PT-2024-30782 · Unknown · Magic Post Thumbnail

Name of the Vulnerable Software and Affected Versions: Magic Post Thumbnail versions 5.2.9 and earlier Description: The issue is related to improper neutralization of input during web page generation, leading to a Cross-site Scripting XSS vulnerability. This allows for Reflected XSS. The estimate...

OpenText NetIQ Access Manager 安全漏洞

OpenText NetIQ Access Manager is a comprehensive mobile and web access management tool from OpenText Canada. A security vulnerability exists in OpenText NetIQ Access Manager versions 5.0.4.1 and prior to 5.1, which stems from a path traversal vulnerability that fails to properly restrict pathname...

PT-2024-30492 · WordPress · Dark Mode For Wp Dashboard

Name of the Vulnerable Software and Affected Versions: Dark Mode for WP Dashboard versions 1.2.3 and earlier Description: A Cross-Site Request Forgery CSRF issue has been identified. This allows an attacker to perform unintended actions on a user's account. Recommendations: For versions 1.2.3 and...

WordPress plugin RT Easy Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2024-41841

CVE-2024-41841 affects Adobe Experience Manager (AEM) versions 6.5.20 and earlier, with a reflected XSS vulnerability that can execute malicious JavaScript in a victim’s browser when a user visits a crafted URL. The issue is confirmed in multiple sources and is exploitable via a vulnerable page r...

CVE-2024-41848

CVE-2024-41848 affects Adobe Experience Manager (AEM) 6.5.20 and earlier, exposing a reflected XSS vulnerability invoked when a user visits a crafted URL reference. The issue is characterized as a reflected Cross-Site Scripting (XSS) in AEM, with the CVSS 3.1 vector indicating Network access, low...

CVE-2024-5466

Zohocorp ManageEngine OpManager and Remote Monitoring and Management versions 128329 and below are vulnerable to the authenticated remote code execution in the deploy agent option...

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc USA. A security vulnerability exists in Google Chrome version 128.0.6613.84 and prior versions, which stems from the inclusion of a mal-implementation issue...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc USA. A security vulnerability exists in Google Chrome version 128.0.6613.84 and prior versions, which stems from the inclusion of a mal-implementation issue...

PT-2024-11970 · Dell · Dell Repository Manager

Name of the Vulnerable Software and Affected Versions: Dell Repository Manager versions 3.4.2 and earlier Description: A local low privileged attacker may potentially exploit a Local Privilege Escalation Vulnerability in the Installation module, leading to the execution of arbitrary executables o...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc.V8 is an open source JavaScript engine, and Autofill is an autofill form plugin. A security vulnerability exists in Google Chrome version 128.0.6613.84 and prior versions, which stems from a reuse-after-release issue that contains a...

WordPress plugin GiveWP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress tagDiv Opt-In Builder plugin <= 1.4.4 - Authenticated (Admin+) SQL Injection vulnerability

Authenticated Admin+ SQL Injection vulnerability discovered by Truoc Phan in WordPress Plugin tagDiv Opt-In Builder versions = 1.4.4...

Zephyr 安全漏洞

Zephyr is an extensible real-time operating system RTOS open-sourced by Zephyr. A security vulnerability exists in Zephyr 3.6 and earlier versions that stems from a missing check that results in a divide-by-zero error...

WordPress plugin Login As Users 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

PT-2024-30399 · Unknown · Scott Paterson Easy Paypal Buy Now Button

Name of the Vulnerable Software and Affected Versions: Scott Paterson Easy PayPal Buy Now Button versions 1.9 and earlier Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability. This vulnerability allows redirection to untrusted...

WordPress plugin Visual Composer Starter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Icegram 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-30514 · Unknown · Virustran Button Contact Vr

Name of the Vulnerable Software and Affected Versions: VirusTran Button contact VR versions 4.7.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS Cross-site Scripting attacks. This means an attacker could...