10736 matches found
WordPress plugin Error Log Viewer By WP Guru 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A path traversal vulnerability exists in...
PT-2025-1964 · Wp Guru · Error Log Viewer By Wp Guru
Name of the Vulnerable Software and Affected Versions: Error Log Viewer By WP Guru plugin for WordPress versions up to, and including, 1.0.1.3 Description: The issue allows unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information, vi...
WordPress Error Log Viewer plugin <= 1.0.1.3 - Missing Authorization to Unauthenticated Arbitrary File Read vulnerability
Missing Authorization to Unauthenticated Arbitrary File Read vulnerability discovered by yudha in WordPress Plugin Error Log Viewer versions = 1.0.1.3...
The vulnerability of the document viewer library in the web version of the eXpress communication system lies in the insufficient protection of the website structure, allowing attackers to execute arbitrary Java Script code.
The vulnerability of the document viewer library in the web version of the eXpress communication system is due to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary Java Script code by sending a specially crafted file...
A New Dawn for Storytelling: The Intersection of AI and Cinema
Discover how AI Artificial Intelligence transforms storytelling in filmmaking with scriptwriting, casting, editing, and immersive viewer experiences. The…...
CVE-2024-56256
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Andy Fragen Embed PDF Viewer embed-pdf-viewer.This issue affects Embed PDF Viewer: from n/a through = 2.3.1...
CVE-2024-56256
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Andy Fragen Embed PDF Viewer allows Stored XSS.This issue affects Embed PDF Viewer: from n/a through 2.3.1...
CVE-2024-56256 WordPress Embed PDF Viewer plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Andy Fragen Embed PDF Viewer embed-pdf-viewer.This issue affects Embed PDF Viewer: from n/a through = 2.3.1...
CVE-2024-56256 WordPress Embed PDF Viewer plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Andy Fragen Embed PDF Viewer embed-pdf-viewer.This issue affects Embed PDF Viewer: from n/a through = 2.3.1...
CVE-2024-56256
CVE-2024-56256 corresponds to a stored Cross-Site Scripting (XSS) flaw in the WordPress Embed PDF Viewer plugin (
WordPress plugin Embed PDF Viewer 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. WordPress plugin is an application plug-in. WordPress plugin Embed PDF Viewer...
PT-2024-36774 · Unknown · Embed Pdf Viewer
Name of the Vulnerable Software and Affected Versions: Embed PDF Viewer versions 2.3.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means an attacker can inject malicious script...
Malicious code in @awan_7715/model-viewer-space-opera (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e555e285993ff5179f3dad8424c83097053d02d6b4a91a72319eaabb6f1e6282 The OpenSSF Package Analysis project identified '@awan7715/model-viewer-space-opera' @ 1.1.1 npm as malicious. It is considered malicious becaus...
PT-2024-9963 · Unknown · Express Web Client
Name of the Vulnerable Software and Affected Versions: eXpress web client affected versions not specified Description: The issue is caused by insufficient protection of the web page structure in the document viewer library of the eXpress web client. This allows a remote attacker to execute...
eSigna eSignaViewer 安全漏洞
eSigna eSignaViewer is a visualization component from eSigna, Inc. A security vulnerability exists in eSigna eSignaViewer versions 1.0 through 1.5, which stems from the presence of path traversal and insecure direct object references, allowing an attacker to access arbitrary files in the document...
WordPress Embed PDF Viewer plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ibnu Ubaeydillah Patchstack Alliance in WordPress Plugin Embed PDF Viewer versions = 2.3.1...
Malicious code in spinal-env-viewer-plugin-documentation-service (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3d2a0a560ea9b62097643b0b538b82a0eba36ef923886755262eeecca376650 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Lazarus group evolves its infection chain with old and new malware
Over the past few years, the Lazarus group has been distributing its malicious software by exploiting fake job opportunities targeting employees in various industries, including defense, aerospace, cryptocurrency, and other global sectors. This attack campaign is called the DeathNote campaign and...
Adobe Acrobat Reader 代码问题漏洞
Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDFs. A code issue vulnerability exists in Adobe Acrobat Reader that stems from a null pointer dereference...
Adobe Acrobat Reader Buffer Overflow Vulnerability (CNVD-2025-02839)
Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader has a security vulnerability that can be exploited by attackers to cause a sensitive memory leak...