Lucene search
+L

105 matches found

Kitploit
Kitploit
•added 2026/11/14 1:28 p.m.•28 views

CVE-2022-24992

CVE-2022-24992 CVE-2022–24992 This post is about CVE-2022–24992 my first CVE, which refers to a vulnerability in QRCDR's widely used QR-Code generator script. more info Best, n0lsec...

7.5CVSS7.5AI score0.01527EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/11/12 8:27 p.m.•31 views

WordPress-Flex-QR-Code-Generator---CVE-2025-10041

CVE-2025-10041: Arbitrary File Upload Vulnerability Analysis in the Flex QR Code Generator Plugin 1. Vulnerability Overview Plugin Name : Flex QR Code Generator Affected Versions : ≤ 1.2.5 all versions Vulnerability Type : Arbitrary File Upload → Remote Code Execution RCE Exploitation Conditions ...

9.8CVSS6.4AI score0.0092EPSS
SaveExploits3
NVD
NVD
•added 2026/10/29 4:18 p.m.•14 views

CVE-2026-116867

Contributor PHP Object Injection in Dynamic QR Code generator = 1.0.1 versions...

8.8CVSS0.00374EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/29 3:24 p.m.•19 views

CVE-2026-116867

The WordPress Dynamic QR Code – generator plugin versions

8.8CVSS5.8AI score0.00374EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/29 3:24 p.m.•13 views

EUVD-2026-112987

Contributor PHP Object Injection in Dynamic QR Code generator = 1.0.1 versions...

8.8CVSS5.8AI score0.00374EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/29 3:24 p.m.•30 views

CVE-2026-116867 WordPress Dynamic QR Code – generator plugin <= 1.0.1 - PHP Object Injection vulnerability

Contributor PHP Object Injection in Dynamic QR Code generator = 1.0.1 versions...

8.8CVSS0.00374EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/29 3:24 p.m.•13 views

CVE-2026-116867 WordPress Dynamic QR Code – generator plugin <= 1.0.1 - PHP Object Injection vulnerability

Contributor PHP Object Injection in Dynamic QR Code generator = 1.0.1 versions...

8.8CVSS5.8AI score0.00374EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/29 12:00 a.m.•10 views

CVE-2026-116867: sosidee Dynamic QR Code &#8211; generator: Contributor PHP Object Injection in Dynamic QR Code &#8211; generator <= 1.0.1 versions.

Contributor PHP Object Injection in Dynamic QR Code – generator = 1.0.1 versions...

8.8CVSS5.9AI score0.00374EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/10/28 10:19 a.m.•14 views

WordPress Dynamic QR Code – generator plugin <= 1.0.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Dynamic QR Code generator versions = 1.0.1...

8.8CVSS5.9AI score0.00374EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/10/28 12:00 a.m.•12 views

PT-2026-132244

Name of the Vulnerable Software and Affected Versions Dynamic QR Code – generator versions prior to 1.0.2 Description The plugin is susceptible to PHP Object Injection, a condition where an application deserializes untrusted input, potentially allowing an attacker to manipulate the application...

8.8CVSS6.2AI score0.00374EPSS
SaveExploits0References5
NVD
NVD
•added 2026/10/02 4:16 p.m.•20 views

CVE-2026-51907

In TaskingAI v0.3.0 in the QR Code Generator plugin savebase64image function, a path traversal vulnerability allows attackers to write image files to arbitrary locations on the server filesystem by manipulating the projectid parameter...

8.1CVSS0.00388EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/02 12:00 a.m.•19 views

CVE-2026-51907

In TaskingAI v0.3.0 in the QR Code Generator plugin savebase64image function, a path traversal vulnerability allows attackers to write image files to arbitrary locations on the server filesystem by manipulating the projectid parameter...

6AI score0.00388EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/02 12:00 a.m.•49 views

CVE-2026-51907

A path traversal vulnerability exists in TaskingAI v0.3.0 within the QR Code Generator plugin . Specifically, the save_base64_image function fails to properly sanitize the project_id parameter, allowing an attacker to write image files to arbitrary locations on the server filesystem. While exploi...

8.1CVSS6AI score0.00388EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/02 12:00 a.m.•19 views

PT-2026-104367

In TaskingAI v0.3.0 in the QR Code Generator plugin save base64 image function, a path traversal vulnerability allows attackers to write image files to arbitrary locations on the server filesystem by manipulating the project id parameter...

6AI score0.00388EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/02 12:00 a.m.•28 views

EUVD-2026-91700

In TaskingAI v0.3.0 in the QR Code Generator plugin savebase64image function, a path traversal vulnerability allows attackers to write image files to arbitrary locations on the server filesystem by manipulating the projectid parameter...

8.1CVSS6AI score0.00388EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/02 12:00 a.m.•13 views

CVE-2026-51907: Improper Limitation of a Pathname to a Restricted Directory

In TaskingAI v0.3.0 in the QR Code Generator plugin savebase64image function, a path traversal vulnerability allows attackers to write image files to arbitrary locations on the server filesystem by manipulating the projectid parameter...

8.1CVSS6AI score0.00388EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/02 12:00 a.m.•52 views

CVE-2026-51907

In TaskingAI v0.3.0 in the QR Code Generator plugin savebase64image function, a path traversal vulnerability allows attackers to write image files to arbitrary locations on the server filesystem by manipulating the projectid parameter...

0.00388EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/24 3:18 p.m.•52 views

CVE-2026-24614

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Devsbrain Flex QR Code Generator flex-qr-code-generator allows DOM-Based XSS.This issue affects Flex QR Code Generator: from n/a through = 1.2.10...

5.9CVSS5.9AI score0.00165EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/23 3:16 p.m.•27 views

CVE-2026-24614

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Devsbrain Flex QR Code Generator flex-qr-code-generator allows DOM-Based XSS.This issue affects Flex QR Code Generator: from n/a through = 1.2.10...

5.9CVSS0.00165EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/23 2:29 p.m.•14 views

CVE-2026-24614 WordPress Flex QR Code Generator plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Devsbrain Flex QR Code Generator flex-qr-code-generator allows DOM-Based XSS.This issue affects Flex QR Code Generator: from n/a through = 1.2.10...

5.9CVSS5.8AI score0.00165EPSS
SaveExploits0References1
Rows per page
Query Builder