2891 matches found
eSoft Planner 安全漏洞
eSoft Planner is a scheduling software for managing sports facilities from eSoft Planner, Inc. A security vulnerability exists in eSoft Planner version 3.24.08271-USA that stems from vulnerability to a cross-site scripting attack, which allows an attacker to execute arbitrary code in the context ...
CVE-2024-42450
The Versa Director uses PostgreSQL Postgres to store operational and configuration data. It is also needed for High Availability function of the Versa Director. The default configuration has a common password across all instances of Versa Director. By default, Versa Director configures Postgres t...
CVE-2024-52428
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Scripteo Ads Booster by Ads Pro allows PHP Local File Inclusion.This issue affects Ads Booster by Ads Pro: from n/a through 1.12...
CVE-2024-9693 Incorrect Authorization in GitLab
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.0 prior to 17.3.7, starting from 17.4 prior to 17.4.4, and starting from 17.5 prior to 17.5.2, which could have allowed unauthorized access to the Kubernetes agent in a cluster under specific configurations...
CVE-2024-49558
Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2024-49558
Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CGA-9969-64XQ-6X56
Bulletin has no description...
CGA-V9C4-5W2V-W84G
Bulletin has no description...
CGA-X8VR-8C6G-79X7
Bulletin has no description...
PT-2024-21933 · Wasm3 · Wasm3
Name of the Vulnerable Software and Affected Versions: wasm3 version 139076a Description: The issue is related to a Denial of Service DoS attack. This means an attacker could potentially cause the service to become unavailable by overwhelming it with traffic. Recommendations: For wasm3 version...
PT-2024-16502 · Unknown · Code-Projects E-Health Care System
Name of the Vulnerable Software and Affected Versions: code-projects E-Health Care System version 1.0 Description: A critical issue has been found in the file /Admin/adminlogin.php, where the manipulation of the email and admin pswd arguments as part of a String leads to sql injection. The attack...
CVE-2024-47640 WordPress WP ERP plugin <= 1.13.2 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weDevs WP ERP erp allows Reflected XSS.This issue affects WP ERP: from n/a through = 1.13.2...
PHPGurukul Online DJ Booking Management System 安全漏洞
PHPGurukul Online DJ Booking Management System is an online DJ booking management system from PHPGurukul. A security vulnerability exists in PHPGurukul Online DJ Booking Management System v1.0, which originates from a reflected cross-site scripting vulnerability in the searchdata parameter of the...
Google Chrome < 130.0.6723.92 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 130.0.6723.92. It is, therefore, affected by multiple vulnerabilities as referenced in the 202410stable-channel-update-for-desktop29 advisory. - Out of bounds write in Dawn. CVE-2024-10487 - Use after free in WebRTC...
CVE-2024-48624
In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting XSS vulnerability...
Vivo Fibra Askey RTF8225VW Command Execution
--- Exploit 1 Documentation on the Vivo Fibra Modem Exploit I discovered an exploit that allows access to the sh shell on the Vivo Fibra modem. This method essentially involves terminating the aspsh shell and invoking sh using the output of cat /dev/null. Using the pipe | is crucial for this...
CGA-V725-J33C-2P2X
Bulletin has no description...
CGA-9X3Q-V2V6-GFP3
Bulletin has no description...
PT-2024-12112 · Unknown · Cs-Cart Multivendor
Name of the Vulnerable Software and Affected Versions: CS-Cart MultiVendor version 4.16.1 Description: A Directory Traversal vulnerability allows remote attackers to run arbitrary code via a crafted zip file when installing a new add-on. This issue enables attackers to potentially execute malicio...