Lucene search
+L

4412 matches found

NVD
NVD
added 2024/10/25 6:15 p.m.25 views

CVE-2024-48448

An arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute arbitrary code via uploading a crafted HTML file into the tracker comments page...

6.1CVSS0.00359EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/25 12:00 a.m.13 views

CVE-2024-48448

An arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute arbitrary code via uploading a crafted HTML file into the tracker comments page...

7.6AI score0.00359EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/25 12:00 a.m.63 views

CVE-2024-48448

CVE-2024-48448 affects Huly Platform v0.6.295. The vulnerability is an arbitrary file upload that enables code execution by uploading a crafted HTML file to the tracker comments page. The available documents consistently identify the affected version and the file-upload vector but do not provide ...

6.1CVSS7.6AI score0.00359EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/25 12:00 a.m.6 views

Huly Platform 安全漏洞

Huly Platform is an all-in-one project management platform from Huly open source. A security vulnerability exists in Huly Platform version v0.6.295. An attacker can exploit the vulnerability to execute arbitrary code by uploading a specially crafted HTML file to the tracker comment page...

6.1CVSS7.4AI score0.00359EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/25 12:00 a.m.11 views

PT-2024-33114 · Unknown · Huly Platform

Name of the Vulnerable Software and Affected Versions: Huly Platform version 0.6.295 Description: The issue allows attackers to execute arbitrary code by uploading a crafted HTML file into the tracker comments page, potentially leading to code execution. Recommendations: For Huly Platform version...

6.1CVSS7.8AI score0.00359EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/10/25 12:00 a.m.29 views

CVE-2024-48448

An arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute arbitrary code via uploading a crafted HTML file into the tracker comments page...

0.00359EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/10/22 12:00 a.m.12 views

Debian dla-3933 : dmitry - security update

The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3933 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3933-1 [email protected]...

9.8CVSS8.6AI score0.04987EPSS
SaveExploits6References8
NVD
NVD
added 2024/10/20 10:15 a.m.23 views

CVE-2024-49617

Cross-Site Request Forgery CSRF vulnerability in anciwasim Back Link Tracker back-link-tracker allows Blind SQL Injection.This issue affects Back Link Tracker: from n/a through = 1.0.0...

8.8CVSS0.00221EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/20 10:15 a.m.19 views

CVE-2024-49617

Cross-Site Request Forgery CSRF vulnerability in Bhaskar Dhote Back Link Tracker allows Blind SQL Injection.This issue affects Back Link Tracker: from n/a through 1.0.0...

8.8CVSS5.8AI score0.00221EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/20 9:12 a.m.34 views

CVE-2024-49617 WordPress Back Link Tracker plugin <= 1.0.0 - CSRF to SQL Injection vulnerability

Cross-Site Request Forgery CSRF vulnerability in anciwasim Back Link Tracker back-link-tracker allows Blind SQL Injection.This issue affects Back Link Tracker: from n/a through = 1.0.0...

8.2CVSS0.00221EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/20 9:12 a.m.15 views

CVE-2024-49617 WordPress Back Link Tracker plugin <= 1.0.0 - CSRF to SQL Injection vulnerability

Cross-Site Request Forgery CSRF vulnerability in Bhaskar Dhote Back Link Tracker allows Blind SQL Injection.This issue affects Back Link Tracker: from n/a through 1.0.0...

8.2CVSS7.6AI score0.00221EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/20 9:12 a.m.57 views

CVE-2024-49617

CVE-2024-49617 affects the WordPress Back Link Tracker plugin (versions

8.8CVSS5.9AI score0.00221EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/10/20 12:00 a.m.19 views

PT-2024-33572 · Unknown · Bhaskar Dhote Back Link Tracker

Name of the Vulnerable Software and Affected Versions: Bhaskar Dhote Back Link Tracker versions n/a through 1.0.0 Description: The issue affects Bhaskar Dhote Back Link Tracker, allowing Blind SQL Injection via a Cross-Site Request Forgery CSRF vulnerability. This enables an attacker to inject...

8.8CVSS8.3AI score0.00221EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/10/20 12:00 a.m.9 views

WordPress plugin Back Link Tracker 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery...

8.8CVSS6.6AI score0.00221EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/10/18 10:56 a.m.7 views

WordPress Back Link Tracker plugin <= 1.0.0 - CSRF to SQL Injection vulnerability

CSRF to SQL Injection vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Back Link Tracker versions = 1.0.0...

8.8CVSS8.1AI score0.00221EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2024/10/18 10:15 a.m.9 views

CVE-2024-49224

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Mahesh Patel Mitm Bug Tracker allows Reflected XSS.This issue affects Mitm Bug Tracker: from n/a through 1.0...

6.1CVSS5.8AI score0.00262EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/18 10:15 a.m.25 views

CVE-2024-49224

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mahesh9696 Mitm Bug Tracker mitm-bug-tracker allows Reflected XSS.This issue affects Mitm Bug Tracker: from n/a through = 1.0...

7.1CVSS0.00262EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/18 9:58 a.m.13 views

CVE-2024-49224 WordPress Mitm Bug Tracker plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mahesh9696 Mitm Bug Tracker mitm-bug-tracker allows Reflected XSS.This issue affects Mitm Bug Tracker: from n/a through = 1.0...

7.1CVSS5.2AI score0.00262EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/18 9:58 a.m.40 views

CVE-2024-49224 WordPress Mitm Bug Tracker plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mahesh9696 Mitm Bug Tracker mitm-bug-tracker allows Reflected XSS.This issue affects Mitm Bug Tracker: from n/a through = 1.0...

7.1CVSS0.00262EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/18 9:58 a.m.51 views

CVE-2024-49224

CVE-2024-49224 is a Reflected XSS in the WordPress plugin Mitm Bug Tracker (versions n/a through 1.0). The vulnerability stems from improper input neutralization during web page generation, enabling reflected script execution. Affected software: Mitm Bug Tracker (WordPress) before or at 1.0. Publ...

7.1CVSS5.9AI score0.00262EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder