904 matches found
CVE-2023-7171: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Novel-Plus up to 4.2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file novel-admin/src/main/java/com/java2nb/novel/controller/FriendLinkController.java of the component Friendly Link Handler. The manipulatio...
PT-2023-32918 · Unknown · Novel-Plus
Name of the Vulnerable Software and Affected Versions: Novel-Plus versions up to 4.2.0 Description: A vulnerability was found in the component Friendly Link Handler, specifically in the file novel-admin/src/main/java/com/java2nb/novel/controller/FriendLinkController.java. The manipulation of an...
WordPress Burst Statistics - Privacy-Friendly Analytics for WordPress Plugin 1.4.x < 1.5.0 SQLi Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:burst-statistics:burststatistics"; if description...
CVE-2023-5761
CVE-2023-5761 : Burst Statistics – Privacy-Friendly Analytics for WordPress is vulnerable to unauthenticated SQL Injection via the url parameter in versions 1.4.0 to 1.4.6.1 (free) and 1.4.0 to 1.5.0 (pro) due to insufficient escaping and insufficient preparation of the SQL query. Technical detai...
CVE-2023-5761: Improper Neutralization of Special Elements used in an SQL Command
The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'url' parameter in versions 1.4.0 to 1.4.6.1 free and versions 1.4.0 to 1.5.0 pro due to insufficient escaping on the user supplied parameter and lack of sufficient...
CryptoChat - Beyond Secure Messaging
Welcome to CryptChat - where conversations remain truly private. Built on the robust Python ecosystem, our application ensures that every word you send is wrapped in layers of encryption. Whether you're discussing sensitive business details or sharing personal stories, CryptChat provides the...
NetworkAssessment - With Wireshark Or TCPdump, You Can Determine Whether There Is Harmful Activity On Your Network Traffic That You Have Recorded On The Network You Monitor
The Network Compromise Assessment Tool is designed to analyze pcap files to detect potential suspicious network traffic. This tool focuses on spotting abnormal activities in the network traffic and searching for suspicious keywords. DNS Tunneling Detection : Identifies potential covert...
Explaining the Business Value of Qualys Enterprise TruRisk Platform to Your Leadership
New IDC White Paper Reports Findings by Qualys Customers As a cybersecurity leader, you may struggle to help your C-suite see the business value of what your team does. Forget “speeds and feeds”; key decision-makers are solely focused on The Numbers. While reports from most security tools excel a...
Facad1ng - The Ultimate URL Masking Tool - An Open-Source URL Masking Tool Designed To Help You Hide Phishing URLs And Make Them Look Legit Using Social Engineering Techniques
Facad1ng is an open-source URL masking tool designed to help you Hide Phishing URLs and make them look legit using social engineering techniques. Your phishing link: https://example.com/whatever Give any custom URL: gmail.com Phishing keyword: anything-u-want Output:...
CVE-2023-45071
Unauth. Stored Cross-Site Scripting XSS vulnerability in 10Web Form Builder Team Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin = 1.15.18 versions...
CVE-2023-45071
Unauth. Stored Cross-Site Scripting XSS vulnerability in 10Web Form Builder Team Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin = 1.15.18 versions...
Cross site scripting
Unauth. Stored Cross-Site Scripting XSS vulnerability in 10Web Form Builder Team Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin = 1.15.18 versions...
CVE-2023-45071 WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)
Unauth. Stored Cross-Site Scripting XSS vulnerability in 10Web Form Builder Team Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin = 1.15.18 versions...
CVE-2023-45070
CVE-2023-45070 affects WordPress Form Maker by 10Web (Mobile-Friendly Drag & Drop Contact Form Builder)
Exploit for Improper Initialization in Linux Linux_Kernel
Dirty Pipe Exploit: CVE-2022-0847 The Dirty Pipe vulnerability...
CVE-2023-24675
Cross Site Scripting Vulnerability in BluditCMS v.3.14.1 allows attackers to execute arbitrary code via the Categories Friendly URL...
Cross site scripting
Cross Site Scripting Vulnerability in BluditCMS v.3.14.1 allows attackers to execute arbitrary code via the Categories Friendly URL...
CVE-2023-24675
Cross Site Scripting Vulnerability in BluditCMS v.3.14.1 allows attackers to execute arbitrary code via the Categories Friendly URL...
PT-2023-19733 · Unknown · Bludit Cms
Name of the Vulnerable Software and Affected Versions: BluditCMS version 3.14.1 Description: The issue allows attackers to execute arbitrary code via the Categories Friendly URL, specifically through a Cross Site Scripting vulnerability. This enables attackers to inject malicious scripts into...