WAGO 输入验证错误漏洞

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is designed for use in industrial environments where digital algorithms operate electronic systems. An input validation error vulnerability exists in the WAGO PFC200 Family, which can be exploited by an...

CVE-2023-36348

POS Codekop v2.0 was discovered to contain an authenticated remote code execution RCE vulnerability via the filename parameter...

CVE-2023-36348

POS Codekop v2.0 was discovered to contain an authenticated remote code execution RCE vulnerability via the filename parameter...

CVE-2023-36345

A Cross-Site Request Forgery CSRF in POS Codekop v2.0 allows attackers to escalate privileges...

CVE-2023-36346

POS Codekop v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the nmmember parameter at print.php...

golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests

A flaw was found in the net/http library of the golang package. This flaw allows an attacker to cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache...

POS Codekop 跨站脚本漏洞

POS Codekop is an application. A security vulnerability exists in POS Codekop version 2.0, which stems from the parameter nmmember containing a Reflected Cross-Site Scripting XSS vulnerability...

WordPress plugin Wp Ultimate Review 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

POS Codekop 安全漏洞

POS Codekop is an application. A security vulnerability exists in POS Codekop version 2.0 that stems from the presence of a remote code execution RCE vulnerability...

POS Codekop 跨站脚本漏洞

POS Codekop is an application. A security vulnerability exists in POS Codekop version 2.0, which stems from the presence of a cross-site request forgery CSRF vulnerability. An attacker can exploit the vulnerability to elevate privileges...

CVE-2023-27452

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Wow-Company Button Generator – easily Button Builder plugin = 2.3.3 versions...

WordPress plugin W4 Post List 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2023-3650 · Unknown · Spidercontrol Scada Web Server

Name of the Vulnerable Software and Affected Versions: SpiderControl SCADA Webserver versions 2.08 and prior Description: The issue exists due to incorrect restriction of the path name to a directory with limited access. Exploitation of this issue may allow a remote attacker to cause a...

TP-LINK TL-WR940N 缓冲区错误漏洞

The TP-LINK TL-WR940N is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK TL-WR940N that stems from a buffer out-of-bounds read issue in the component VirtualServerRPM, which can be exploited by an attacker to cause a denial of service DoS by constructing a...

CVE-2023-34596

A vulnerability in Aeotec WallMote Switch firmware v2.3 allows attackers to cause a Denial of Service DoS via a crafted Z-Wave message...

PT-2023-11553 · Yzcms · Yzcms

Name of the Vulnerable Software and Affected Versions: yzCMS version 2.0 Description: A Cross Site Request Forgery issue allows a remote attacker to execute arbitrary code via the token check function. Recommendations: For yzCMS version 2.0, update to a version that fixes the token check function...

Yzmcms 跨站请求伪造漏洞

Yzmcms is an open source CMS Content Management System for Yzmcms individual developers. A security vulnerability exists in Yzmcms version 2.0. Attackers use the vulnerability to execute arbitrary code through the token checking function...

Aeotec WallMote Switch 安全漏洞

Aeotec WallMote Switch is a switch from Aeotec. Aeotec WallMote Switch version v2.3 has a security vulnerability that stems from allowing an attacker to cause a denial of service DoS on the system via a specially crafted Z-Wave message...

Virtualsquare picoTCP 安全漏洞

Virtualsquare picoTCP is a free offshoot of PicoTCP from the Virtualsquare Personal Developer, originally distributed by Altran.be. A security vulnerability exists in VirtualSquare picoTCP version 2.1 and earlier versions that stems from the absence of certain calculations before attempting to se...

Virtualsquare picoTCP 代码问题漏洞

Virtualsquare picoTCP is a free offshoot of PicoTCP from the Virtualsquare Personal Developer, originally distributed by Altran.be. A security vulnerability exists in VirtualSquare picoTCP version 2.1 and earlier versions that stems from not properly checking the header size. An attacker exploiti...