154 matches found
CVE-2025-24786 Path traversal opening Sqlite3 database in WhoDB
WhoDB is an open source database management tool. While the application only displays Sqlite3 databases present in the directory /db, there is no path traversal prevention in place. This allows an unauthenticated attacker to open any Sqlite3 database present on the host machine that the applicati...
RHSA-2015:0430 Red Hat Security Advisory: virt-who security, bug fix, and enhancement update
Bulletin has no description...
RHBA-2014:1513 Red Hat Bug Fix Advisory: virt-who bug fix and enhancement update
Bulletin has no description...
RHBA-2014:1206 Red Hat Bug Fix Advisory: virt-who bug fix and enhancement update
Bulletin has no description...
Titan FTP Server 6.26.630 SITE WHO Denial of Service
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Titan FTP Server 6.26.630 SITE WHO DoS', 'Description' = %q The Titan FTP server v6.26 build 630 can be DoS'd by issuing "SITE WHO". You need a...
CVE-2024-40096: Insertion of Sensitive Information into Log File
The com.cascadialabs.who aka Who - Caller ID, Spam Block application 15.0 for Android places sensitive information in the system log...
PT-2024-28781 · Unknown · Com.Cascadialabs.Who
Name of the Vulnerable Software and Affected Versions: com.cascadialabs.who aka Who - Caller ID, Spam Block version 15.0 Description: The issue concerns the placement of sensitive information in the system log by the application. Recommendations: For version 15.0, consider restricting access to...
Rapid7’s Ciara Cullinan Recognized as Community Trailblazer in Belfast Awards Program
At the 2024 Women Who Code She Rocks Awards, Rapid7 Software Engineer II Ciara Cullinan was recognized with their ‘Community Trailblazer’ award. According to Women Who Code, “This award celebrates the efforts of someone who brings people together and creates genuine connections in our tech...
WordPress Plugin Who Hit The Page SQL Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress Plugin Who Hit The Page suffers from a SQL...
CVE-2023-47558: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mahlamusa Who Hit The Page – Hit Counter allows SQL Injection.This issue affects Who Hit The Page – Hit Counter: from n/a through 1.4.14.3...
CVE-2023-46087
Cross-Site Request Forgery CSRF vulnerability in Mahlamusa Who Hit The Page – Hit Counter plugin = 1.4.14.3 versions...
CVE-2023-46087
CVE-2023-46087 describes a CSRF vulnerability in the WordPress plugin “Who Hit The Page – Hit Counter” by Mahlamusa, affecting versions 1.4.14.3 or apply vendor-provided CSRF mitigations. The CVE entry does not provide exploit specifics beyond the CSRF description, and the vulnerability impact i...
PT-2023-29836 · WordPress · Mahlamusa Who Hit The Page – Hit Counter
Name of the Vulnerable Software and Affected Versions: Mahlamusa Who Hit The Page – Hit Counter plugin versions = 1.4.14.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application tha...
CVE-2023-46087: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Mahlamusa Who Hit The Page – Hit Counter plugin = 1.4.14.3 versions...
CVE-2023-25466
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Mahlamusa Who Hit The Page – Hit Counter plugin = 1.4.14.3 versions...
CVE-2023-25466
The Mahlamusa Who Hit The Page – Hit Counter WordPress plugin, in versions
CVE-2023-25466: Improper Neutralization of Input During Web Page Generation
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Mahlamusa Who Hit The Page – Hit Counter plugin = 1.4.14.3 versions...
CVE-2023-27654
An issue found in WHOv.1.0.28, v.1.0.30, v.1.0.32 allows an attacker to cause a escalation of privileges via the TTMultiProvider component...
