Product Show Room 跨站脚本漏洞

Product Show Room Site is a product show room website by Carlo Montero's personal developer. A cross-site scripting vulnerability exists in Product Show Room 1.0 and prior versions, which originates from an easy cross-site scripting attack via the First Name parameter under Add User...

WordPress plugin Xserver Migrator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

PT-2024-25587 · Unknown · Freesia Empire

Name of the Vulnerable Software and Affected Versions: Freesia Empire versions 1.4.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicious...

karmada-io karmada 安全漏洞

Karmada is a Kubernete management system open-sourced by karmada-io. A security vulnerability exists in karmada-io karmada v1.9.0 and earlier versions, which stems from a vulnerability that allows a local attacker to execute arbitrary code via a crafted command...

LoMag WareHouse Management 安全漏洞

LoMag WareHouse Management is a warehouse management software from LoMag. A security vulnerability exists in LoMag WareHouse Management version 1.0.20.120 and prior versions, which stems from a 10-character hard-coded password that is allowed by default...

mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

WordPress Perfect Pullquotes plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Perfect Pullquotes versions = 1.7.5...

PT-2024-7022 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 28.5, 27.9.4 and earlier Description: The issue is related to a NULL Pointer Dereference that could lead to an application denial-of-service DoS. An attacker could exploit this to crash the application, resulting in...

Hyprland 安全漏洞

Hyprland is a wlroots-based dynamic tiling Wayland composition application open-sourced by Hypr Development. A security vulnerability exists in Hyprland version 0.39.1 and earlier versions. An attacker could exploit this vulnerability to execute arbitrary assembly code by writing predictable...

WordPress plugin Easy Set Favicon 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin XStore Core SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

WordPress plugin Client Dash 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL. WordPress plugin is ...

Calico 安全漏洞

Tigera Calico is an open source cybersecurity solution for container, virtual machine, and host workloads from Tigera USA. A security vulnerability exists in Calico, Calico Enterprise, and Calico Cloud. An attacker could exploit the vulnerability to execute arbitrary binaries with elevated...

PT-2024-25354 · 10Web · Photo Gallery

Name of the Vulnerable Software and Affected Versions: Photo Gallery by 10Web versions 1.8.20 and earlier Description: A missing authorization issue has been identified. This issue allows unauthorized access. The estimated number of potentially affected devices is not provided. Recommendations: F...

Open DHCP Server 安全漏洞

Open DHCP Server is an open source software from an individual developer that provides DHCP services. A security vulnerability exists in DHCP Server ec976d2 and prior versions, which stems from a type confusion error that can lead to a large memory allocation, allowing remote attackers to cause a...

Hcode Online Judge 安全漏洞

Hcode Online Judge HOJ is a distributed architecture online assessment platform OJ for HimitZH individual developers. A security vulnerability exists in Hcode Online Judge 2.1 and earlier versions that stems from the presence of a stack buffer overflow...

WordPress plugin XStore Core SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

WordPress plugin WPC Composite Products for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress WP Advanced Search plugin <= 1.1.6 - Admin+ SQL Injection vulnerability

Admin+ SQL Injection vulnerability discovered by fourcade in WordPress Plugin Advanced Search versions = 1.1.6...