CVE-2024-50121 affecting package kernel for versions less than 5.15.176.3-1

CVE-2024-50121 affecting package kernel for versions less than 5.15.176.3-1. A patched version of the package is available...

WordPress plugin GenerateBlocks 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

SunGrow iSolarCloud 安全漏洞

SunGrow iSolarCloud is an Android app for new energy power plant management from China SunGrow SunGrow. It is used for power plant data collection, monitoring, operation and maintenance and operation management. A security vulnerability exists in SunGrow iSolarCloud version V2.1.6.20241017 and...

WordPress plugin gallery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

PT-2025-6961 · Unknown · Levan Tarbor Forex Calculators

Name of the Vulnerable Software and Affected Versions: Levan Tarbor Forex Calculators versions 1.3.6 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means an attacker can inject...

CVE-2024-53963

Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by a low privileged attacker to execute arbitrary code in the context of the victim's browser session. By manipulating a DOM element through a crafted UR...

PT-2025-5036 · Unknown · Lime Developer Login

Name of the Vulnerable Software and Affected Versions: Lime Developer Login versions 1.4.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected Cross-site Scripting XSS. This means that an attacker can inject...

Venki Supravizio BPM 安全漏洞

Venki Supravizio BPM is a process management solution from Venki Brazil. A security vulnerability exists in Venki Supravizio BPM version 18.0.1 and prior versions, which stems from a contained arbitrary file upload vulnerability. An authenticated attacker could upload malicious files, which could...

PT-2025-3788 · Pgagent +1 · Pgagent +1

Name of the Vulnerable Software and Affected Versions: pgAgent versions prior to 4.2.3 Description: The issue arises when pgAgent executes batch jobs, creating a script in a temporary directory before execution. In affected versions, an insufficiently seeded random number generator is used to...

free-one-api 安全漏洞

free-one-api is open source software developed by RockChinQ, which is a LLM Large Language Model reverse engineering interface management tool. A security vulnerability exists in versions of free-one-api prior to 1.0.1, which stems from the fact that MD5, which is used to hash passwords before...

PT-2024-36670 · Unknown · Stop Registration Spam

Name of the Vulnerable Software and Affected Versions: Stop Registration Spam versions 1.23 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application...

PT-2024-36103 · Codegear · Codegearthemes Designer

Name of the Vulnerable Software and Affected Versions: CodegearThemes Designer versions 1.3.3 and earlier Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local...

socat 安全漏洞

socat is a repeater in the socat open source for bi-directional data transfer channels between two separate data. A security vulnerability exists in socat 1.8.0.1 and earlier versions, which originates from the readline.sh dependency on the /tmp/$USER/stderr2 file...

Rakuten Turbo 5G 安全漏洞

Rakuten Turbo 5G is a home router from Rakuten that requires no construction and plugs into an electrical outlet. A security vulnerability exists in Rakuten Turbo 5G V1.3.18 and earlier versions, which arises from the exposure of sensitive system information to unauthorized control, where an...

PT-2024-34740 · Unknown · Themeshark Templates & Widgets For Elementor

Name of the Vulnerable Software and Affected Versions: ThemeShark Templates & Widgets for Elementor versions 1.1.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, wher...

PT-2024-34808 · Unknown · Bricksable For Bricks Builder

Name of the Vulnerable Software and Affected Versions: Bricksable for Bricks Builder versions 1.6.59 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...

PT-2024-32972 · Localai +1 · Localai +1

Name of the Vulnerable Software and Affected Versions: localai versions =2.20.1 Description: The issue is related to a Cross Site Scripting XSS vulnerability. When the delete model API is called with inappropriate parameters, it can cause a one-time storage XSS. This will trigger the payload when...

WordPress plugin Templately 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-34220 · Unknown · Merkulove Selection Lite

Name of the Vulnerable Software and Affected Versions: Merkulove Selection Lite versions 1.13 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations:...

WordPress plugin Multiple Page Generator Plugin – MPG SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Multiple...