WordPress plugin WDesignkit 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

QNAP Systems License Center 安全漏洞

QNAP Systems License Center is a tool for monitoring and managing the licenses of applications running on local devices from China's Weilian Technology QNAP Systems. A security vulnerability exists in QNAP Systems License Center version 1.9.43 and prior versions that stems from the inclusion of a...

PT-2024-36919

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue arises from the migrate to node function assuming there is at least one VMA in a MM, which is not always true. This can lead to find vma returning NULL, and subsequently, a null point...

rPGP 安全漏洞

rPGP is a pure Rust implementation of OpenPGP open sourced by rPGP. A security vulnerability exists in rPGP versions prior to 0.14.1. An attacker exploiting this vulnerability could trigger an rpgp crash by supplying specially crafted data...

RestApp Online Ordering System 输入验证错误漏洞

RestApp Online Ordering System is an online ordering system from RestApp, Inc. An input validation error vulnerability exists in RestApp Online Ordering System version 04.12.2024 and prior versions, which stems from incorrect input validation...

PT-2024-29024 · Joomla · Joomla Convert Forms

Name of the Vulnerable Software and Affected Versions: Joomla Convert Forms component versions prior to 4.4.8 Description: The issue is related to a Reflected Cross site scripting vulnerability in the Convert Forms component for Joomla. This vulnerability allows for the execution of malicious...

PT-2024-16010

Name of the Vulnerable Software and Affected Versions OpenHarmony versions 4.1.1 and prior Description The issue allows a local attacker to upgrade common permissions to root through use after free. Recommendations For OpenHarmony versions 4.1.1 and prior, at the moment, there is no information...

WordPress plugin Custom Post Type to Map Store 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2024-35301 · Unknown · Infinite Slider

Name of the Vulnerable Software and Affected Versions: Infinite Slider versions prior to 2.0.1 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows reflected XSS. This problem affects the Infinite Slid...

WordPress plugin WP Find Your Nearest 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Pixobe Cartography 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

PT-2024-24842 · Synology · Photo Station

Name of the Vulnerable Software and Affected Versions: Photo Station versions prior to 6.4.3 Description: A cross-site scripting XSS vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers who have gained user access to inject maliciou...

WordPress plugin Sky Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

QNAP Systems Photo Station 跨站脚本漏洞

QNAP Systems Photo Station is an online photo album from QNAP Systems, Inc. It is used to organize multimedia content photos and videos on Qnap Nas. A cross-site scripting vulnerability exists in QNAP Systems Photo Station prior to version 6.4.3, which stems from the inclusion of a cross-site...

WordPress plugin Taskbuilder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-35155

Name of the Vulnerable Software and Affected Versions authentik versions prior to 2024.8.5 authentik version 2024.8.5 and 2024.10.3 are not affected, but all versions prior to 2024.8.5 are vulnerable. However, the correct interpretation is that versions prior to 2024.8.5 are affected. Corrected...

PT-2024-35035 · Unknown · Imforza Wp Listings Pro

Name of the Vulnerable Software and Affected Versions: imFORZA WP Listings Pro versions prior to 3.0.15 Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability, specifically Stored XSS. This allows...

WordPress plugin TinyCode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Custom Dashboard Widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

WordPress plugin Bg Patriarchia BU 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...