Lucene search
+L

9974 matches found

CNNVD
CNNVD
added 2023/12/29 12:0 a.m.8 views

WordPress Plugin Active Products Tables for WooCommerce. professional products tables for WooCommerce store Code Issues Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

10CVSS6.3AI score0.00651EPSS
SaveExploits0References2
Rapid7 Blog
Rapid7 Blog
added 2023/12/28 4:0 p.m.10 views

Mastering Industrial Cybersecurity: The Significance of Combining Vulnerability Management with Detection and Response

Written by Elad Ben-Meir, CEO SCADAfence, a Honeywell company. In today's digital era, where industries are increasingly reliant on advanced technologies, safeguarding critical infrastructure against cyber threats has become paramount. The convergence of operational technology OT and information...

6.7AI score
SaveExploits0
Rapid7 Blog
Rapid7 Blog
added 2023/12/28 4:0 p.m.30 views

Mastering Industrial Cybersecurity: The Significance of Combining Vulnerability Management with Detection and Response

Written by Elad Ben-Meir, CEO SCADAfence, a Honeywell company. In today's digital era, where industries are increasingly reliant on advanced technologies, safeguarding critical infrastructure against cyber threats has become paramount. The convergence of operational technology OT and information...

7.1AI score
SaveExploits0
CNNVD
CNNVD
added 2023/12/28 12:0 a.m.10 views

Client Details System SQL Injection Vulnerability

Client Details System is a management platform. A SQL injection vulnerability exists in Client Details System. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

9.8CVSS7.7AI score0.00644EPSS
SaveExploits1References2
NVD
NVD
added 2023/12/27 6:15 p.m.28 views

CVE-2023-51700

Unofficial Mobile BankID Integration for WordPress lets users employ Mobile BankID to authenticate themselves on your WordPress site. Prior to 1.0.1, WP-Mobile-BankID-Integration is affected by a vulnerability classified as a Deserialization of Untrusted Data vulnerability, specifically impacting...

9.8CVSS0.00546EPSS
SaveExploits0References2
Prion
Prion
added 2023/12/27 6:15 p.m.15 views

Deserialization of untrusted data

Unofficial Mobile BankID Integration for WordPress lets users employ Mobile BankID to authenticate themselves on your WordPress site. Prior to 1.0.1, WP-Mobile-BankID-Integration is affected by a vulnerability classified as a Deserialization of Untrusted Data vulnerability, specifically impacting...

7.5CVSS7.8AI score0.00546EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/12/27 5:35 p.m.29 views

CVE-2023-51700 WP-Mobile-BankID-Integration WordPress Database Deserialization: Potential for Object Injection

Unofficial Mobile BankID Integration for WordPress lets users employ Mobile BankID to authenticate themselves on your WordPress site. Prior to 1.0.1, WP-Mobile-BankID-Integration is affected by a vulnerability classified as a Deserialization of Untrusted Data vulnerability, specifically impacting...

6.4CVSS9.2AI score0.00546EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2023/12/27 11:30 a.m.68 views

BestEdrOfTheMarket - Little AV/EDR Bypassing Lab For Training And Learning Purposes

Little AV/EDR Evasion Lab for training & learning purposes. ️ under construction..​ | | | | | | \ / \ / | | | | | \ / / | | | | | | | | | | | | | | | | | | ' \ / \ | | | /\ \ | | || || | | || | | | | | | | | / |/||/| ||/|| \ /|| || || ||| | / | | | | | | |/| |/ | '| |/ / \ | | | | | | | |...

7.6AI score
SaveExploits0References2
Patchstack
Patchstack
added 2023/12/27 12:0 a.m.12 views

WordPress Database Cleaner Plugin <= 0.9.8 is vulnerable to Sensitive Data Exposure

Software Database Cleaner Type Plugin Vulnerable versions = 0.9.8 Fixed in 0.9.9 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2023-51508 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID c44776f4b131 Credits Joshua...

