39 matches found
CVE-2025-26988 WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.7.8 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows SQL Injection.This issue affects SMS Alert Order Notifications: from n/a through = 3.7.8...
CVE-2024-10581
creationtimestamp| type| source ---|---|--- 2025-02-15 11:29:27+00:00| seen| https://infosec.exchange/users/cve/statuses/114007668628837902 2025-02-15 12:15:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li7p2domhr2i 2025-02-15 13:11:17+00:00| seen|...
CVE-2025-0740
creationtimestamp| type| source ---|---|--- 2025-01-30 11:16:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxeajuefg2h 2025-01-30 11:30:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113917075552632233 2025-01-30 12:59:36+00:00| seen|...
CVE-2024-57650
creationtimestamp| type| source ---|---|--- 2025-01-14 01:08:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1439 2025-01-14 01:17:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3depnj52n 2025-01-14 02:31:33+00:00| seen|...
CVE-2025-22134
creationtimestamp| type| source ---|---|--- 2025-01-13 20:47:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113823005501409680 2025-01-13 20:50:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113823016558641219 2025-01-13 21:12:13+00:00| seen|...
CVE-2024-56250
creationtimestamp| type| source ---|---|--- 2025-01-02 12:21:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2ta73nl25 2025-01-02 12:42:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ler3zpvkyj2e 2025-01-02 14:15:20+00:00| seen|...
CVE-2024-53188
creationtimestamp| type| source ---|---|--- 2024-12-27 14:16:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lec6iaxavo22 2024-12-27 15:22:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113725467667751524...
PT-2024-16130 · WordPress · Sms Alert Order Notifications
Name of the Vulnerable Software and Affected Versions: SMS Alert Order Notifications – WooCommerce plugin for WordPress versions up to, and including, 3.7.5 Description: The issue is related to Stored Cross-Site Scripting via the plugin's sa subscribe shortcode due to insufficient input...
CVE-2024-45605 Improper authorization on deletion of user issue alert notifications in sentry
Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user delete the user issue alert notifications for arbitrary users given a know alert ID. A patch was issued to ensure authorization checks are properly scoped on requests to delete user alert...
Sentry improperly authorizes deletion of user issue alert notifications
Impact An authenticated user may delete user issue alert notifications for arbitrary users given a known alert ID. Patches A patch was issued to ensure authorization checks are properly scoped on requests to delete user alert notifications. Sentry SaaS users do not need to take any action...
Sentry 安全漏洞
Sentry is a developer-oriented bug tracking and performance monitoring platform from Sentry Open Source. A security vulnerability exists in Sentry versions 23.9.0 and earlier and 24.8.0 and earlier, which stems from an authenticated user being able to remove alert notifications from any user with...
CVE-2024-45605: Authorization Bypass Through User-Controlled Key
Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user delete the user issue alert notifications for arbitrary users given a know alert ID. A patch was issued to ensure authorization checks are properly scoped on requests to delete user alert...
SUSE-SU-2023:2917-1 Security update for SUSE Manager Client Tools
This update fixes the following issues: grafana: - Update to version 9.5.5: CVE-2023-3128: Fix authentication bypass using Azure AD OAuth bsc1212641, jscPED-3694 Bug fixes: Auth: Show invite button if disable login form is set to false. Azure: Fix Kusto auto-completion for Azure datasources. RBAC...
Selea CarPlateServer (CPS) 4.0.1.6 - Local Privilege Escalation Vulnerability
Exploit Title: Selea CarPlateServer CPS 4.0.1.6 - Local Privilege Escalation Exploit Author: LiquidWorm Vendor Homepage: https://www.selea.com Selea CarPlateServer CPS v4.0.1.6 Local Privilege Escalation Vendor: Selea s.r.l. Product web page: https://www.selea.com Affected version: 4.0.1.6210120...
CVE-2020-15526
In Redgate SQL Monitor 7.1.4 through 10.1.6 inclusive, the scope for disabling some TLS security certificate checks can extend beyond that defined by various options on the Configuration Notifications pages to disable certificate checking for alert notifications. These TLS security checks are als...
CVE-2020-15526
In Redgate SQL Monitor 7.1.4 through 10.1.6 inclusive, the scope for disabling some TLS security certificate checks can extend beyond that defined by various options on the Configuration Notifications pages to disable certificate checking for alert notifications. These TLS security checks are als...
Code injection
In Redgate SQL Monitor 7.1.4 through 10.1.6 inclusive, the scope for disabling some TLS security certificate checks can extend beyond that defined by various options on the Configuration Notifications pages to disable certificate checking for alert notifications. These TLS security checks are als...
Identifying Let’s Encrypt Revoked Certificates
Let's Encrypt is a free, automated, open certificate authority CA run for the public's benefit as a service from the Internet Security Research Group ISRG. It provides free digital certificates to enable HTTPS SSL/TLS for websites via user-friendly means. Earlier this week, Let's Encrypt announce...
