CVE-2023-38964: Improper Neutralization of Input During Web Page Generation

Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2023-38964

Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2023-38964

CVE-2023-38964 affects Creative Item Academy LMS 6.0. The connected Nuclei template indicates a cross-site scripting (XSS) flaw exploitable through the query parameter, enabling injection of scripts into pages viewed by users. Impact per the sources includes potential data theft, session hijackin...

Creative Commons Attribution 3.0 SQL Injection

==================================================================================================================================== | Title : Creative Commons Attribution v3.0 Sql Injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro | | Vendor :...

WordPress Blocksy Companion Plugin <= 1.8.46 is vulnerable to Cross Site Scripting (XSS)

Software Blocksy Companion Type Plugin Vulnerable versions = 1.8.46 Fixed in 1.8.47 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Creative Themes PSID ec10715e354a Credits Rafie Muhammad Patchstack Requir...

Argon Dashboard 2 SQL Injection

==================================================================================================================================== | Title : Argon Dashboard 2 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 109.064-bit | |...

account.creative-minds.uk.com Cross Site Scripting vulnerability OBB-3279089

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Featured Post Creative Plugin <= 1.2.7 is vulnerable to Broken Access Control

Software Featured Post Creative Type Plugin Vulnerable versions = 1.2.7 Fixed in 1.2.8 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-30488 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 6ae105faf5be Credits Cat Required privilege...

CVE-2023-27771

An issue found in Wondershare Technology Co.,Ltd Creative Centerr v.1.0.8 allows a remote attacker to execute arbitrary commands via the wondershareCCsetupfull10819.exe file...

CVE-2023-27771

An issue found in Wondershare Technology Co.,Ltd Creative Centerr v.1.0.8 allows a remote attacker to execute arbitrary commands via the wondershareCCsetupfull10819.exe file...

Wondershare 代码问题漏洞

Wondershare is a data transfer tool. A security vulnerability exists in Wondershare Creative Centerr that originates from a command that can be executed remotely via wondershareCCsetupfull10819.exe...

CVE-2023-27771

An issue found in Wondershare Technology Co.,Ltd Creative Centerr v.1.0.8 allows a remote attacker to execute arbitrary commands via the wondershareCCsetupfull10819.exe file...

CVE-2023-27771

An issue found in Wondershare Technology Co.,Ltd Creative Centerr v.1.0.8 allows a remote attacker to execute arbitrary commands via the wondershareCCsetupfull10819.exe file...

PT-2023-21338 · Wondershare · Creative Center

Name of the Vulnerable Software and Affected Versions: Wondershare Technology Co.,Ltd Creative Centerr version 1.0.8 Description: An issue in the software allows a remote attacker to execute arbitrary commands via the wondershareCC setup full10819.exe file. Recommendations: For version 1.0.8,...

CVE-2023-27771

CVE-2023-27771 affects Wondershare Technology Co., Ltd. Creative Center v1.0.8. The vulnerability allows a remote attacker to execute arbitrary commands via the wondershareCC_setup_full10819.exe installer file. Public details describe the issue without detailing an official fixed version; some so...

CVE-2023-27771: Untrusted Search Path

An issue found in Wondershare Technology Co.,Ltd Creative Centerr v.1.0.8 allows a remote attacker to execute arbitrary commands via the wondershareCCsetupfull10819.exe file...

WordPress Creative Mail Plugin < 1.6.0 Multiple CSRF Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:constantcontact:creativemail"; if description...

The vulnerability of the graphic editor application for Adobe Creative Cloud Desktop Application lies in the use of an insecure search path, allowing a hacker to execute arbitrary code.

The vulnerability of the Adobe Creative Cloud Desktop Application lies in the use of an insecure search path. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2023-25992

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in CreativeMindsSolutions CM Answers plugin = 3.1.9 versions...

CVE-2023-26358

Creative Cloud version 5.9.1 and earlier is affected by an Untrusted Search Path vulnerability that might allow attackers to execute their own programs, access unauthorized data files, or modify configuration in unexpected ways. If the application uses a search path to locate critical resources...