2526 matches found
PT-2024-19720 · WordPress · Recover Woocommerce Cart Abandonment
Name of the Vulnerable Software and Affected Versions: WooCommerce Cart Abandonment Recovery WordPress plugin versions prior to 1.2.27 Description: The issue concerns a lack of CSRF check in bulk actions, which could allow attackers to make logged-in admins delete arbitrary email templates as wel...
CVE-2024-22159
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional allows Reflected XSS.This issue affects WOLF – WordPress Posts Bulk Editor and Manager Professional: from n/a through 1.0.8...
CVE-2024-22159
CVE-2024-22159 affects WOLF – WordPress Posts Bulk Editor and Manager Professional (versions up to 1.0.8). The vulnerability is improper neutralization of input during web page generation, leading to a Reflected XSS. Impact is a client-side script injection through input that is not properly sani...
NSA Buying Bulk Surveillance Data on Americans without a Warrant
It finally admitted to buying bulk data on Americans from data brokers, in response to a query by Senator Weyden. This is almost certainly illegal, although the NSA maintains that it is legal until its told otherwise. Some news articles...
WOLF – WordPress Posts Bulk Editor and Manager Professional < 1.0.8.2 - Cross-Site Request Forgery
Description The WOLF – WordPress Posts Bulk Editor and Manager Professional plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8.1. This is due to missing or incorrect nonce validation on the wpbecreatenewterm, wpbeupdatetaxterm, and...
Exploit for Injection in Atlassian Confluence_Data_Center
Atlassian Confluence CVE-2023-22527 Scanner 🛡️ Overview 🌟...
Exploit for Command Injection in Ivanti Connect_Secure
🚨 CVE-2024-21887 Exploit Tool 🛠️ A robust tool for detecting...
GHSA-FHR7-8JX4-R9CP Infinispan REST Server's bulk read endpoints do not properly evaluate user permissions
A flaw was found in Infinispan's REST. Bulk read endpoints do not properly evaluate user permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions...
The vulnerability of the Bulk Modification Tool component in Nagios XI allows a hacker to execute arbitrary SQL code.
The vulnerability of the Bulk Modification Tool component in Nagios XI is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
CVE-2023-3628
A flaw was found in Infinispan's REST. Bulk read endpoints do not properly evaluate user permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions...
CVE-2023-3628
A flaw was found in Infinispan's REST. Bulk read endpoints do not properly evaluate user permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions...
CVE-2023-3628
A flaw was found in Infinispan's REST. Bulk read endpoints do not properly evaluate user permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions...
PT-2023-25509 · Unknown · Infinispan
Name of the Vulnerable Software and Affected Versions: Infinispan affected versions not specified Description: A flaw was found in Infinispan's REST, where bulk read endpoints do not properly evaluate user permissions for the operation. This issue could allow an authenticated user to access...
CVE-2023-48084
Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool...
CVE-2023-48084
Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool...
Sql injection
Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool...
CVE-2023-48084
Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool...
CVE-2023-48084
Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool...
Product Enquiry for WooCommerce < 3.1 - Cross-Site Request Forgery
Description The Product Enquiry for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.0. This is due to missing or incorrect nonce validation on the processbulkaction function. This makes it possible for unauthenticated attackers to...