jira-mobile-ssrf-exploit

CVE-2022-26135 - Full-Read Server Side Request Forgery في Mobile Plugin لـ Jira Data Center و Server حول Assetnote تقوم Assetnote تلقائيًا بتعيين أصولك الخارجية ومراقبتها بحثًا عن التغييرات والمشكلات الأمنية للمساعدة في منع الاختراقات الخطيرة. تم إجراء هذا البحث بواسطة فريق أبحاث الأمن في...

CVE-2019-25776

Weaver E-cology contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by submitting malicious input through the userIdentifiers GET parameter in the mobile plugin endpoint. Attackers can bypass space-based filter controls by wrapping...

EUVD-2019-20203

Weaver E-cology contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by submitting malicious input through the userIdentifiers GET parameter in the mobile plugin endpoint. Attackers can bypass space-based filter controls by wrapping...

CVE-2019-25776 Weaver E-cology SQL Injection via SyncUserInfo.jsp

Weaver E-cology contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by submitting malicious input through the userIdentifiers GET parameter in the mobile plugin endpoint. Attackers can bypass space-based filter controls by wrapping...

CVE-2019-25776 Weaver E-cology SQL Injection via SyncUserInfo.jsp

Weaver E-cology contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by submitting malicious input through the userIdentifiers GET parameter in the mobile plugin endpoint. Attackers can bypass space-based filter controls by wrapping...

CVE-2019-25776: Improper Neutralization of Special Elements used in an SQL Command

Weaver E-cology contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by submitting malicious input through the userIdentifiers GET parameter in the mobile plugin endpoint. Attackers can bypass space-based filter controls by wrapping...

PT-2026-95597

Name of the Vulnerable Software and Affected Versions Weaver E-cology affected versions not specified Description An unauthenticated SQL injection allows remote attackers to execute arbitrary SQL queries. This occurs when malicious input is submitted through the userIdentifiers GET parameter in t...

CVE-2025-11454

The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress is vulnerable to SQL Injection via the eosscfmduplicatepostasdraft function in all versions up to, and including, 0.5.5 due to insufficient escaping on the user supplied parameter and lack of...

EUVD-2025-124905

The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress is vulnerable to SQL Injection via the eosscfmduplicatepostasdraft function in all versions up to, and including, 0.5.5 due to insufficient escaping on the user supplied parameter and lack of...

PT-2025-46647

Name of the Vulnerable Software and Affected Versions The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress versions through 0.5.5 Description The plugin is susceptible to SQL Injection due to insufficient escaping of user-supplied parameters and...

EUVD-2023-27952

Malicious code in bioql PyPI...

EUVD-2022-3610

Malicious code in bioql PyPI...

EUVD-2023-32552

Malicious code in bioql PyPI...

Malicious code in reddit-mobile-plugin-metrics (npm)

The package reddit-mobile-plugin-metrics was found to contain malicious code...

MAL-2025-31923 Malicious code in reddit-mobile-plugin-metrics (npm)

The package reddit-mobile-plugin-metrics was found to contain malicious code...

MAL-2025-31922 Malicious code in reddit-mobile-plugin-ads (npm)

The package reddit-mobile-plugin-ads was found to contain malicious code...

CVE-2023-23869

Cross-Site Request Forgery CSRF vulnerability in Amit Agarwal Google XML Sitemap for Mobile plugin = 1.6.1 versions...

CVE-2023-37391

Cross-Site Request Forgery CSRF vulnerability in WPMobilePack.Com WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps plugin = 3.4.1 versions...

WordPress plugin Specific Content For Mobile 安全漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPre...

CVE-2025-26563 WordPress Rocket Mobile Plugin <= 0.4.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Mobile allows Reflected XSS. This issue affects Mobile: from n/a through 1.3.3...