9364 matches found
Sql injection
Theme Volty CMS Blog up to version v4.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /tvcmsblog/single...
CVE-2023-39650
The CVE-2023-39650 entry corresponds to a SQL injection in the PrestaShop Theme Volty CMS Blog module (tvcmsblog) up to version 4.0.1, exploitable via the id parameter at /tvcmsblog/single. The nuclei template confirms the vulnerability in tvcmsblog up to 4.0.1 and describes impact as arbitrary S...
CVE-2023-39650: Improper Neutralization of Special Elements used in an SQL Command
Theme Volty CMS Blog up to version v4.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /tvcmsblog/single...
PrestaShop Theme Volty SQL Injection Vulnerability
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts and product image zoom and other features. A security vulnerability exists in PrestaShop Theme Volty CMS Blog prior to v4.0.1, which stems from t...
PT-2023-27054
Name of the Vulnerable Software and Affected Versions Theme Volty CMS Blog versions up to v4.0.1 Description The issue is a SQL injection vulnerability that can be exploited via the id parameter at the "/tvcmsblog/single" API endpoint. This vulnerability allows attackers to inject malicious SQL...
PerfreeBlog code issues and vulnerabilities
PerfreeBlog is a java-based blog/CMS builder. A security vulnerability exists in Perfree PerfreeBlog version v.3.1.2, which originates from a vulnerability that allows remote attackers to execute arbitrary code via a crafted plugin listed in admin/plugin/access/list...
PT-2023-27655 · Perfree · Perfreeblog
Name of the Vulnerable Software and Affected Versions: Perfree PerfreeBlog version 3.1.2 Description: An issue in Perfree PerfreeBlog allows a remote attacker to execute arbitrary code via a crafted plugin listed in "admin/plugin/access/list". Recommendations: For Perfree PerfreeBlog version 3.1....
Beyond Cold Calls: Ringless Voicemail As A Personalized Customer Engagement Tool
By Owais Sultan Ringless voicemail RVM is a technology that allows businesses to deliver pre-recorded messages directly to a customer's voicemail inbox without their phone ringing. This is a post from HackRead.com Read the original post: Beyond Cold Calls: Ringless Voicemail As A Personalized...
CVE-2023-3893
creationtimestamp| type| source ---|---|--- 2023-08-24 08:20:12+00:00| seen| https://t.me/ctinow/132601 2023-09-13 16:55:52+00:00| seen| https://t.me/KomunitiSiber/787 2023-09-13 18:29:02+00:00| seen| Telegram/Eqz54UavaIWHVUW9FJ7x8kPgHx309M56ivVEiN1xHvAsg 2023-09-14 15:21:47+00:00| seen|...
Behind the eight-ball: Why companies struggle with penetration risk
An introduction to a new blog series spotlighting Coalfires upcoming 5th Annual Penetration Risk report...
Akamai World Tour 2023: Let’s Connect on Security and Cloud Innovation
...
PT-2023-26674 · Berkaygediz · Oblog
Name of the Vulnerable Software and Affected Versions: berkaygediz O Blog version 1.0 Description: The issue allows a local attacker to escalate privileges via the secure file priv component. This is a SQL injection vulnerability. Recommendations: For berkaygediz O Blog version 1.0, consider...
CVE-2023-31076: Improper Neutralization of Input During Web Page Generation
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes plugin = 8.0.6 versions...
WordPress Blog Designer - Post and Widget Plugin <= 2.5.1 is vulnerable to Broken Access Control
Software Blog Designer - Post and Widget Type Plugin Vulnerable versions = 2.5.1 Fixed in 2.5.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40200 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 364b0ab37c11 Credits Abdi Pranata...
CVE-2023-35356
creationtimestamp| type| source ---|---|--- 2023-08-11 11:17:53+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8828 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2024-10-25 17:30:00+00:00| seen|...
Cryptographic Flaw in Libbitcoin Explorer Cryptocurrency Wallet
Cryptographic flaws still matter. Heres a flaw in the random-number generator used to create private keys. The seed has only 32 bits of entropy. Seems like this flaw is being exploited in the wild. EDITED TO ADD 8/14: A good explainer...
CVE-2023-27412
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest themes Mocho Blog theme = 1.0.4 versions...
CVE-2023-27412
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest themes Mocho Blog theme = 1.0.4 versions...