CVE-2024-57608

An issue in Via Browser 6.1.0 allows a a remote attacker to execute arbitrary code via the mark.via.Shell component...

Viayoo Via Browser 安全漏洞

Viayoo Via Browser is a lightweight free Android web browser from Viayoo. A security vulnerability exists in Viayoo Via Browser version 6.1.0, which can be exploited for remote code execution via the mark.via...

CVE-2024-57608: Improper Neutralization of Special Elements used in a Command

An issue in Via Browser 6.1.0 allows a a remote attacker to execute arbitrary code via the mark.via.Shell component...

PT-2025-7792

Name of the Vulnerable Software and Affected Versions Via Browser version 6.1.0 Description The issue allows a remote attacker to execute arbitrary code via the mark.via.Shell component. Recommendations For Via Browser version 6.1.0, at the moment, there is no information about a newer version th...

CVE-2024-13235

The Pinpoint Booking System – 1 WordPress Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the 'language' parameter in all versions up to, and including, 2.9.9.5.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing...

mysql: MySQL Server: Denial of Service vulnerability via network access

A flaw was found in the MySQL Server product of Oracle MySQL. This vulnerability allows a remote attacker to cause a denial of service DoS...

PT-2025-5845 · Forever · Forever Kidswatch Call Me Kw50 +1

Name of the Vulnerable Software and Affected Versions: Forever KidsWatch Call Me KW-50 version R36 YDR A3PW GM7S V1.0 2019 07 15 16.19.24 cob h Forever KidsWatch Call Me KW-60 version R36CW YDE S4 A29 2 V1.0 2023.05.24 22.49.44 cob b Description: The issue allows a malicious user to obtain...

PT-2025-5808

Name of the Vulnerable Software and Affected Versions Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin for WordPress versions up to, and including, 1.27.6 Description The issue allows authenticated attackers, with Contributor-level access and above, to read the contents of...

CVE-2024-5314

Vulnerabilities in Dolibarr ERP - CRM that affect version 9.0.1 and allow SQL injection. These vulnerabilities could allow a remote attacker to send a specially crafted SQL query to the system and retrieve all the information stored in the database through the parameters sortorder y sortfield in...

SUSE CVE-2025-20088

Mattermost versions 10.2.x = 10.2.0, 9.11.x = 9.11.5, 10.0.x = 10.0.3, 10.1.x = 10.1.3 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post...

CVE-2024-56968

An issue in Shenzhen Intellirocks Tech Co. Ltd Govee Home iOS 6.5.01 allows attackers to access sensitive user information via supplying a crafted payload...

CVE-2025-20072

Mattermost Mobile versions = 2.22.0 fail to properly validate the style of proto supplied to an action's style in post.props.attachments, which allows an attacker to crash the mobile via crafted malicious input...

CVE-2024-55923 Cross-Site Request Forgery in Indexed Search Module in TYPO3

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery CSRF. Additionally, state-changing actions in downstrea...

RHSA-2024:1763

creationtimestamp| type| source ---|---|--- 2025-01-13 09:11:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1356 2025-05-12 23:29:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16071...

PT-2025-3543 · Unknown · Phpgurukul Land Record System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Land Record System version 1.0 Description: An OS Command Injection issue was found in the /landrecordsys/admin/dashboard.php file, allowing remote attackers to execute arbitrary code via the Cookie GET request parameter. This issu...

CVE-2024-12222

CVE-2024-12222 affects Deliver via Shipos for WooCommerce (WordPress) via Reflected XSS in the dvsfw_bulk_label_url parameter, impacting all versions up to 2.1.7. Exploitation requires a user to click a crafted link; attackers can inject scripts in pages that execute in the context of the victim....

CVE-2024-13249: Improper Ownership Management

Improper Ownership Management vulnerability in Drupal Node Access Rebuild Progressive allows Target Influence via Framing.This issue affects Node Access Rebuild Progressive: from 7.X-1.0 before 7.X-1.2...

WordPress plugin Deliver via Shipos for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

CVE-2024-12222: Improper Neutralization of Input During Web Page Generation

The Deliver via Shipos for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘dvsfwbulklabelurl’ parameter in all versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2024-13246: Improper Ownership Management

Improper Ownership Management vulnerability in Drupal Node Access Rebuild Progressive allows Target Influence via Framing.This issue affects Node Access Rebuild Progressive: from 0.0.0 before 2.0.2...