Lucene search
+L

1639 matches found

Openbugbounty
Openbugbounty
added 2023/03/25 6:15 a.m.15 views

baseball-trading-cards.com Cross Site Scripting vulnerability OBB-3233477

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

5.9AI score
SaveExploits0
NVD
NVD
added 2023/03/22 9:15 p.m.19 views

CVE-2023-28662

The Gift Cards Gift Vouchers and Packages WordPress Plugin, version = 4.3.1, is affected by an unauthenticated SQL injection vulnerability in the template parameter in the wpgvdoajaxvoucherpdfsavefunc action...

9.8CVSS10AI score0.42186EPSS
SaveExploits2References1
OSV
OSV
added 2023/03/22 9:15 p.m.9 views

CVE-2023-28662

The Gift Cards Gift Vouchers and Packages WordPress Plugin, version = 4.3.1, is affected by an unauthenticated SQL injection vulnerability in the template parameter in the wpgvdoajaxvoucherpdfsavefunc action...

9.8CVSS7.3AI score0.42186EPSS
SaveExploits2References1
Prion
Prion
added 2023/03/22 9:15 p.m.27 views

Sql injection

The Gift Cards Gift Vouchers and Packages WordPress Plugin, version = 4.3.1, is affected by an unauthenticated SQL injection vulnerability in the template parameter in the wpgvdoajaxvoucherpdfsavefunc action...

7.5CVSS9.8AI score0.42186EPSS
SaveExploits2References1Affected Software1
CNNVD
CNNVD
added 2023/03/22 12:00 a.m.10 views

WordPress Plugin Gift Cards SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS8.7AI score0.42186EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
added 2023/03/22 12:00 a.m.11 views

PT-2023-21884 · WordPress · The Gift Cards (Gift Vouchers/Packages) Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: The Gift Cards Gift Vouchers and Packages WordPress Plugin version = 4.3.1 Description: The issue is an unauthenticated SQL injection vulnerability in the template parameter in the wpgv doajax voucher pdf save func action. Recommendations: Fo...

9.8CVSS9.6AI score0.42186EPSS
SaveExploits2References4
Vulnrichment
Vulnrichment
added 2023/03/22 12:00 a.m.10 views

CVE-2023-28662

The Gift Cards Gift Vouchers and Packages WordPress Plugin, version = 4.3.1, is affected by an unauthenticated SQL injection vulnerability in the template parameter in the wpgvdoajaxvoucherpdfsavefunc action...

10AI score0.42186EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2023/03/22 12:00 a.m.30 views

CVE-2023-28662

The Gift Cards Gift Vouchers and Packages WordPress Plugin, version = 4.3.1, is affected by an unauthenticated SQL injection vulnerability in the template parameter in the wpgvdoajaxvoucherpdfsavefunc action...

10AI score0.42186EPSS
SaveExploits2References1
CVE
CVE
added 2023/03/22 12:00 a.m.91 views

CVE-2023-28662

The CVE-2023-28662 entry concerns the WordPress Gift Cards (Gift Vouchers and Packages) plugin, affected versions 4.3.1 and earlier. The vulnerability is an unauthenticated SQL injection in the template parameter of the wpgv_doajax_voucher_pdf_save_func action, enabling arbitrary data access via ...

9.8CVSS9.8AI score0.42186EPSS
SaveExploits2References1Affected Software1
Kitploit
Kitploit
added 2023/03/07 11:30 a.m.102 views

DataSurgeon - Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Secuirty Numbers And More From Text

DataSurgeon ds is a versatile tool designed for incident response, penetration testing, and CTF challenges. It allows for the extraction of various types of sensitive information including emails, phone numbers, hashes, credit cards, URLs, IP addresses, MAC addresses, SRV DNS records and a lot...

