PT-2024-24285 · Unknown · Anton Aleksandrov Wordpress Hosting Benchmark Tool

Name of the Vulnerable Software and Affected Versions: Anton Aleksandrov WordPress Hosting Benchmark tool versions 1.3.6 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability in the Anton Aleksandrov WordPress Hosting Benchmark tool. This type of vulnerability allo...

PT-2024-24396 · Tonjoo · Sangar Slider

Name of the Vulnerable Software and Affected Versions: Sangar Slider versions 1.3.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability in Tonjoo Sangar Slider. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a...

PT-2024-24561 · Unknown · Wp All Import

Name of the Vulnerable Software and Affected Versions: WP All Import Import Users from CSV versions 1.2 and earlier Description: The issue is related to Deserialization of Untrusted Data, which affects the Import Users from CSV functionality. Recommendations: For versions 1.2 and earlier, update ...

PT-2024-24443 · Ghozylab · Ghozylab Easy Contact Form Lite

Name of the Vulnerable Software and Affected Versions: GhozyLab Easy Contact Form Lite versions 1.1.23 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Stored XSS in the GhozyLab Eas...

Owl Admin 跨站脚本漏洞

OwlAdmin Owl Admin is a fast and flexible backend framework from OwlAdmin, Inc. A cross-site scripting vulnerability exists in slowlyo OwlAdmin version 3.5.7 and earlier versions, which stems from the fact that incorrect manipulation of the parameter file can lead to cross-site scripting...

WordPress SEO Booster plugin <= 3.8.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin SEO Booster versions = 3.8.9...

OESA-2024-1429 wireshark security update

Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer. Security Fixes: Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark versio...

WordPress Plugin Community by PeepSo 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress Plugin Community by PeepSo A cross-site reques...

PT-2024-23940 · Unknown · Easy Digital Downloads

Name of the Vulnerable Software and Affected Versions: Easy Digital Downloads versions 3.2.6 and earlier Description: A Cross-Site Request Forgery CSRF issue has been identified. This type of issue allows an attacker to trick a user into performing unintended actions on a web application that the...

PT-2024-24017

Name of the Vulnerable Software and Affected Versions WP Event Aggregator versions 1.7.6 and earlier Description A Cross-Site Request Forgery CSRF issue has been identified. This type of issue allows an attacker to trick a user into performing unintended actions on a web application that the user...

CVE-2024-30271

Illustrator versions 28.3, 27.9.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2024-12312 · Unknown · Easyappointments

Name of the Vulnerable Software and Affected Versions: Easy!Appointments versions 1.3.3 and earlier Description: The issue is related to a Missing Authorization vulnerability in Easy!Appointments. Recommendations: For versions 1.3.3 and earlier, at the moment, there is no information about a newe...

PT-2024-24290 · WordPress · Aminur Islam Wp Login/Logout Redirect

Name of the Vulnerable Software and Affected Versions: Aminur Islam WP Login and Logout Redirect versions 1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that ...

PT-2024-22879 · Gnu · Gnu Savane

Name of the Vulnerable Software and Affected Versions: GNU Savane versions 3.13 and earlier Description: An issue allows a remote attacker to execute arbitrary code and escalate privileges via a crafted file to the "upload.php" component. Recommendations: For GNU Savane versions 3.13 and earlier,...

PT-2024-24288 · Unknown · Faktor Vier F4 Improvements

Name of the Vulnerable Software and Affected Versions: FAKTOR VIER F4 Improvements versions 1.8.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means that an attacker can inject...

D-Link Go-RT-AC750 安全漏洞

The D-Link GO-RT-AC750 is a wireless dual-band simple router from China-based AUO D-Link. A security vulnerability exists in the D-Link Go-RT-AC750 v101b03 and earlier versions, which stems from the presence of a stack-based buffer overflow vulnerability that allows an attacker to execute arbitra...

PT-2024-24418 · Leadinfo · Leadinfo

Name of the Vulnerable Software and Affected Versions: Leadinfo versions 1.0 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software. This issue allows an attacker to perform unintended actions on a user's account. The estimated number of potentially affected devices...

CVE-2024-20766

InDesign Desktop versions 18.5.1, 19.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that ...

PT-2024-24002 · Unknown · 5 Stars Rating Funnel

Name of the Vulnerable Software and Affected Versions: 5 Stars Rating Funnel versions 1.2.67 and earlier Description: The issue is related to a Missing Authorization vulnerability in the 5 Stars Rating Funnel. Recommendations: For versions 1.2.67 and earlier, update to a version that includes the...

Nozomi Networks Guardian/CMC 安全漏洞

Nozomi Networks Guardian/CMC is a centralized management console from Nozomi Networks, USA. A security vulnerability exists in Nozomi Networks Guardian/CMC versions prior to v23.4.1 that stems from an audit log of an OpenAPI request that may contain sensitive information, which could lead to...