CVE-2024-8795

The BA Book Everything plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.20. This is due to missing or incorrect nonce validation on the myaccountupdate function. This makes it possible for unauthenticated attackers to update a user's accou...

CVE-2024-8795 BA Book Everything <= 1.6.20 - Cross-Site Request Forgery to Email Address Update/Account Takeover

The BA Book Everything plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.20. This is due to missing or incorrect nonce validation on the myaccountupdate function. This makes it possible for unauthenticated attackers to update a user's accou...

WordPress BA Book Everything plugin <= 1.6.20 - Unauthenticated Arbitrary User Password Reset vulnerability

Unauthenticated Arbitrary User Password Reset vulnerability discovered by wesley wcraft in WordPress Plugin BA Book Everything versions = 1.6.20...

WordPress BA Book Everything plugin <= 1.6.20 - Cross-Site Request Forgery to Email Address Update/Account Takeover vulnerability

Cross-Site Request Forgery to Email Address Update/Account Takeover vulnerability discovered by wesley wcraft in WordPress Plugin BA Book Everything versions = 1.6.20...

WordPress BA Book Everything Plugin <= 1.6.20 is vulnerable to Cross Site Request Forgery (CSRF)

Software BA Book Everything Type Plugin Vulnerable versions = 1.6.20 Fixed in 1.6.21 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-8795 Patch priority Low CVSS severity Low 8.8 Developer Claim ownership PSID ac1ae1bb0f23 Credits wesley wcraft...

WordPress plugin BA Book Everything 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2024-39258 · WordPress · Ba Book Everything

Name of the Vulnerable Software and Affected Versions: BA Book Everything plugin for WordPress versions up to, and including, 1.6.20 Description: The issue allows unauthenticated attackers to reset any user's passwords, including administrators, due to the reset user password function not verifyi...

WordPress plugin BA Book Everything 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-39259 · WordPress · Ba Book Everything

Name of the Vulnerable Software and Affected Versions: BA Book Everything plugin for WordPress versions up to, and including, 1.6.20 Description: The issue is due to missing or incorrect nonce validation on the my account update function, making it possible for unauthenticated attackers to update...

calibre: Multiple Vulnerabilities

Background calibre is a powerful and easy to use e-book manager. Description Multiple vulnerabilities have been discovered in calibre. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known...

Malicious code in traveller_intermediate_b1_student_s_book_pdf_rapidshare_updated__l5lei (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6b148f8c96a695465d4129ba838bdbb9bddf8877ef8ccc1c08f73f46c8fffe0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Debian dla-3862 : calibre - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3862 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3862-1 [email protected]...

Canon IR-Adv Password Extractor

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Canon IR-Adv Password Extractor', 'Description' = %q This module will extract the passwords from address books on various Canon IR-Adv mfp device...

[SECURITY] Fedora 40 Update: calibre-7.17.0-3.fc40

Calibre is meant to be a complete e-library solution. It includes library management, format conversion, news feeds to ebook conversion as well as e-book reader sync features. Calibre is primarily a ebook cataloging program. It manages your ebook collection for you. It is designed around the...

CVE-2024-42558

Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the bookid parameter at adminmodifyroom.php...

CVE-2024-42552

Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the bookid parameter at adminroomhistory.php...

PT-2024-30011 · Unknown · Hotel Management System

Name of the Vulnerable Software and Affected Versions: Hotel Management System version 91caab8 Description: A SQL injection vulnerability was discovered in the Hotel Management System via the book id parameter at the "admin room history.php" endpoint. This issue allows for potential unauthenticat...

Hotel-Management-System 安全漏洞

Hotel-Management-System is a hotel management system by the individual developer Vaibhav Verma. Hotel-Management-System has a security vulnerability that stems from the bookid parameter of adminmodifyroom.php containing an SQL injection vulnerability...

Hotel-Management-System 安全漏洞

Hotel-Management-System is a hotel management system by the individual developer Vaibhav Verma. Hotel-Management-System has a security vulnerability that stems from the bookid parameter of adminroomhistory.php containing an SQL injection vulnerability...

CVE-2024-6951

A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System 1.0. This affects an unknown part of the file admindelete.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to initiate the attack remotely. The explo...