238 matches found
CVE-2025-46479
The CVE-2025-46479 entry concerns a DOM-based XSS in the WordPress BBCode Deluxe plugin. Affected versions are BBCode Deluxe up to 2020.08.01.2, with the root cause described as improper input neutralization during web page generation. The CVSS vector provided (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L...
CVE-2025-46479 WordPress BBCode Deluxe <= 2020.08.01.2 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DevynCJohnson BBCode Deluxe allows DOM-Based XSS. This issue affects BBCode Deluxe: from n/a through 2020.08.01.2...
WordPress plugin BBCode Deluxe 跨站脚本漏洞
WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...
PT-2025-17793 · Unknown · Bbcode Deluxe
Name of the Vulnerable Software and Affected Versions: BBCode Deluxe versions through 2020.08.01.2 Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This can lead to Cross-site Scripting attacks. Recommendations: For...
Nintendo Mario Kart 8 Deluxe 安全漏洞
Nintendo Mario Kart 8 Deluxe is a karting game by Nintendo of Japan Nintendo. A security vulnerability exists in Nintendo Mario Kart 8 Deluxe prior to version 3.0.3, which stems from the presence of a stack-based buffer overflow vulnerability. An attacker could exploit this vulnerability to cause...
CVE-2024-45200
In Nintendo Mario Kart 8 Deluxe before 3.0.3, the LAN/LDN local multiplayer implementation allows a remote attacker to exploit a stack-based buffer overflow upon deserialization of session information via a malformed browse-reply packet, aka KartLANPwn. The victim is not required to join a game...
PT-2024-31479 · Nintendo · Mario Kart 8 Deluxe +1
Name of the Vulnerable Software and Affected Versions: Mario Kart 8 Deluxe versions prior to 3.0.3 Description: The issue is caused by a stack-based buffer overflow in the LAN/LDN local multiplayer implementation, allowing a remote attacker to exploit it upon deserialization of session informatio...
Exploit for CVE-2024-45200
Kart"LAN"Pwn CVE-2024-45200https://nvd.nist.gov/vuln/detai...
Exploit for CVE-2024-45200
Kart"LAN"Pwn CVE-2024-45200https://nvd.nist.gov/vuln/detai...
Exploit for CVE-2024-45200
Kart"LAN"Pwn CVE-2024-45200https://nvd.nist.gov/vuln/detai...
CVE-2024-34532
A SQL injection vulnerability in Yvan Dotet PostgreSQL Query Deluxe module aka querydeluxe 17.x before 17.0.0.4 allows a remote attacker to gain privileges via the query parameter to models/querydeluxe.py:QueryDeluxe::getresultfromquery...
PT-2024-25952 · Yvan Dotet · Postgresql Query Deluxe
Name of the Vulnerable Software and Affected Versions: Yvan Dotet PostgreSQL Query Deluxe module versions 17.x before 17.0.0.4 Description: A SQL injection issue allows a remote attacker to gain privileges via the query parameter to models/querydeluxe.py:QueryDeluxe::get result from query. This...
CVE-2024-34532
A SQL injection vulnerability in Yvan Dotet PostgreSQL Query Deluxe module aka querydeluxe 17.x before 17.0.0.4 allows a remote attacker to gain privileges via the query parameter to models/querydeluxe.py:QueryDeluxe::getresultfromquery...
Yvan Dotet PostgreSQL Query Deluxe 安全漏洞
Yvan Dotet PostgreSQL Query Deluxe is an application from Yvan Dotet, Inc. A security vulnerability exists in Yvan Dotet PostgreSQL Query Deluxe version 17.x up to and including 17.0.0.4. A remote attacker can exploit this vulnerability to gain privileges via the query parameter of...
CVE-2023-46350
SQL injection vulnerability in InnovaDeluxe "Manufacturer or supplier alphabetical search" idxrmanufacturer module for PrestaShop versions 2.0.4 and before, allows remote attackers to escalate privileges and obtain sensitive information via the methods IdxrmanufacturerFunctions::getCornersLink,...
deluxe-cards.ro Cross Site Scripting vulnerability OBB-3718908
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
deluxe-villa.com.hr Cross Site Scripting vulnerability OBB-3565599
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
deluxe-catering-service.de Cross Site Scripting vulnerability OBB-3259707
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
