4466 matches found
WordPress AI Image Lab plugin <= 1.0.6 - Cross-Site Request Forgery to API Key Update vulnerability
Cross-Site Request Forgery to API Key Update vulnerability discovered by Kishan Vyas in WordPress Plugin AI Image Lab versions = 1.0.6...
WordPress plugin AI Image Lab – Free AI Image Generator 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress AI Image Lab - Free AI Image Generator plugin, which stems from missing or incorrect validation of random...
PT-2025-25473 · WordPress · The Ai Image Lab – Free Ai Image Generator
Name of the Vulnerable Software and Affected Versions: The AI Image Lab – Free AI Image Generator plugin for WordPress versions 1.0.0 through 1.0.6 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'wpz-ai-images' page. This allows...
Malicious code in @jito-lab/provider (npm)
The package communicates with a domain associated with malicious activity...
CVE-2024-43706
creationtimestamp| type| source ---|---|--- 2025-06-10 18:33:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17965 2025-06-16 23:22:37+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3lrr4ptjf2k2w...
[slackware-security] seamonkey
New seamonkey packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/seamonkey-2.53.21-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more information, see:...
[slackware-security] mozilla-thunderbird
New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-128.11.0esr-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For...
CVE-2024-32554
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Knight Lab Knight Lab Timeline allows Stored XSS.This issue affects Knight Lab Timeline: from n/a through 3.9.3.4...
CVE-2024-28515
Buffer Overflow vulnerability in CSAPPLab CSAPP Lab3 15-213 Fall 20xx allows a remote attacker to execute arbitrary code via the lab3 of csapp,lab3/buflab-update.pl component...
CVE-2024-29469
A stored cross-site scripting XSS vulnerability in OneBlog v2.3.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category List parameter under the Lab module...
CVE-2024-22917
SQL injection vulnerability in Dynamic Lab Management System Project in PHP v.1.0 allows a remote attacker to execute arbitrary code via a crafted script...
CVE-2024-0937
A vulnerability, which was classified as critical, has been found in vanderSchaar LAB synthcity 0.2.9. Affected by this issue is the function loadfromfile of the component PKL File Handler. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been...
CVE-2024-32573
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay.This issue affects WP-Lister Lite for eBay: from n/a through = 3.5.11...
CVE-2024-51430
Cross Site Scripting vulnerability in online diagnostic lab management system using php v.1.0 allows a remote attacker to execute arbitrary code via the Test Name parameter on the diagnostic/add-test.php component...
CVE-2024-51918
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Freshlight Lab Pay With Stripe payments-stripe-gateway allows DOM-Based XSS.This issue affects Pay With Stripe: from n/a through = 1.2.1...
CVE-2024-24889
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Geek Code Lab All 404 Pages Redirect to Homepage allows Stored XSS.This issue affects All 404 Pages Redirect to Homepage: from n/a through 1.9...
CVE-2024-2287
The Knight Lab Timeline plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.9.3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2023-31215
Unrestricted Upload of File with Dangerous Type vulnerability in AmaderCode Lab Dropshipping & Affiliation with Amazon.This issue affects Dropshipping & Affiliation with Amazon: from n/a through 2.1.2...
CVE-2023-43662
ShokoServer is a media server which specializes in organizing anime. In affected versions the /api/Image/WithPath endpoint is accessible without authentication and is supposed to return default server images. The endpoint accepts the parameter serverImagePath, which is not sanitized in any way...