National Keep CyberMath Cross-Site Request Forgery Vulnerability

National Keep CyberMath is a cybersecurity risk analysis tool for organizations from National Keep. A cross-site request forgery vulnerability exists in National Keep CyberMath versions v1.4 through v1.5 that stems from vulnerability to cross-site request forgery CSRF attacks...

CVE-2024-24945

A stored cross-site scripting XSS vulnerability in Travel Journal Using PHP and MySQL with Source Code v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Share Your Moments parameter at /travel-journal/write-journal.php...

CVE-2024-24041

A stored cross-site scripting XSS vulnerability in Travel Journal Using PHP and MySQL with Source Code v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the location parameter at /travel-journal/write-journal.php...

PT-2024-14249 · Unknown · Epiphyt Embed Privacy

Name of the Vulnerable Software and Affected Versions: Epiphyt Embed Privacy versions 1.8.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that an attacker can...

springboot-manager Security Vulnerability

springboot-manager is a backend management system based on SpringBoot + Thymeleaf + Layui + Apache Shiro + Redis + Mybatis Plus by Chinese liwenbin individual developer. A security vulnerability exists in springboot-manager v1.6, which stems from the system not filtering the suffix of uploaded...

springboot-manager Security Vulnerability

springboot-manager is a backend management system based on SpringBoot + Thymeleaf + Layui + Apache Shiro + Redis + Mybatis Plus by Chinese liwenbin individual developer. A security vulnerability exists in springboot-manager v1.6, which originates from an easy cross-site scripting attack via...

PT-2024-14162 · WordPress · Wpcs – Wordpress Currency Switcher Professional

Name of the Vulnerable Software and Affected Versions: WPCS – WordPress Currency Switcher Professional versions 1.2.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This mea...

CVE-2024-22291

Cross-Site Request Forgery CSRF vulnerability in Marco Milesi Browser Theme Color.This issue affects Browser Theme Color: from n/a through 1.3...

Free Open-Source Inventory Management System Security Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A security vulnerability exists in Free Open-Source Inventory Management System version v.1.0. A remote attacker can exploit this vulnerability to execute arbitrary code via the Stafflist parameter in...

YahooPOPs Security Vulnerabilities

YahooPOPs is an application from YahooPOPs that emulates a POP3/SMTP mail server and provides free POP3 and SMTP access to Yahoo! A security vulnerability exists in YahooPOPs version 1.6, which originates when the POP3 service allows remote denial of service via a long string on port 110 TCP...

Gabriels FTP Server Security Vulnerability

Gabriels FTP Server is a lightweight FTP service. A security vulnerability exists in Gabriels FTP Server version 1.2, which stems from the software containing unknown processing that can cause a denial of service via the parameter USERNAME...

Math Game with Leaderboard Security Breach

Math Game with Leaderboard is a math game with leaderboards by rems personal developer. A security vulnerability exists in Math Game with Leaderboard version 1.0, which originates from a cross-site scripting XSS attack on the Your Name field...

Daily Habit Tracker Security Vulnerability

Daily Habit Tracker is a daily habit tracker by rems personal developer. A security vulnerability exists in the Daily Habit Tracker App version 1.0, which stems from an SQL injection vulnerability in the tracker parameters...

PT-2024-20289 · Unknown · Sourcecodester Math Game With Leaderboard

Name of the Vulnerable Software and Affected Versions: Sourcecodester Math Game with Leaderboard version 1.0 Description: The issue concerns a Cross-Site Scripting XSS attack vulnerability. Specifically, the 'Your Name' field in the Submit Score section is affected. This type of attack occurs whe...

Login System with Email Verification Security Vulnerability

Login System with Email Verification is an email verification login system by rems Personal Developer. A security vulnerability exists in Login System with Email Verification version 1.0, which is caused by an SQL injection vulnerability in the user parameter...

GStreamer Security Vulnerability

GStreamer is a set of frameworks for processing streaming media. A security vulnerability exists in GStreamer version 1.0. An attacker could exploit this vulnerability to cause a denial of service in the application and could execute arbitrary code...

PT-2024-16083 · Unknown · Gabriels Ftp Server

Name of the Vulnerable Software and Affected Versions: Gabriels FTP Server version 1.2 Description: A problematic issue affects some unknown processing in the software. The manipulation of the USERNAME argument leads to denial of service. The attack may be initiated remotely. It is estimated that...

Malicious code in scrape-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2530d758bc3aef746b755284c655b0848bae0ae234051ea312ceecf75b13636b The OpenSSF Package Analysis project identified 'scrape-proxy' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-23896

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/stock.php, in the batchno parameter. Exploitation of this vulnerability could allo...

CVE-2024-23884 Cross-Site Scripting (XSS) vulnerability in Cups Easy

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/grnmodify.php, in the grndate parameter. Exploitation of this vulnerability could...