EUVD-2023-48259

Malicious code in bioql PyPI...

CVE-2024-12432: Use of Insufficiently Random Values

The WPC Shop as a Customer for WooCommerce plugin for WordPress is vulnerable to account takeover and privilege escalation in all versions up to, and including, 1.2.8. This is due to the 'generatekey' function not producing a sufficiently random value. This makes it possible for authenticated...

CVE-2023-43899

CVE-2023-43899 affects Hansun CMS v1.0, with a SQL injection in the /ajax/ajax_login.ashx endpoint. The vulnerability is described across multiple sources (NVD, Red Hat, CVE lists, CNNVD, etc.) as a SQL injection risk, exposed to attackers with network access and no user interaction required. Aff...