WordPress Plugin Visual Composer Premium Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-28668

DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to a flaw in the /dede/mychannel_add.php component. This vulnerability allows an attacker to perform unauthorized actions on behalf of a victim. As a temporary workaround, it is recommended to restrict access to the affe...

MSMS-PHP 1.0 SQL Injection

Title: MSMS-PHP by: oretnom23 v1.0 Multiple-SQLi Author: nu11secur1ty Date: 03/13/2024 Vendor: https://github.com/oretnom23 Software: https://www.sourcecodester.com/php/14924/online-mobile-store-management-system-using-php-free-source-code.html Reference:...

CVE-2024-28671

DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability located at the /dede/stepselect_main.php API endpoint. This flaw allows attackers to perform unauthorized actions via the web interface. As a temporary workaround, it is recommended to restrict access to this specific...

CVE-2024-28432

DedeCMS v5.7 contains a Cross-Site Request Forgery (CSRF) vulnerability within the /dede/article_edit.php component. This flaw allows an attacker to perform malicious requests on behalf of an authenticated user. While no patch is currently available, the recommended workaround is to restrict acce...

CVE-2024-28677

DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) attack via the /dede/article_keywords_main.php API endpoint. This vulnerability allows an attacker to perform unauthorized actions by leveraging a victim's active session. As a temporary workaround, users are advised to restrict ac...

CVE-2024-28121

CVE-2024-28121 affects StimulusReflex. A websocket payload targeting a reflex can trigger arbitrary method calls on the reflex instance, because the server locates the method and uses it (via public_send) without strict validation, risking unsafe methods (e.g., instance_variable_set, system). Thi...

CVE-2024-1304

Cross-site scripting vulnerability in Badger Meter Monitool that affects versions up to 4.6.3 and earlier. This vulnerability allows a remote attacker to send a specially crafted javascript payload to an authenticated user and partially hijack their browser session...

CVE-2024-1226

The CVE-2024-1226 entry concerns Rejetto Http File Server, where the software does not properly neutralize certain characters when data is placed in outgoing HTTP headers. This header injection can allow an attacker to control the HTTP response and potentially perform cross-site scripting and cac...

yallasave.ae Cross Site Scripting vulnerability OBB-3870014

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

barttrompstichting.nl Cross Site Scripting vulnerability OBB-3869906

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the /login.php component of the user registration and login system, PHP-MYSQL-User-Login-System, allows a hacker to gain unauthorized access to the application.

The vulnerability of the /login.php component of the PHP-MYSQL-User-Login-System registration and login system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the...

ciberspaces.net Cross Site Scripting vulnerability OBB-3868941

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Akaunting < 3.1.3 - RCE

Exploit Title: Akaunting 3.1.3 - RCE Date: 08/02/2024 Exploit Author: [email protected] Vendor Homepage: https://akaunting.com Software Link: https://github.com/akaunting/akaunting Version: = 3.1.3 Tested on: Ubuntu 22.04 CVE : CVE-2024-22836 !/usr/bin/python3 import sys import re import requests...

Elevate Your Web Monitoring Experience with Managed Web Monitoring

...

CVE-2024-23263

A logic issue in WebKit caused by insufficient validation allows an attacker to process maliciously crafted web content to prevent Content Security Policy from being enforced . This vulnerability affects Safari , iOS , iPadOS , macOS Sonoma , tvOS , visionOS , and watchOS . Remediation is availab...

PHP MySQL User Signup Login System SQL Injection Vulnerability

The PHP MySQL User Signup Login System is a login and registration form using HTML, PHP and MySQL. A SQL injection vulnerability exists in version 1.0 of the PHP MySQL User Signup Login System, which originates from an SQL injection vulnerability in the email parameter of the /login.php file...

CVE-2022-46091

The Online Flight Booking Management System v1.0 is vulnerable to a Cross Site Scripting (XSS) flaw within its feedback form. An attacker can execute arbitrary web scripts or HTML by injecting a crafted payload into the airline parameter, leading to the execution of malicious code on the client-s...

marcberniershow.com Cross Site Scripting vulnerability OBB-3865939

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mkingadc.go.tz Cross Site Scripting vulnerability OBB-3865703

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...