CVE-2024-30985

SQL Injection vulnerability in "B/W Dates Reports" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "todate" and "fromdate" parameters...

CVE-2024-30985

SQL Injection vulnerability in "B/W Dates Reports" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "todate" and "fromdate" parameters...

CVE-2023-33806

Insecure default configurations in Hikvision Interactive Tablet DS-D5B86RB/B V2.3.0 build220119, allows attackers to execute arbitrary commands...

PT-2024-12442 · Hikvision · Hikvision Interactive Tablet Ds-D5B86Rb/B

Name of the Vulnerable Software and Affected Versions: Hikvision Interactive Tablet DS-D5B86RB/B version 2.3.0 build220119 Description: Insecure default configurations in the Hikvision Interactive Tablet allow attackers to execute arbitrary commands. Recommendations: For version 2.3.0 build220119...

b-da.ru Cross Site Scripting vulnerability OBB-3903400

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-25568

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands by sending a specially crafted request to the product. Affected products and versions are as follows: WRC-X3200GST3-B v1.25 and earlier, WRC-G01-W...

CVE-2024-26258

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with credentials to execute arbitrary OS commands by sending a specially crafted request to the product...

CVE-2024-26258

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with credentials to execute arbitrary OS commands by sending a specially crafted request to the product...

CVE-2024-26258

CVE-2024-26258 affects ELECOM wireless LAN routers, with a vulnerability in which a network-adjacent attacker who has credentials can execute OS commands by sending a crafted request. Concrete details from connected sources: Affected products and versions: ELECOM WRC-X3200GST3-B (versions 1.25 an...

CVE-2024-25568

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands by sending a specially crafted request to the product. Affected products and versions are as follows: WRC-X3200GST3-B v1.25 and earlier, WRC-G01-W...

CVE-2024-25568

CVE-2024-25568 is an OS command injection vulnerability in ELECOM wireless LAN routers. Affected: WRC-X3200GST3-B (v1.25 and earlier), WRC-G01-W (v1.24 and earlier), and WMC-X1800GST-B (v1.41 and earlier; included in e-Mesh Starter Kit “WMC-2LX-B”). A network-adjacent, unauthenticated attacker ca...

CVE-2024-25568

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands by sending a specially crafted request to the product. Affected products and versions are as follows: WRC-X3200GST3-B v1.25 and earlier, WRC-G01-W...

PT-2024-21010 · Elecom · Wmc-X1800Gst-B +2

Name of the Vulnerable Software and Affected Versions: ELECOM wireless LAN routers versions prior to v1.25 WRC-G01-W versions prior to v1.24 WMC-X1800GST-B versions prior to v1.41 Description: The issue allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands by sending...

CVE-2024-26685

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential bug in endbufferasyncwrite According to a syzbot report, endbufferasyncwrite, which handles the completion of block device writes, may detect abnormal condition of the buffer asyncwrite flag and cause a BUGO...

b-concept.fr Cross Site Scripting vulnerability OBB-3897427

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

B Slider - Slider for your block editor < 1.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The B Slider - Slider for your block editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level...

PT-2024-6580 · Hikvision · Hikvision Ds-7604Ni-K1/4P +1

Name of the Vulnerable Software and Affected Versions: Hikvision NVRs affected versions not specified Hikvision DS-7604NI-K1/4PB affected versions not specified Description: The issue is related to a NULL dereference pointer vulnerability. It is caused by insufficient validation of a parameter in...

CVE-2024-30432

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins B Slider - Slider for your block editor allows Stored XSS.This issue affects B Slider - Slider for your block editor: from n/a through 1.1.12...

CVE-2024-30432 WordPress B Slider plugin <= 1.1.12 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins B Slider - Slider for your block editor allows Stored XSS.This issue affects B Slider - Slider for your block editor: from n/a through 1.1.12...

CVE-2024-30432

CVE-2024-30432: B Slider – Slider for your block editor (WordPress) is affected by a Stored XSS due to improper neutralization of input during web page generation. Affected versions: up to 1.1.12 (no details on exact vulnerable input provided). The entry is marked as patched; remediation is to up...