PT-2024-27731 · Digiteam · Digiteam

Name of the Vulnerable Software and Affected Versions: Digiteam version 4.21.0.0 Description: The issue is related to improper access control in the endpoint "/RoleMenuMapping/AddRoleMenu" of Digiteam, allowing authenticated attackers to escalate privileges. Recommendations: For Digiteam version...

Malicious code in @add-wallet-exchange/import-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 009dc7d5e85690b3a1fdfe88879a357c8277b755a5983e5e9bcadf1e2624af1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @add-wallet-exchange/reset (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb76748dbba1a0501ea786fecbf98f24109ef841f992cc7a4ebda7f06d6b95b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11934 Malicious code in @add-wallet-exchange/reset (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb76748dbba1a0501ea786fecbf98f24109ef841f992cc7a4ebda7f06d6b95b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

VulnCheck KEV: CVE-2022-23227

NUUO NVRmini2 devices contain a missing authentication vulnerability that allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users...

NUUO NVRmini2 Devices Missing Authentication Vulnerability

NUUO NVRmini2 devices contain a missing authentication vulnerability that allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users...

CVE-2024-55496

A vulnerability has been found in the 1000projects Bookstore Management System PHP MySQL Project 1.0. This issue affects some unknown functionality of addcompany.php. Actions on the delete parameter result in SQL injection...

CVE-2024-55496

A vulnerability has been found in the 1000projects Bookstore Management System PHP MySQL Project 1.0. This issue affects some unknown functionality of addcompany.php. Actions on the delete parameter result in SQL injection...

CVE-2024-55496

A vulnerability has been found in the 1000projects Bookstore Management System PHP MySQL Project 1.0. This issue affects some unknown functionality of addcompany.php. Actions on the delete parameter result in SQL injection...

1000 Projects Bookstore Management System 安全漏洞

1000 Projects Bookstore Management System is an open source bookstore management system from 1000 Projects. A security vulnerability exists in 1000 Projects Bookstore Management System v1.0, which stems from a parameter delete in the file addcompany.php that can lead to SQL injection...

CVE-2024-55104

Online Nurse Hiring System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the component /admin/add-nurse.php via the gender and emailid parameters...

CVE-2024-55104

Online Nurse Hiring System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the component /admin/add-nurse.php via the gender and emailid parameters...

CVE-2024-54428

Cross-Site Request Forgery CSRF vulnerability in onigetoc Add image to Post add-image-to-post allows Stored XSS.This issue affects Add image to Post: from n/a through = 0.6...

CVE-2024-54428 WordPress Add image to Post plugin <= 0.6 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in onigetoc Add image to Post add-image-to-post allows Stored XSS.This issue affects Add image to Post: from n/a through = 0.6...

CVE-2024-54428 WordPress Add image to Post plugin <= 0.6 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in onigetoc Add image to Post allows Stored XSS.This issue affects Add image to Post: from n/a through 0.6...

WordPress plugin Add image to Post 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forge...

Online Nurse Hiring System 安全漏洞

PHPGurukul Online Nurse Hiring System is an online nurse hiring system from PHPGurukul. A security vulnerability exists in Online Nurse Hiring System v1.0, which stems from an SQL injection vulnerability found in the component /admin/add-nurse.php via the gender and emailid parameters...

CVE-2024-55104

Online Nurse Hiring System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the component /admin/add-nurse.php via the gender and emailid parameters...

PT-2024-36317 · Unknown · Onigetoc Add Image To Post

Name of the Vulnerable Software and Affected Versions: onigetoc Add image to Post versions n/a through 0.6 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can perform actions on behalf of a user without their...

PT-2024-12476 · WordPress · Change Woocommerce Add To Cart Button Text

Name of the Vulnerable Software and Affected Versions: Change WooCommerce Add To Cart Button Text versions 1.3 and earlier Description: The issue affects the Change WooCommerce Add To Cart Button Text plugin, allowing exploitation of incorrectly configured access control security levels due to a...