CVE-2024-9925 SQL injection in QPLANT by TAI Smart Factory

SQL injection vulnerability in TAI Smart Factory's QPLANT SF version 1.0. Exploitation of this vulnerability could allow a remote attacker to retrieve all database information by sending a specially crafted SQL query to the ‘email’ parameter on the ‘RequestPasswordChange’ endpoint...

CVE-2024-9895

CVE-2024-9895 affects the WordPress plugin Smart Online Order for Clover (versions

WordPress plugin Smart Online Order for Clover 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

PT-2024-39921 · WordPress · Smart Online Order For Clover

Name of the Vulnerable Software and Affected Versions: Smart Online Order for Clover plugin for WordPress versions up to, and including, 1.5.7 Description: The issue is related to Stored Cross-Site Scripting via the plugin's moo receipt link shortcode due to insufficient input sanitization and...

WordPress Smart Online Order for Clover Plugin <= 1.5.7 is vulnerable to Cross Site Scripting (XSS)

Software Smart Online Order for Clover Type Plugin Vulnerable versions = 1.5.7 Fixed in 1.5.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9895 Patch priority Low CVSS severity Low 6.5 Developer Zaytech PSID 130bf1a9af2d Credits Peter Thaleikis...

WordPress Smart Online Order for Clover Plugin <= 1.5.7 is vulnerable to Cross Site Scripting (XSS)

Software Smart Online Order for Clover Type Plugin Vulnerable versions = 1.5.7 Fixed in 1.5.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8787 Patch priority Medium CVSS severity Medium 7.1 Developer Zaytech PSID ef2985b5f2b9 Credits vgo0 Require...

WordPress plugin Smart Online Order for Clover 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress Smart Blocks plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Smart Blocks versions = 2.0...

WordPress Smart Blocks Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software Smart Blocks Type Plugin Vulnerable versions = 2.0 Fixed in 2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49270 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID fc8a42cfb8ae Credits João Pedro S Alcântara Kinorth Required...

PT-2024-38784 · Schneider Electric · Evlink Home Smart/Charge Firmware

Name of the Vulnerable Software and Affected Versions: Schneider Electric EVlink Home Smart/Charge Firmware affected versions not specified Description: A Cleartext Storage of Sensitive Information issue exists, exposing test credentials in the firmware binary. This could lead to data exposure. T...

Schneider Electric EVlink Home Smart和Schneider Charge 安全漏洞

Schneider Electric EVlink Home Smart and Schneider Charge are both products of Schneider Electric, a French company.Schneider Electric EVlink Home Smart is a smart home electric vehicle charger. The Schneider Charge is a smart electric vehicle charging station for the home designed with ease of...

OESA-2024-2245 opensc security update

OpenSC provides a set of libraries and utilities to work with smart cards. Its main focus is on cards that support cryptographic operations, and facilitate their use in security applications such as authentication, mail encryption and digital signatures. OpenSC implements the standard APIs to sma...

MercadoLibre: Es posible poder navegar a cualquier pagina en Point Smart application

The vulnerability allowed users to navigate outside the intended application environment through a link in the Point Smart application...

Wo-smart WoFit 安全漏洞

Wo-smart WoFit is an application from Wo-smart that provides data logging, tracking, and statistics for users' health and exercise fitness activities. A security vulnerability exists in Wo-smart WoFit version v.7.2.3, which stems from an issue that allows remote attackers to obtain sensitive...

Auto-Identification Smart Glasses

Two students have created a demo of a smart-glasses app that performs automatic facial recognition and then information lookups. Kind of obvious--something similar was done in 2011--but the sort of creepy demo that gets attention. News article...

CVE-2024-46539

Insecure permissions in the Bluetooth Low Energy BLE component of Fire-Boltt Artillery Smart Watch NJ-R6E-10.3 allow attackers to cause a Denial of Service DoS...

WordPress Smart Post Show plugin <= 3.0.0 - Authenticated (Editor+) Stored Cross-Site Scripting via Pagination Color vulnerability

Authenticated Editor+ Stored Cross-Site Scripting via Pagination Color vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Post Grid, Post Carousel, & List Category Posts – by Smart Post Show versions = 3.0.0...

CVE-2024-46539

Insecure permissions in the Bluetooth Low Energy BLE component of Fire-Boltt Artillery Smart Watch NJ-R6E-10.3 allow attackers to cause a Denial of Service DoS...

CVE-2024-46539

Insecure permissions in the Bluetooth Low Energy BLE component of Fire-Boltt Artillery Smart Watch NJ-R6E-10.3 allow attackers to cause a Denial of Service DoS...

CVE-2024-46539

CVE-2024-46539 maps to insecure permissions in the BLE component of Fire-Boltt Artillery Smart Watch NJ-R6E-10.3, enabling a nearby attacker to trigger a DoS due to BLE privilege issues. Root cause: insecure BLE permissions; impact: DoS with adjacent attack vector. A temporary workaround mentione...