CVE-2023-4213

CVE-2023-4213 concerns the WordPress plugin Simplr Registration Form Plus+ (up to version 2.4.5). The vulnerability is an Insecure Direct Object Reference (IDOR) that lets an authenticated user with subscriber-level permissions or higher access objects controlled by the user, bypass authorization...

CVE-2023-4213 Simplr Registration Form Plus+ <= 2.4.5 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change

The Simplr Registration Form Plus+ plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 2.4.5. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resources. This makes it...

PT-2023-30643

Name of the Vulnerable Software and Affected Versions gRPC versions 1.23 and later Description The issue is related to a lack of error handling in the TCP server in Google's gRPC, which allows an attacker to cause a denial of service by initiating a significant number of connections with the...

WordPress Simplr Registration Form Plus+ Plugin <= 2.4.5 is vulnerable to Insecure Direct Object References (IDOR)

Software Simplr Registration Form Plus+ Type Plugin Vulnerable versions = 2.4.5 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2023-4213 Patch priority Low CVSS severity Low 8.8 Developer Claim ownership PSID 210dacee25d7 Credits...

WordPress plugin Simplr Registration Form Plus+ security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

The vulnerability of the Zoho ManageEngine ADManager Plus software for managing Active Directory services stems from deficiencies in access control. This allows attackers to execute arbitrary commands with superuser privileges.

The vulnerability of the Zoho ManageEngine ADManager Plus software for managing Active Directory services is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with superuser privileges remotely...

CVE-2023-2071

Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve remote code executed via crafted malicious packets. The device has the functionality, through a CIP class, to execute exported functions...

CVE-2023-2071

CVE-2023-2071 affects Rockwell Automation FactoryTalk View Machine Edition on PanelView Plus. It describes improper input validation that lets an unauthenticated attacker achieve remote code execution by sending crafted packets; the device can execute exported functions via a CIP class, and an at...

Microsoft Windows GDI Security Vulnerability

Microsoft Windows GDI+ is a graphical device interface for the Windows operating system from Microsoft USA. The software is part of the .NET Framework and is responsible for drawing graphical images and displaying information on screens and printers. A security vulnerability exists in Microsoft...

GCC Security Vulnerabilities

GCC is a collection of GNU compilers. It is primarily used to compile the C and C++ languages. A security vulnerability exists in GCC, which stems from the presence of a buffer overflow that could lead to an uncontrolled loss of availability or further compromise confidentiality or integrity...

Rockwell Automation PanelView Plus 代码问题漏洞

Rockwell Automation PanelView Plus is a family of Human Machine Interface HMI products from Rockwell Automation. These HMI devices are designed to integrate with industrial automation systems to provide operators with an intuitive interface for controlling and monitoring production...

CVE-2023-38743

Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine...

CVE-2023-38743

Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine...

Command injection

Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine...

CVE-2023-30058

novel-plus 3.6.2 is vulnerable to SQL Injection...

CVE-2023-30058

novel-plus 3.6.2 is vulnerable to SQL Injection...

Sql injection

novel-plus 3.6.2 is vulnerable to SQL Injection...

CVE-2023-30058

novel-plus 3.6.2 is vulnerable to SQL Injection...

CVE-2023-38743

CVE-2023-38743 affects ManageEngine ADManager Plus prior to Build 7200. A command-injection leads to remote code execution via installServiceWithCredentials due to improper validation of a user-supplied string used in a system call. Auth is required per ZDI advisory. Affected versions: before Bui...

PT-2023-22522 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: novel-plus version 3.6.2 Description: The issue is related to SQL Injection. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was...