PYSEC-2024-252

PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/varargfunctions.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

WBSAirback Cross-Site Request Forgery Vulnerability

WBSAirback is a next generation storage and backup system from WBSAirback. A cross-site request forgery vulnerability exists in WBSAirback version 21.02.04, which can be exploited by an attacker to forge a malicious request to trick a victim into clicking on it to perform a sensitive operation...

WordPress Plugin Easy Textillate 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

WordPress Void Elementor WHMCS Elements For Elementor Page Builder plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Khalid Patchstack Alliance in WordPress Plugin Void Elementor WHMCS Elements For Elementor Page Builder versions = 2.0...

WordPress PeproDev Ultimate Invoice plugin <= 2.0.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin PeproDev Ultimate Invoice versions = 2.0.0...

PT-2024-14476 · WordPress · Wp Job Manager

Name of the Vulnerable Software and Affected Versions: WP Job Manager versions prior to 2.0.0 Description: A Missing Authorization issue has been identified. Recommendations: For versions prior to 2.0.0, update to version 2.0.0 or later to resolve the issue...

PT-2024-23924 · Unknown · Generate Child Theme

Name of the Vulnerable Software and Affected Versions: Generate Child Theme versions prior to 2.0 Description: A Cross-Site Request Forgery CSRF issue affects the Generate Child Theme. This issue can be exploited to perform unintended actions on a user's account. Recommendations: For versions pri...

CVE-2024-23734

Cross Site Request Forgery vulnerability in in the upload functionality of the User Profile pages in savignano S/Notify before 2.0.1 for Bitbucket allow attackers to replace S/MIME certificate or PGP keys for arbitrary users via crafted link...

WordPress Generate Child Theme plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Generate Child Theme versions = 2.0...

WordPress Change default login logo,url and title plugin <= 2.0 - CSRF to XSS vulnerability

CSRF to XSS vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin Change default login logo,url and title versions = 2.0...

HelpDeskZ Cross-Site Scripting Vulnerability

HelpDeskZ is a free PHP-based software that allows you to manage your site's support using a web-based support ticket system. Provides quality support. A cross-site scripting vulnerability exists in HelpDeskZ 2.0.2 and prior versions, which stems from the presence of a cross-site scripting XSS...

PT-2024-21422 · Uverif · Uverif

Name of the Vulnerable Software and Affected Versions: uverif version 2.0 Description: An issue in the software allows a remote attacker to obtain sensitive information. Recommendations: For uverif version 2.0, at the moment, there is no information about a newer version that contains a fix for...

PT-2024-20587

Name of the Vulnerable Software and Affected Versions Icinga Director versions 1.x Icinga Director versions 1.8 through 1.11 Description Icinga Director is a tool designed to make Icinga 2 configuration handling easy. Not any of Icinga Director's configuration forms used to manipulate the...

Tenda CP3 Security Vulnerability

Tenda CP3 is a smart camera from Tenda China. A security vulnerability exists in Tenda CP3 version V2.0 V11.10.00.2311090948, which originates from a vulnerability that allows a local attacker to obtain sensitive information via the password component...

CVE-2024-22551

WhatACart v2.0.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /site/default/search...

PT-2024-15754 · Unknown · Efs Easy File Sharing Ftp

Name of the Vulnerable Software and Affected Versions: EFS Easy File Sharing FTP version 2.0 Description: A problematic vulnerability was found in the software, affecting an unknown functionality. The manipulation of the username argument leads to denial of service. The attack can be launched...

Skoda Security Breach

Skoda is a line of automobiles from Skoda. A security vulnerability exists in the Skoda Superb III 3V3 version 2.0 TDI that stems from the Real-Time Streaming Protocol not properly handling requests for the /logs URI, allowing an attacker to launch a denial-of-service DOS attack on the infotainme...

PT-2023-29049 · Tv Bro · Tv Bro

Name of the Vulnerable Software and Affected Versions: com.phlox.tvwebbrowser TV Bro application through 2.0.0 for Android Description: The issue arises from the mishandling of external intents through WebView in the com.phlox.tvwebbrowser TV Bro application. This allows attackers to execute...

PT-2023-32879 · Unknown · Code-Projects Library Management System

Name of the Vulnerable Software and Affected Versions: code-projects Library Management System version 2.0 Description: A critical issue was found in the code-projects Library Management System, affecting the file /admin/login.php. The manipulation of the username argument leads to SQL injection...

WordPress plugin iframe Shortcode Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...