Lucene search
+L

1430 matches found

NVD
NVD
•added 2024/09/17 11:15 p.m.•36 views

CVE-2024-44004

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows SQL Injection. This issue affects WPCargo Track & Trace: before 8.0.4...

9.8CVSS0.00462EPSS
SaveExploits1References1
OSV
OSV
•added 2024/09/17 11:15 p.m.•14 views

CVE-2024-44004

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPTaskForce WPCargo Track & Trace allows SQL Injection.This issue affects WPCargo Track & Trace: from n/a through 7.0.6...

9.8CVSS5.8AI score0.00462EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/09/17 10:27 p.m.•19 views

CVE-2024-44004 WordPress WPCargo Track & Trace plugin <= 8.0.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows SQL Injection.This issue affects WPCargo Track & Trace: from n/a through = 8.0.2...

9.3CVSS5.6AI score0.00462EPSS
SaveExploits1References1
CVE
CVE
•added 2024/09/17 10:27 p.m.•88 views

CVE-2024-44004

CVE-2024-44004 affects WP cargo Track & Trace (WordPress) plugin versions up to and including 7.0.6. The vulnerability is an unauthenticated SQL Injection caused by improper neutralization of input in WPCargo Track & Trace, leading to potential remote database manipulation. Public disclosures in ...

9.8CVSS5.7AI score0.00462EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2024/09/17 10:27 p.m.•56 views

CVE-2024-44004 WordPress WPCargo Track & Trace plugin <= 8.0.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows SQL Injection. This issue affects WPCargo Track & Trace: before 8.0.4...

9.3CVSS0.00462EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/17 12:00 a.m.•1 views

CVE-2024-44004: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows SQL Injection. This issue affects WPCargo Track & Trace: before 8.0.4...

9.8CVSS5.8AI score0.00462EPSS
SaveExploits1References2
Patchstack
Patchstack
•added 2024/09/16 5:43 a.m.•16 views

WordPress WPCargo Track & Trace plugin <= 8.0.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin WPCargo Track & Trace versions = 8.0.2...

9.8CVSS8.1AI score0.00462EPSS
SaveExploits1Affected Software1
Patchstack
Patchstack
•added 2024/09/16 12:00 a.m.•18 views

WordPress WPCargo Track & Trace Plugin <= 7.0.6 is vulnerable to SQL Injection

Software WPCargo Track & Trace Type Plugin Vulnerable versions = 7.0.6 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-44004 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID 8e07b930efd1 Credits LVT-tholv2k Required privilege...

9.8CVSS6.8AI score0.00462EPSS
SaveExploits1References2Affected Software1
SUSE CVE
SUSE CVE
•added 2024/09/12 2:51 a.m.•9 views

SUSE CVE-2024-45026

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix error recovery leading to data corruption on ESE devices Extent Space Efficient ESE or thin provisioned volumes need to be formatted on demand during usual IO processing. The dasdeseneedsformat function checks for...

5.5CVSS6.4AI score0.00239EPSS
SaveExploits0References19
OSV
OSV
•added 2024/09/11 4:15 p.m.•4 views

DEBIAN-CVE-2024-45026

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix error recovery leading to data corruption on ESE devices Extent Space Efficient ESE or thin provisioned volumes need to be formatted on demand during usual IO processing. The dasdeseneedsformat function checks for...

7.8CVSS6.1AI score0.00239EPSS
SaveExploits0References1
OSV
OSV
•added 2024/09/11 4:15 p.m.•15 views

AZL-49187 CVE-2024-45026 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix error recovery leading to data corruption on ESE devices Extent Space Efficient ESE or thin provisioned volumes need to be formatted on demand during usual IO processing. The dasdeseneedsformat function checks for...

7.8CVSS6.7AI score0.00239EPSS
SaveExploits0References1
OSV
OSV
•added 2024/09/11 4:15 p.m.•15 views

AZL-49266 CVE-2024-45026 affecting package kernel for versions less than 6.6.51.1-1

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix error recovery leading to data corruption on ESE devices Extent Space Efficient ESE or thin provisioned volumes need to be formatted on demand during usual IO processing. The dasdeseneedsformat function checks for...

7.8CVSS6.7AI score0.00239EPSS
SaveExploits0References1
OSV
OSV
•added 2024/09/11 4:15 p.m.•13 views

UBUNTU-CVE-2024-45026

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix error recovery leading to data corruption on ESE devices Extent Space Efficient ESE or thin provisioned volumes need to be formatted on demand during usual IO processing. The dasdeseneedsformat function checks for...

7.8CVSS6.5AI score0.00239EPSS
SaveExploits0References26
CVE
CVE
•added 2024/09/11 3:13 p.m.•181 views

CVE-2024-45026

CVE-2024-45026 : In the Linux kernel (s390 DASD), data corruption could occur on Extent Space Efficient (ESE) or thin-provisioned volumes during error scenarios. The root cause was an imprecise length check in dasd_ese_needs_format that could mis-handle certain transport errors, potentially corru...

7.8CVSS6.4AI score0.00239EPSS
SaveExploits0References8Affected Software1
Packet Storm
Packet Storm
•added 2024/09/01 12:00 a.m.•215 views

HTTP Verb Authentication Bypass Scanner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HTTP Verb Authentication Bypass Scanner', 'Description' = %q This module test for authentication bypass using different HTTP verbs. , 'Author' =...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2024/08/12 12:00 a.m.•203 views

Goati Track 1.0-2023 Insecure Settings

============================================================================================================================================= | Title : Gaati track v1.0-2023 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2024/08/09 12:00 a.m.•291 views

Gaati Track 1.0-2023 Insecure Direct Object Reference

==================================================================================================================================== | Title : Gaati track v1.0-2023 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits | | Vendor :...

7.4AI score
SaveExploits0
OSV
OSV
•added 2024/08/05 1:13 a.m.•7 views

MAL-2024-7889 Malicious code in permenmd-track (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db6efdc7a6ea747eacdf9b6dbd68c824e07aa445ac5c745fe847bf13866414c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/08/05 1:13 a.m.•7 views

Malicious code in permenmd-track (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db6efdc7a6ea747eacdf9b6dbd68c824e07aa445ac5c745fe847bf13866414c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
CNNVD
CNNVD
•added 2024/07/31 12:00 a.m.•13 views

Plug and Track Sensor Net Connect 安全漏洞

Plug and Track Sensor Net Connect is a smart sensor from the French company Plug and Track. It is used to monitor temperature, humidity, pressure, CO2 and other parameters. A security vulnerability exists in Plug and Track Sensor Net Connect version V2, which originates from the insertion of...

4.6CVSS6.5AI score0.00188EPSS
SaveExploits0References2
Rows per page
Query Builder