7.5CVSS6.5AI score0.0048EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/12/26 7:15 p.m.8 views

CVE-2023-5203

The WP Sessions Time Monitoring Full Automatic WordPress plugin before 1.0.9 does not sanitize the request URL or query parameters before using them in an SQL query, allowing unauthenticated attackers to extract sensitive data from the database via blind time based SQL injection techniques, or in...

7.5CVSS5.8AI score0.02221EPSS
SaveExploits2References1
CVE
CVE
added 2023/12/26 6:33 p.m.62 views

CVE-2023-5203

CVE-2023-5203 affects WP Sessions Time Monitoring Full Automatic WordPress plugin prior to 1.0.9. The vulnerability stems from not sanitizing the request URL or query parameters before they are used in an SQL query, enabling unauthenticated attackers to extract data via blind time-based SQL injec...

7.5CVSS7.9AI score0.02221EPSS
SaveExploits2References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/26 12:0 a.m.8 views

The vulnerability of the Zabbix universal monitoring system, related to the lack of measures taken to protect the website structure, allows attackers to compromise data integrity.

The vulnerability of the Zabbix universal monitoring system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

6.4CVSS7AI score0.32304EPSS
SaveExploits2References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/12/26 12:0 a.m.10 views

The vulnerability of the Zabbix universal monitoring system, related to the lack of measures taken to protect the website structure, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the Zabbix universal monitoring system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity...

6.4CVSS6.4AI score0.00566EPSS
SaveExploits0References9Affected Software3
CNNVD
CNNVD
added 2023/12/26 12:0 a.m.7 views

WordPress plugin WP Sessions Time Monitoring Full Automatic Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.5CVSS7.2AI score0.02221EPSS
SaveExploits2References2
BDU FSTEC
BDU FSTEC
added 2023/12/26 12:0 a.m.15 views

The components of the Zabbix monitoring system are vulnerable. This universal monitoring system allows attackers to access confidential data and compromise its integrity.

The vulnerability of various components of the Zabbix monitoring system’s universal architecture is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity...

5.5CVSS5.9AI score0.00556EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/12/26 12:0 a.m.11 views

The vulnerability of the Zabbix universal monitoring system, related to the use of files and directories accessible to external parties, allows a intruder to gain access to confidential data.

The vulnerability of the Zabbix universal monitoring system lies in the use of files and directories accessible from external parties. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

7.8CVSS7.2AI score0.01262EPSS
SaveExploits0References12Affected Software5
CNVD
CNVD
added 2023/12/25 12:0 a.m.9 views

Voltronic Power ViewPower Remote Code Execution Vulnerability (CNVD-2025-2160197)

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. A remote code execution vulnerability exists in Voltronic Power ViewPower Pro, which can be exploited by an attacker to execute code in the context of LOCAL SERVICE...

9.8CVSS9.8AI score0.01603EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/12/25 12:0 a.m.5 views

Voltronic Power ViewPower Remote Code Execution Vulnerability (CNVD-2025-2159406)

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. A remote code execution vulnerability exists in Voltronic Power ViewPower, which can be exploited by an attacker to execute code in the SYSTEM context...

9.8CVSS9.8AI score0.01483EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/12/25 12:0 a.m.3 views

Voltronic Power ViewPower Remote Code Execution Vulnerability (CNVD-2025-2159308)

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. Voltronic Power ViewPower suffers from a remote code execution vulnerability that stems from a specific flaw in the LinuxMonitorConsole class, which can be exploited by an attacker to execute co...

9.8CVSS9.7AI score0.01483EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/12/25 12:0 a.m.7 views

Voltronic Power ViewPower Remote Code Execution Vulnerability (CNVD-2025-2159209)

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. A remote code execution vulnerability exists in Voltronic Power ViewPower, which can be exploited by an attacker to execute code in the context of the current user...

9.8CVSS9.8AI score0.01483EPSS
SaveExploits0References1
Rows per page
Query Builder