13097 matches found
CVE-2024-32342
A cross-site scripting XSS vulnerability in the Create Page of Boid CMS v2.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Permalink parameter...
CVE-2024-32341
Multiple cross-site scripting XSS vulnerabilities in the Home page of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into any of the parameters...
CVE-2024-21061 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2024-21050 vulnerabilities
Vulnerabilities for packages: mysql...
Oracle Critical Patch Update Advisory - April 2024
A Critical Patch Update is a collection of patches for multiple security vulnerabilities. These patches address vulnerabilities in Oracle code and in third party components included in Oracle products. These patches are usually cumulative, but each advisory describes only the security patches add...
Savsoft Quiz v6.0 Enterprise - Stored XSS
Exploit Title: Savsoft Quiz v6.0 Enterprise - Persistent Cross-Site Scripting Date: 2024-01-03 Exploit Author: Eren Sen Vendor: SAVSOFT QUIZ Vendor Homepage: https://savsoftquiz.com Software Link: https://savsoftquiz.com/web/index.php/online-demo/ Version: 6.0 CVE-ID: N/A Tested on: Kali Linux /...
BELL-CVE-2024-26815
Bulletin has no description...
CVE-2024-3098 Prompt Injection leading to Arbitrary Code Execution in run-llama/llama_index
A vulnerability was identified in the executils class of the llamaindex package, specifically within the safeeval function, allowing for prompt injection leading to arbitrary code execution. This issue arises due to insufficient validation of input, which can be exploited to bypass method...
BELL-CVE-2024-21409
Bulletin has no description...
MAL-2024-1235 Malicious code in @lbnqduy11805/special-palm-tree (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6778e7c9334a7e067c8f10c134b7e24480404907e9ca6d5d4b1be43c81c8c563 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1252 Malicious code in test-npm-lifecycle (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99c322c4be83c0549ab734e2734189fe33df9d7c33db8b463fc1826a47bcb2dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
DLA-3786-1 pillow - security update
Bulletin has no description...
CVE-2023-52070
JFreeChart v1.5.4 was discovered to be vulnerable to ArrayIndexOutOfBounds via the 'setSeriesNeedleint index, int type' method. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have bee...
CVE-2022-47894 Apache Zeppelin SAP: connecting to a malicious SAP server allowed it to perform XXE
Improper Input Validation vulnerability in Apache Zeppelin SAP.This issue affects Apache Zeppelin SAP: from 0.8.0 before 0.11.0. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance t...
Navigating SQL Injection Vulnerabilities with DAST for Modern AppSec
The digital landscape is continuously evolving, and with it, the strategies for safeguarding our applications against vulnerabilities. In a recent advisory, CISA & the FBI have highlighted the critical importance of conducting thorough reviews of code and supply chains. The aim is to unearth any...
GHSA-4V52-7Q2X-V4XJ vulnerabilities
Vulnerabilities for packages: kdash, topgrade...
BELL-CVE-2024-26807
Bulletin has no description...
BELL-CVE-2024-26789
Bulletin has no description...