72 matches found
Malicious code in 2.7m-views-in-boots-the-last-wish-2023-full-online-free-on-streaming-at-home (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1698 Malicious code in 2.7m-views-in-boots-the-last-wish-2023-full-online-free-on-streaming-at-home (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1697 Malicious code in 1.7m-views-in-boots-the-last-wish-2023-full-online-free-on-streaming-at-home (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in 1.7m-views-in-boots-the-last-wish-2023-full-online-free-on-streaming-at-home (npm)
--- -= Per source details. Do not edit below this line.=-...
wish-mental.com Improper Access Control vulnerability OBB-3817027
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
OpenCart 3.0.3.6 - Cross Site Request Forgery
Exploit Title: OpenCart 3.0.3.6 - Cross Site Request Forgery Date: 12-11-2020 Exploit Author: Mahendra Purbia Mah3Sec Vendor Homepage: https://www.opencart.com Software Link: https://www.opencart.com/index.php?route=cms/download Version: OpenCart CMS - 3.0.3.6 Tested on: Kali Linux Description:...
wish-style.com Cross Site Scripting vulnerability OBB-1321760
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
WordPress Easy Digital Downloads Wish Lists extension cross-site scripting vulnerability
WordPress is the WordPress Foundation's set of blogging platform using PHP language development. The platform supports setting up personal blog sites on PHP and MySQL servers.Easy Digital Downloads EDD Wish Lists extension is a product collection plugin used in it. A cross-site scripting...
CVE-2015-9531
The Easy Digital Downloads EDD Wish Lists extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...
CVE-2015-9531
The Easy Digital Downloads EDD Wish Lists extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...
WordPress my-wish-list plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. my-wish-list is a wish list plugin used in it. WordPress my-wish-list plugin version 1.4.2 before the existence of cross-site scriptin...
CVE-2015-9531: Improper Neutralization of Input During Web Page Generation
The Easy Digital Downloads EDD Wish Lists extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...
Cross site scripting
The my-wish-list plugin before 1.4.2 for WordPress has multiple XSS issues...
CVE-2015-9493
The my-wish-list plugin before 1.4.2 for WordPress has multiple XSS issues...
CVE-2015-9493
The CVE-2015-9493 entries target the WordPress plugin “my-wish-list”
CVE-2015-9493
The my-wish-list plugin before 1.4.2 for WordPress has multiple XSS issues...
CVE-2015-9493: Improper Neutralization of Input During Web Page Generation
The my-wish-list plugin before 1.4.2 for WordPress has multiple XSS issues...
PT-2019-7452
Name of the Vulnerable Software and Affected Versions my-wish-list plugin versions prior to 1.4.2 for WordPress Description The issue concerns multiple XSS problems. Recommendations For versions prior to 1.4.2, update to version 1.4.2 or later to resolve the issue...
CVE-2019-7315
Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera devices through 3.x are vulnerable to directory traversal via the web interface, as demonstrated by reading /etc/shadow. NOTE: this product is discontinued, and its final firmware version has this vulnerability 4.x versions exist only...
Directory traversal
Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera devices through 3.x are vulnerable to directory traversal via the web interface, as demonstrated by reading /etc/shadow. NOTE: this product is discontinued, and its final firmware version has this vulnerability 4.x versions exist only...