MAL-2024-11341 Malicious code in discord-clone (npm)

--- -= Per source details. Do not edit below this line.=-...

PT-2024-12062 · Unknown · Migrate Clone

Name of the Vulnerable Software and Affected Versions: Migrate Clone versions prior to 2.3.8 Description: The issue is related to a Missing Authorization vulnerability in Migrate Clone, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions...

CVE-2022-38947

SQL Injection vulnerability in Flipkart-Clone-PHP version 1.0 in entry.php in producttitle parameter, allows attackers to execute arbitrary code...

CVE-2022-38947

Flipkart-Clone-PHP version 1.0 is vulnerable to a SQL Injection vulnerability in the entry.php file, specifically within the product_title parameter. This flaw allows an attacker to execute arbitrary code . To mitigate the risk, it is recommended to restrict access to the product_title parameter ...

CVE-2022-38947: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Flipkart-Clone-PHP version 1.0 in entry.php in producttitle parameter, allows attackers to execute arbitrary code...

CVE-2023-25486: Missing Authorization

Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a through 2.3.7...

Flipkart-Clone-PHP 安全漏洞

Flipkart-Clone-PHP is an application by Jigar Sable Personal Developer. A security vulnerability exists in Flipkart-Clone-PHP version 1.0, which stems from the producttitle parameter in the entry.php page containing a SQL injection vulnerability...

PT-2024-11617 · Unknown · Flipkart-Clone-Php

Name of the Vulnerable Software and Affected Versions: Flipkart-Clone-PHP version 1.0 Description: The issue allows attackers to execute arbitrary code through a SQL Injection vulnerability in the product title parameter in the entry.php file. Recommendations: For Flipkart-Clone-PHP version 1.0,...

CVE-2022-38947

SQL Injection vulnerability in Flipkart-Clone-PHP version 1.0 in entry.php in producttitle parameter, allows attackers to execute arbitrary code...

WordPress plugin Clone 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2024-53858

The gh cli is GitHub’s official command line tool. A security vulnerability has been identified in the GitHub CLI that could leak authentication tokens when cloning repositories containing "git" submodules hosted outside of GitHub.com and ghe.com. This vulnerability stems from several "gh" comman...

CVE-2024-53858 Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in the gh cli

The gh cli is GitHub’s official command line tool. A security vulnerability has been identified in the GitHub CLI that could leak authentication tokens when cloning repositories containing git submodules hosted outside of GitHub.com and ghe.com. This vulnerability stems from several gh commands...

Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart

CVE-2024-48990 Exploit My full writeup for how I came to re-...

CVE-2024-10913

The Clone plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.4.6 via deserialization of untrusted input in the 'recursiveunserializedreplace' function. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain i...

CVE-2024-10913 Clone <= 2.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialized_replace'

The Clone plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.4.6 via deserialization of untrusted input in the 'recursiveunserializedreplace' function. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain i...

WordPress Clone plugin <= 2.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialized_replace' vulnerability

Unauthenticated PHP Object Injection via 'recursiveunserializedreplace' vulnerability discovered by Webbernaut in WordPress Plugin Clone versions = 2.4.6...

PT-2024-16638 · WordPress · Clone

Name of the Vulnerable Software and Affected Versions: The Clone plugin for WordPress versions up to, and including, 2.4.6 Description: The issue allows unauthenticated attackers to inject a PHP Object via deserialization of untrusted input in the recursive unserialized replace function. If a POP...

WordPress plugin Clone 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

WordPress Clone Plugin <= 2.4.6 is vulnerable to PHP Object Injection

Software Clone Type Plugin Vulnerable versions = 2.4.6 Fixed in 2.4.7 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2024-10913 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 3676e7fb18ec Credits Webbernaut Required privilege Unauthenticated...

CVE-2024-10913: Deserialization of Untrusted Data

The Clone plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.4.6 via deserialization of untrusted input in the 'recursiveunserializedreplace' function. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain i...