a77ff Credits István Márton Required privilege...
CVE-2020-9593
CVE-2020-9593 affects Adobe Acrobat and Adobe Reader, with affected versions including 2020.006.20042 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier. The vulnerability is described as an invalid memory access that could lead to information disclosure upon successful explo...
Adobe Acrobat and Reader Memory corruption (APSB20-24: CVE-2020-9593)
A memory corruption vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Acrobat < 2015.006.30523 / 2017.011.30171 / 2020.009.20063 Multiple Vulnerabilities (APSB20-24)
The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30523, 2017.011.30171, or 2020.009.20063. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier,...
ShoreTel Connect ONSITE < 19.49.1500.0 - Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Shoretel Connect Multiple Vulnerability Google Dork: inurl:/signin.php?ret= Author: Ramikan Vendor Homepage: https://www.shoretel.com/ Software Link: https://www.shoretel.com/resource-center/shoretel-connect-onsite-overview...
ShoreTel Connect ONSITE 19.49.1500.0 - Multiple Vulnerabilities
ShoreTel Connect ONSITE 19.49.1500.0 - Multiple Vulnerabilities Exploit Title: Shoretel Connect Multiple Vulnerability Google Dork: inurl:/signin.php?ret= Date: 14/06/2017 Author: Ramikan Vendor Homepage: https://www.shoretel.com/ Software Link:...
ShoreTel Connect ONSITE < 19.49.1500.0 - Multiple Vulnerabilities
Exploit Title: Shoretel Connect Multiple Vulnerability Google Dork: inurl:/signin.php?ret= Date: 14/06/2017 Author: Ramikan Vendor Homepage: https://www.shoretel.com/ Software Link: https://www.shoretel.com/resource-center/shoretel-connect-onsite-overview Version: Tested on 18.62.2000.0,...
CVE-2019-9593
CVE-2019-9593 affects ShoreTel Connect ON SITE 18.82.2000.0. The vulnerability is a reflected XSS via the page parameter on a ShoreTel Connect ONSITE web page, enabling remote attackers to inject arbitrary script/HTML. The issue is documented across multiple sources (NVD and Mitel/OnSite disclosu...
CVE-2018-9593
Technical details about CVE-2018-9593 are not publicly available in the provided connected documents. Monitor for updates from official sources.
CVE-2016-9593
CVE-2016-9593 affects foreman-debug; the vulnerability arises from missing obfuscation of sensitive information in logging. An attacker with access to the foreman log file could view passwords, enabling credential exposure and potential system access. Public references indicate the issue is tied ...
RHEL 7 : Satellite 6.3 (RHSA-2018:0336)
"The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0336 advisory. Red Hat Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and monitorin...
CVE-2017-9593
CVE-2017-9593 concerns the iOS app Oculina Mobile Banking (3.0.0, oculina-mobile-banking/id867025690). The vulnerability is that the app does not verify SSL server certificates (X.509 certificate verification ), which can allow a man-in-the-middle to spoof servers and exfiltrate sensitive informa...