7.1AI score
SaveExploits0References5
CNNVD
CNNVD
added 2023/03/04 12:00 a.m.8 views

Artesãos SEOTools 输入验证错误漏洞

SEOTools is an Artesãos open source SEO tool for Laravel and Lumen. Artesãos SEOTools prior to version 0.17.2 has an input validation error vulnerability that stems from a problem with the function eachValue in the file TwitterCards.php, where manipulation of the parameter value results in an ope...

6.1CVSS5.5AI score0.00582EPSS
SaveExploits1References6
NVD
NVD
added 2023/03/02 11:15 p.m.43 views

CVE-2022-40633

A malicious actor can clone access cards used to open control cabinets secured with Rittal CMC III locks...

4.6CVSS4.7AI score0.00261EPSS
SaveExploits0References1
Prion
Prion
added 2023/03/02 11:15 p.m.28 views

Design/Logic Flaw

A malicious actor can clone access cards used to open control cabinets secured with Rittal CMC III locks...

2.1CVSS4.7AI score0.00261EPSS
SaveExploits0References1
CVE
CVE
added 2023/03/02 10:18 p.m.62 views

CVE-2022-40633

CVE-2022-40633 affects Rittal CMC III control cabinet locks. The root issue is Improper Access Control, enabling a malicious actor to clone access cards to open cabinets. Public sources describe the impact as unauthorized physical access to secured cabinets, with CVSSv3 base metrics (AV: Physical...

4.6CVSS4.7AI score0.00261EPSS
SaveExploits0References1Affected Software1
HackRead
HackRead
added 2023/03/02 1:36 a.m.93 views

BidenCash Market Leaks 2M Credit Cards in Birthday Blitz

By Waqas As analyzed by Hackread.com, the leaked details contain over 500,000 email addresses along with credit card numbers and CVV codes in plain text. This is a post from HackRead.com Read the original post: BidenCash Market Leaks 2M Credit Cards in Birthday Blitz...

1.8AI score
SaveExploits0
F5 Networks
F5 Networks
added 2023/02/21 7:49 p.m.11 views

K6027: FIPS hardware vulnerability - nCipher Advisory #14

Security Advisory Description Note: Versions that are not listed in this Solution have not been evaluated for vulnerability to this security advisory. For information about F5 Networks' security policy regarding evaluating older and unsupported versions of F5 Networks products, refer to SOL4602:...

6.8AI score
SaveExploits0
F5 Networks
F5 Networks
added 2023/02/21 6:47 p.m.39 views

K91158923: BIG-IP SSL/TLS ADH/DHE vulnerability CVE-2020-5929

Security Advisory Description BIG-IP platforms with Cavium Nitrox SSL hardware acceleration cards, a virtual server configured with a Client SSL profile, and using Anonymous Diffie-Hellman ADH or Ephemeral Diffie-Hellman DHE key exchange and Single DH use option not enabled in the options list ma...

5.9CVSS6.1AI score0.01088EPSS
SaveExploits0Affected Software14
Krebs on Security
Krebs on Security
added 2023/02/17 9:09 p.m.18 views

New Protections for Food Benefits Stolen by Skimmers

Millions of Americans receiving food assistance benefits just earned a new right that they cant yet enforce: The right to be reimbursed if funds on their Electronic Benefit Transfer EBT cards are stolen by card skimming devices secretly installed at cash machines and grocery store checkout lanes...

7AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2023/02/15 6:08 a.m.6 views

SUSE CVE-2008-2235

OpenSC before 0.11.5 uses weak permissions ADMIN file control information of 00 for the 5015 directory on smart cards and USB crypto tokens running Siemens CardOS M4, which allows physically proximate attackers to change the PIN...

4.9CVSS6.7AI score0.00393EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:24 a.m.5 views

SUSE CVE-2018-16423

A double free when handling responses from a smartcard in scfilesetsecattr in libopensc/sc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

4.6CVSS7.9AI score0.0066EPSS
SaveExploits1References9
Rows per page
Query Builder