4046 matches found
CVE-2024-50930
CVE-2024-50930 affects Silicon Labs Z-Wave Series 500, specifically version 6.84.0. The issue allows attackers to execute arbitrary code. The available connected docs confirm the product/version and the impact but do not provide root-cause details or exploit specifics. Mitigation guidance in PT S...
CVE-2024-54933
Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/deletecontent.php...
WordPress plugin WP Quick Post Duplicator 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2024-54933
Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/deletecontent.php...
PT-2024-12263 · WordPress · Wp Quick Post Duplicator
Name of the Vulnerable Software and Affected Versions: WP Quick Post Duplicator versions 2.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For WP Quick Po...
PT-2024-36453 · Unknown · Kashipara E-Learning Management System
Name of the Vulnerable Software and Affected Versions: kashipara E-learning Management System version 1.0 Description: A Stored Cross-Site Scripting XSS issue exists in the /send message teacher to student.php file, allowing remote attackers to execute arbitrary scripts via the my message...
CVE-2024-54927
Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/deleteusers.php...
PT-2024-35916 · Unknown · Futurio Extra
Name of the Vulnerable Software and Affected Versions: Futurio Extra versions prior to 2.0.14 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This enables attackers to inject malicious scripts into...
WordPress Verowa Connect plugin <= 3.0.1 - Unauthenticated SQL Injection vulnerability
Unauthenticated SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin Verowa Connect versions = 3.0.1...
CVE-2024-52676
Itsourcecode Online Discussion Forum Project v.1.0.0 is vulnerable to Cross Site Scripting XSS via /bccforum/members/home.php...
WordPress Getwid – Gutenberg Blocks plugin <= 2.0.11 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library vulnerability discovered by Webbernaut in WordPress Plugin Getwid versions = 2.0.11...
Async Http Client 授权问题漏洞
Async Http Client is AsyncHttpClient open source asynchronous Http and WebSocket client library for Java. An authorization issue vulnerability exists in Async Http Client version 3.0.0, which stems from an automatically enabled and self-managed CookieStore handling mechanism that can lead to...
PT-2024-35842 · Unknown · Rohit Harsh Fence Url
Name of the Vulnerable Software and Affected Versions: Rohit Harsh Fence URL versions n/a through 2.0.0 Description: The issue is related to improper neutralization of input during web page generation, leading to a Stored Cross-Site Scripting XSS vulnerability. This allows for Stored XSS attacks...
AXIS OS 安全漏洞
AXIS OS is an edge device operating system from Axis Sweden. A security vulnerability exists in AXIS OS versions 9.80 through 12.0, which stems from vulnerability to a competitive condition attack that can be exploited by an attacker to block access to the override configuration page in the Axis...
WordPress Lazy load videos and sticky control plugin <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Lazy load videos and sticky control versions = 3.0.0...
ModbusMechanic 安全漏洞
ModbusMechanic is a free and open source Modbus TCP and RTU master-slave simulator from Matt's personal developer. A security vulnerability exists in ModbusMechanic 3.0 and earlier versions, which originates from an attacker executing arbitrary code with the help of uploading a carefully crafted...
Automated Logic WebCtrl 代码问题漏洞
Automated Logic WebCtrl is a server for Web-based building automation systems from Automated Logic, Inc. A code issue vulnerability exists in Automated Logic WebCtrl version 7.0 that stems from an unrestricted, dangerous type of file upload that could lead to an unauthenticated user executing...
WordPress plugin UserPlus 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-10715 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions prior to 8.0 Description: The issue is related to a possible out-of-bounds read due to an integer overflow in the bta hd set report act function of bta hd act.cc. This could lead to remote information disclosure in the...
