7341 matches found
CVE-2025-24663
CVE-2025-24663 : SQL Injection in WordPress plugin Simple Download Monitor (versions up to 3.9.25). Description and Red Hat/Redirection sources confirm improper neutralization of SQL commands enabling blind SQL injection. Base impact is high (CVSS 3.1: 7.6; Network access, high confidentiality im...
CVE-2025-24663 WordPress Simple Download Monitor plugin <= 3.9.25 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mra13 Simple Download Monitor simple-download-monitor allows Blind SQL Injection.This issue affects Simple Download Monitor: from n/a through = 3.9.25...
CVE-2025-24663 WordPress Simple Download Monitor plugin <= 3.9.25 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mra13 Simple Download Monitor simple-download-monitor allows Blind SQL Injection.This issue affects Simple Download Monitor: from n/a through = 3.9.25...
WordPress Simple Download Monitor plugin <= 3.9.25 - SQL Injection vulnerability
SQL Injection vulnerability discovered by shinobu in WordPress Plugin Simple Download Monitor versions = 3.9.25...
WordPress plugin Simple Download Monitor SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...
PT-2025-5484 · Unknown · Simple Download Monitor
Name of the Vulnerable Software and Affected Versions: Simple Download Monitor versions 3.9.25 and earlier Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows for Blind SQL Injection,...
SUSE CVE-2025-21656
In the Linux kernel, the following vulnerability has been resolved: hwmon: drivetemp Fix driver producing garbage data when SCSI errors occur scsiexecutecmd function can return both negative linux codes and positive scsicmnd result field error codes. Currently the driver just passes error codes o...
DEBIAN-CVE-2025-21656
In the Linux kernel, the following vulnerability has been resolved: hwmon: drivetemp Fix driver producing garbage data when SCSI errors occur scsiexecutecmd function can return both negative linux codes and positive scsicmnd result field error codes. Currently the driver just passes error codes o...
UBUNTU-CVE-2025-21656
In the Linux kernel, the following vulnerability has been resolved: hwmon: drivetemp Fix driver producing garbage data when SCSI errors occur scsiexecutecmd function can return both negative linux codes and positive scsicmnd result field error codes. Currently the driver just passes error codes o...
Malicious code in popup-monitor (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf12287bc6bc8081a72eebd8ef2caea2807d4875c6a3a4f65648d9e61125ef4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-301 Malicious code in popup-monitor (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf12287bc6bc8081a72eebd8ef2caea2807d4875c6a3a4f65648d9e61125ef4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-21606 Local Privilege Escalation via Exposed XPC Method Due to Client Verification Failure in stats
stats is a macOS system monitor in for the menu bar. The Stats application is vulnerable to a local privilege escalation due to the insecure implementation of its XPC service. The application registers a Mach service under the name eu.exelban.Stats.SMC.Helper. The associated binary,...
CVE-2025-21606 Local Privilege Escalation via Exposed XPC Method Due to Client Verification Failure in stats
stats is a macOS system monitor in for the menu bar. The Stats application is vulnerable to a local privilege escalation due to the insecure implementation of its XPC service. The application registers a Mach service under the name eu.exelban.Stats.SMC.Helper. The associated binary,...
Stats 数据伪造问题漏洞
Stats is a menu-bar macOS system monitor by Serhiy Mytrovtsiy Individual Developer. Stats suffers from a Data Forgery Issue vulnerability that stems from the shouldAcceptNewConnection function unconditionally returning YES, allowing any XPC client to connect to the service without any form of...
Selesta Visual Access Manager SQL Injection Vulnerability (CNVD-2025-22315)
Selesta Visual Access Manager is a visual access manager from Selesta. A SQL injection vulnerability exists in Selesta Visual Access Manager, which can be exploited by an attacker to perform SQL injection in multiple parameters of /monitor/snormalizedtrans.php...
Selesta Visual Access Manager Cross-Site Scripting Vulnerability (CNVD-2025-22314)
Selesta Visual Access Manager is a visual access manager from Selesta. A cross-site scripting vulnerability exists in Selesta Visual Access Manager, which stems from the lack of effective filtering and escaping of user-supplied data in smonitormap.php, for which no detailed vulnerability details...
CVE-2023-42247
Selesta Visual Access Manager 4.42.2 is vulnerable to Cross Site Scripting XSS via monitor/smonitormap.php...
CVE-2023-42247
Selesta Visual Access Manager 4.42.2 is vulnerable to Cross Site Scripting XSS via monitor/smonitormap.php...