WordPress plugin Boostify Header Footer Builder for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

PT-2024-34480 · Unknown · Itsourcecode Online Furniture Shopping Project

Name of the Vulnerable Software and Affected Versions: Itsourcecode Online Furniture Shopping Project version 1.0 Description: A SQL injection issue in orderview1.php allows remote attackers to execute arbitrary SQL commands via the id parameter. This enables attackers to manipulate database...

PT-2024-34481 · Unknown · Itsourcecode Construction Management System

Name of the Vulnerable Software and Affected Versions: Itsourcecode Construction Management System version 1.0 Description: A SQL injection issue in the print.php file allows remote attackers to execute arbitrary SQL commands via the map id parameter. This enables attackers to potentially extract...

CVE-2024-46889

A vulnerability has been identified in SINEC INS All versions V1.0 SP2 Update 3. The affected application uses hard-coded cryptographic key material to obfuscate configuration files. This could allow an attacker to learn that cryptographic key material through reverse engineering of the applicati...

net/http: Denial of service due to improper 100-continue handling in net/http

A flaw was found in Go. The net/http module mishandles specific server responses from HTTP/1.1 client requests. This issue may render a connection invalid and cause a denial of service...

kernel: firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files

A buffer overrun flaw exists in the Linux kernel when the strlen function is used on name fields in V1 wmfw files. This issue results in a loss of system availability...

WordPress Relais 2FA plugin <= 1.0 - Authentication Bypass vulnerability

Authentication Bypass vulnerability discovered by István Márton in WordPress Plugin Relais 2FA versions = 1.0...

SAP NetWeaver 安全漏洞

SAP NetWeaver is a set of integrated service-oriented application platforms from SAP, Germany. The platform provides a development and runtime environment for SAP applications. A security vulnerability exists in SAP NetWeaver version 1.1. The vulnerability stems from the fact that when a software...

SourceCodester Hospital Management System 代码注入漏洞

SourceCodester Hospital Management System is a SourceCodester open source hospital management system. A code injection vulnerability exists in SourceCodester Hospital Management System version 1.0, which stems from an incorrect manipulation of the parameter name that can lead to cross-site...

Job Recruitment 注入漏洞

Job Recruitment by code-projects is a job portal project developed using PHP, CSS, JavaScript, and MySQL technologies. An injection vulnerability exists in code-projects Job Recruitment version 1.0, which originates from an SQL injection vulnerability in the email parameter of the /login.php page...

WordPress Picsmize plugin <= 1.0.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Picsmize versions = 1.0.0...

CVE-2024-52352

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Andrew Milo Postcasa Shortcode allows DOM-Based XSS.This issue affects Postcasa Shortcode: from n/a through 1.0...

itsourcecode Tailoring Management System 注入漏洞

itsourcecode Tailoring Management System is a tailoring management system from itsourcecode open source. An injection vulnerability exists in version 1.0 of itsourcecode Tailoring Management System, which stems from an incorrect manipulation of the parameter inccat/desc/date/amount that can lead ...

1000 Projects Beauty Parlour Management System 注入漏洞

1000 Projects Beauty Parlour Management System is an open source beauty parlor management system from 1000 Projects. An injection vulnerability exists in version 1.0 of 1000 Projects Beauty Parlour Management System, which originates from the parameter adminname in the file...

Codezips Hospital Appointment System 注入漏洞

Codezips Hospital Appointment System is Codezips open source a hospital appointment system. An injection vulnerability exists in Codezips Hospital Appointment System version 1.0, which stems from the parameter ID/Name in the file /removeBranchResult.php that can lead to SQL injection...

WordPress plugin WP EASY RECIPE 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-34835 · Unknown · Cf7 Wow Styler

Name of the Vulnerable Software and Affected Versions: CF7 WOW Styler versions 1.6.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows Reflected XSS, which can be exploited...

PT-2024-34791 · Unknown · Chaser324 Featured Posts Scroll

Name of the Vulnerable Software and Affected Versions: Chaser324 Featured Posts Scroll versions 1.25 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

WordPress Stylish Internal Links plugin <= 1.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Zlrqh Patchstack Alliance in WordPress Plugin Stylish Internal Links versions = 1.9...

WordPress Rig Elements For Elementor plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Gab Patchstack Alliance in WordPress Plugin Rig Elements For Elementor versions = 1.0...