CGA-9969-64XQ-6X56

Bulletin has no description...

CGA-V9C4-5W2V-W84G

Bulletin has no description...

CGA-X8VR-8C6G-79X7

Bulletin has no description...

PT-2024-21933 · Wasm3 · Wasm3

Name of the Vulnerable Software and Affected Versions: wasm3 version 139076a Description: The issue is related to a Denial of Service DoS attack. This means an attacker could potentially cause the service to become unavailable by overwhelming it with traffic. Recommendations: For wasm3 version...

PT-2024-16502 · Unknown · Code-Projects E-Health Care System

Name of the Vulnerable Software and Affected Versions: code-projects E-Health Care System version 1.0 Description: A critical issue has been found in the file /Admin/adminlogin.php, where the manipulation of the email and admin pswd arguments as part of a String leads to sql injection. The attack...

CVE-2024-47640 WordPress WP ERP plugin <= 1.13.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weDevs WP ERP erp allows Reflected XSS.This issue affects WP ERP: from n/a through = 1.13.2...

PHPGurukul Online DJ Booking Management System 安全漏洞

PHPGurukul Online DJ Booking Management System is an online DJ booking management system from PHPGurukul. A security vulnerability exists in PHPGurukul Online DJ Booking Management System v1.0, which originates from a reflected cross-site scripting vulnerability in the searchdata parameter of the...

Google Chrome < 130.0.6723.92 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 130.0.6723.92. It is, therefore, affected by multiple vulnerabilities as referenced in the 202410stable-channel-update-for-desktop29 advisory. - Out of bounds write in Dawn. CVE-2024-10487 - Use after free in WebRTC...

CVE-2024-48624

In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting XSS vulnerability...

Vivo Fibra Askey RTF8225VW Command Execution

--- Exploit 1 Documentation on the Vivo Fibra Modem Exploit I discovered an exploit that allows access to the sh shell on the Vivo Fibra modem. This method essentially involves terminating the aspsh shell and invoking sh using the output of cat /dev/null. Using the pipe | is crucial for this...

CGA-V725-J33C-2P2X

Bulletin has no description...

CGA-9X3Q-V2V6-GFP3

Bulletin has no description...

PT-2024-12112 · Unknown · Cs-Cart Multivendor

Name of the Vulnerable Software and Affected Versions: CS-Cart MultiVendor version 4.16.1 Description: A Directory Traversal vulnerability allows remote attackers to run arbitrary code via a crafted zip file when installing a new add-on. This issue enables attackers to potentially execute malicio...

CGA-JF97-R836-CQWR

Bulletin has no description...

CGA-C466-3V52-V982

Bulletin has no description...

CGA-9245-R2V4-HQQ5

Bulletin has no description...

RHSA-2016:0101 Red Hat Security Advisory: java-1.6.0-ibm security update

Bulletin has no description...

RHSA-2013:0211 Red Hat Security Advisory: rhevm 3.1.2 security and bug fix update

Bulletin has no description...

CVE-2024-8601

This vulnerability exists in TechExcel Back Office Software versions prior to 1.0.0 due to improper access controls on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter through API request URL which could lead to unauthorized acce...

PT-2024-39100 · Sourcecodester · Sourcecodester Php Crud

Name of the Vulnerable Software and Affected Versions: SourceCodester PHP CRUD version 1.0 Description: A vulnerability was found in the software, classified as problematic. It affects the file /endpoint/update.php, where the manipulation of the first name, middle name, and last name arguments...