1256 matches found
CVE-2024-12635 WP Docs <= 2.2.0 - Authenticated (Subscriber+) Time-Based SQL Injection via 'dir_id'
The WP Docs plugin for WordPress is vulnerable to time-based SQL Injection via the 'dirid' parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
WordPress plugin WP Docs SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...
CVE-2024-12635: Improper Neutralization of Special Elements used in an SQL Command
The WP Docs plugin for WordPress is vulnerable to time-based SQL Injection via the 'dirid' parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
PT-2024-17682 · WordPress · Wp Docs
Name of the Vulnerable Software and Affected Versions: WP Docs plugin for WordPress versions up to, and including, 2.2.0 Description: The WP Docs plugin for WordPress is susceptible to time-based SQL Injection via the dir id parameter due to insufficient escaping on the user-supplied parameter an...
WordPress WP Docs plugin <= 2.2.0 - Authenticated (Subscriber+) Time-Based SQL Injection via 'dir_id' vulnerability
Authenticated Subscriber+ Time-Based SQL Injection via 'dirid' vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin WP Docs versions = 2.2.0...
Malicious code in eb-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab4350e0e76a01ebf4e3e3692784f26c112499d024ac9b24f8fe322f09ceebfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11919 Malicious code in yandex-pandora-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e7c8829575ea2c09d2db8f6f98a73635e882f6ac8084b06174761270128f3438 The OpenSSF Package Analysis project identified 'yandex-pandora-docs' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...
Malicious code in yandex-pandora-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e7c8829575ea2c09d2db8f6f98a73635e882f6ac8084b06174761270128f3438 The OpenSSF Package Analysis project identified 'yandex-pandora-docs' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...
Low: Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.3.3 bugfix release
Red Hat Developer Hub 1.3.3 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...
Malicious code in web3-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 965af70ebf07de371170bda6a257b464ee058430c0f1d6112323bacabbe19d5c The OpenSSF Package Analysis project identified 'web3-docs' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...
MAL-2024-11876 Malicious code in web3-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 965af70ebf07de371170bda6a257b464ee058430c0f1d6112323bacabbe19d5c The OpenSSF Package Analysis project identified 'web3-docs' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...
CVE-2023-30873
Missing Authorization vulnerability in Fahad Mahmood WP Docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through 1.9.8...
CVE-2023-30873
Missing Authorization vulnerability in Fahad Mahmood WP Docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through 1.9.8...
CVE-2023-30873
Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through = 1.9.8...
CVE-2023-30873 WordPress WP Docs plugin <= 1.9.8 - Broken Access Control
Missing Authorization vulnerability in Fahad Mahmood WP Docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through 1.9.8...
CVE-2023-30873 WordPress WP Docs plugin <= 1.9.8 - Broken Access Control
Missing Authorization vulnerability in Fahad Mahmood WP Docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through 1.9.8...
CVE-2023-30873
CVE-2023-30873 is a Missing Authorization vulnerability in the WordPress WP Docs plugin, exploitable via incorrectly configured access control. Affected versions are WP Docs
Malicious code in proxyapi-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9d0be666e45390198629c261ca3464256997a9fad7f429bf7183e27c52931f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11427 Malicious code in proxyapi-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9d0be666e45390198629c261ca3464256997a9fad7f429bf7183e27c52931f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...